This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa File: d336f765-c7fe-3817-b529-a6906fb694ea.roa (raw, json) Hash identifier: X4YSo+fm5Tc+SBdzkhkaBkxUzap5q6JzBMrQIIT0UkA= Subject key identifier: 7B:66:C9:82:1D:9C:A3:C0:9E:55:05:AE:2C:9A:9B:F9:81:87:E5:46 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584C14CB5D6953EA117124FCEAC0 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 40628 IP address blocks: 204.61.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:5d:69:53:ea:11:71:24:fc:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=a780fb4c-a3de-4684-a057-84dfb6538faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:e9:74:bd:e4:57:0a:ea:04:b2:f6:99:db: d9:92:1a:27:bc:76:c6:6c:1b:73:6d:d4:73:0c:2b: ab:9d:4f:60:5d:2b:4d:3b:f5:8b:88:b5:2e:97:c2: b3:07:da:6e:89:1a:1c:05:7e:c5:99:9b:6e:0f:17: 83:d7:9d:ad:60:ab:e3:73:65:34:48:39:99:46:fd: e2:e7:34:79:44:5d:be:c8:b9:57:b6:0e:06:fe:04: b4:ca:d4:8b:44:e9:a9:49:07:b1:cd:67:ca:25:16: 8d:67:90:bc:09:7d:45:5c:c5:e3:ef:aa:53:54:67: 1e:75:de:b4:6d:89:48:7b:28:61:ae:69:42:6a:90: 4c:1e:b7:78:c3:1f:66:30:19:d2:83:19:0c:8f:12: e8:eb:ed:56:05:35:bf:74:ed:fc:39:9a:ba:aa:e5: 1e:19:38:9b:84:3b:b6:b6:a7:45:c4:99:73:34:0e: 94:bc:dc:4e:e0:6a:1b:c0:04:4a:19:94:86:eb:65: fe:82:34:f7:c6:fa:a7:4c:c3:c9:af:eb:5d:90:1d: 06:3f:2f:5a:01:e8:5c:1d:1c:eb:0a:93:18:04:a9: 08:45:7e:69:9b:d7:94:17:85:78:c3:d8:84:ab:10: f7:ed:f6:89:f2:b5:a1:b0:6a:21:4f:7e:4f:db:e6: 01:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:66:C9:82:1D:9C:A3:C0:9E:55:05:AE:2C:9A:9B:F9:81:87:E5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 204.61.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e8:28:57:a6:eb:23:df:f8:41:92:da:ae:65:2a:2b:59:5c: 68:db:4c:f6:ee:95:11:92:55:19:35:26:6a:b3:91:8b:b0:ff: bd:57:6b:38:ff:bd:f1:f7:7c:da:c6:67:46:89:cf:7c:f4:db: 09:6c:84:78:a4:8c:fe:98:20:f1:c0:04:8f:e7:84:6b:c1:6f: 8b:d7:b9:e8:3c:82:27:3c:a8:a6:64:35:0f:24:64:ce:aa:a9: 86:bf:d6:65:b2:73:03:3c:5a:b4:27:ab:03:b4:f2:93:cd:63: 6a:25:c5:b5:d0:71:17:e4:60:37:81:51:bb:dc:27:5a:60:0c: a4:b7:99:30:9f:04:05:cf:a3:1c:a6:bc:5c:66:e2:ad:0a:72: 28:e8:53:87:0b:16:9e:a3:96:68:ab:19:b7:f9:48:57:a3:47: 77:09:35:b0:ba:79:a5:b0:97:03:ef:21:03:68:8d:e9:84:cf: d6:be:42:ac:3e:11:c3:a4:25:0f:d4:67:a4:29:6b:1d:c7:9d: bd:8c:62:d5:52:b0:33:a6:54:63:f6:49:ba:f5:ba:b7:54:7d: f8:45:74:1c:f7:4e:1c:0b:ff:d0:4d:fb:ac:f9:00:3d:c5:1a: 6d:22:dc:35:bf:ce:e2:be:03:e2:42:31:14:16:45:b0:b5:e2: 71:45:d8:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwUy11pU+oRcST86sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk YTc4MGZiNGMtYTNkZS00Njg0LWEwNTctODRkZmI2NTM4ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaLpdL3kVwrqBLL2mdvZkhonvHbGbBtzbdRz DCurnU9gXStNO/WLiLUul8KzB9puiRocBX7FmZtuDxeD152tYKvjc2U0SDmZRv3i 5zR5RF2+yLlXtg4G/gS0ytSLROmpSQexzWfKJRaNZ5C8CX1FXMXj76pTVGcedd60 bYlIeyhhrmlCapBMHrd4wx9mMBnSgxkMjxLo6+1WBTW/dO38OZq6quUeGTibhDu2 tqdFxJlzNA6UvNxO4GobwARKGZSG62X+gjT3xvqnTMPJr+tdkB0GPy9aAehcHRzr CpMYBKkIRX5pm9eUF4V4w9iEqxD37faJ8rWhsGohT35P2+YBpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtmyYIdnKPAnlUFriyam/mBh+VGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvZDMzNmY3NjUtYzdmZS0z ODE3LWI1MjktYTY5MDZmYjY5NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzD0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABroKFem6yPf+EGS2q5lKitZXGjbTPbulRGSVRk1JmqzkYuw/71Xazj/ vfH3fNrGZ0aJz3z02wlshHikjP6YIPHABI/nhGvBb4vXueg8gic8qKZkNQ8kZM6q qYa/1mWycwM8WrQnqwO08pPNY2olxbXQcRfkYDeBUbvcJ1pgDKS3mTCfBAXPoxym vFxm4q0KcijoU4cLFp6jlmirGbf5SFejR3cJNbC6eaWwlwPvIQNojemEz9a+Qqw+ EcOkJQ/UZ6Qpax3Hnb2MYtVSsDOmVGP2Sbr1urdUffhFdBz3ThwL/9BN+6z5AD3F Gm0i3DW/zuK+A+JCMRQWRbC14nFF2Ok= -----END CERTIFICATE-----Generated at Sat Dec 6 18:17:42 2025 by rpki-client