This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa File: 08bf3928-b054-3129-9d08-db2f618766b2.roa (raw, json) Hash identifier: otb3lMK6M2QMZjRMtv4osJ8IBrwFz1jORoLBW8qiIsE= Subject key identifier: 34:09:B5:C5:A1:E2:9A:E0:FE:16:74:F2:66:05:EA:B9:76:14:E5:EA Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584C1E90E52B28EC1374F171B7C0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 14061 IP address blocks: 138.68.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:90:e5:2b:28:ec:13:74:f1:71:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=db506fe2-b43a-43f8-a11b-ba61e008e34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1e:a8:45:fb:18:b9:5f:2c:f5:e2:ef:18:8e: ec:95:c4:c9:b4:61:f5:31:21:a1:47:a2:ec:63:c8: 9c:62:f7:2f:eb:4c:36:f8:b2:42:51:78:c5:f0:fe: a9:d3:f5:ef:af:5e:53:b4:73:01:f3:c7:0d:8e:ef: fe:13:8d:39:6f:cd:20:69:cf:af:d3:6d:5c:7b:5e: 0e:81:6b:bf:55:b8:c7:63:d9:6f:69:92:de:ef:95: 52:7e:f6:85:6a:7c:8f:13:b5:54:5d:23:c9:22:5c: ea:0f:ce:66:2d:b9:c1:8e:c3:d4:9b:45:38:94:4e: 75:b4:ec:2f:7b:d2:c9:82:26:f9:77:50:13:79:ed: 77:38:c2:be:e5:86:98:25:78:b3:56:e7:c7:55:01: 86:b2:35:b5:99:e5:cb:79:3f:70:0c:66:59:37:24: 85:b9:56:1b:12:b3:55:b2:10:18:d9:1b:c8:48:06: dd:82:ee:90:73:56:39:53:35:c6:3f:76:ad:3d:e3: 81:8d:44:bd:22:20:df:35:3e:6b:47:22:54:fc:2b: cc:10:85:92:5a:d0:9e:c3:e5:d6:3e:64:fe:ae:c8: af:ac:e4:e6:50:ea:c1:63:88:b1:f7:07:7f:86:66: 0d:a2:f3:2a:30:99:e5:75:94:7c:75:0d:b4:e7:74: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:09:B5:C5:A1:E2:9A:E0:FE:16:74:F2:66:05:EA:B9:76:14:E5:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/08bf3928-b054-3129-9d08-db2f618766b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 138.68.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:82:d1:4a:a6:a5:9e:09:b5:b6:a2:a4:0d:0d:2d:59:bc:d7: 9a:f5:0a:c8:b4:24:b8:94:ba:eb:79:0f:23:c3:01:1a:41:9e: 04:ce:45:b2:fd:08:a2:17:c2:a1:33:31:d2:7b:e0:2d:f3:e8: 74:13:08:63:f1:8e:b3:6c:1a:95:5b:fc:5f:3f:55:f5:04:e0: 11:4f:de:df:8d:21:f7:ac:9f:35:31:d4:a6:2a:95:ef:fe:18: af:68:b3:5e:b2:c9:44:17:a2:6f:28:d2:af:18:c5:6e:c8:b4: 2b:b1:c0:55:86:03:4f:89:e1:7d:1a:0c:48:c9:29:12:81:82: 61:30:1c:b7:c5:83:4e:8f:f7:93:6a:c7:92:04:eb:b7:b0:57: 5d:93:03:be:06:38:22:be:84:a3:f3:ea:91:1d:8f:b7:fa:57: 20:fc:ce:f0:f4:ea:3f:ee:03:16:2e:2a:30:bf:dd:b9:b4:b4: 5e:04:a6:47:17:15:ac:81:4a:56:4d:15:e5:c4:2d:a0:44:ed: 8d:d6:90:80:7c:e7:67:e4:b1:a9:d2:ee:bd:a5:61:12:36:17: 86:25:34:68:69:9a:1f:c9:ee:f8:64:1f:08:a4:4c:c3:04:16: 21:59:84:65:3a:2b:36:7b:1f:a1:76:7b:a7:b7:50:db:74:f6: 22:24:10:a0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEwekOUrKOwTdPFxt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk ZGI1MDZmZTItYjQzYS00M2Y4LWExMWItYmE2MWUwMDhlMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx6oRfsYuV8s9eLvGI7slcTJtGH1MSGhR6Ls Y8icYvcv60w2+LJCUXjF8P6p0/Xvr15TtHMB88cNju/+E405b80gac+v021ce14O gWu/VbjHY9lvaZLe75VSfvaFanyPE7VUXSPJIlzqD85mLbnBjsPUm0U4lE51tOwv e9LJgib5d1ATee13OMK+5YaYJXizVufHVQGGsjW1meXLeT9wDGZZNySFuVYbErNV shAY2RvISAbdgu6Qc1Y5UzXGP3atPeOBjUS9IiDfNT5rRyJU/CvMEIWSWtCew+XW PmT+rsivrOTmUOrBY4ix9wd/hmYNovMqMJnldZR8dQ2053SRbwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDQJtcWh4prg/hZ08mYF6rl2FOXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMDhiZjM5MjgtYjA1NC0z MTI5LTlkMDgtZGIyZjYxODc2NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAikQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdoLRSqalngm1tqKkDQ0tWbzXmvUKyLQkuJS663kPI8MBGkGeBM5Fsv0I ohfCoTMx0nvgLfPodBMIY/GOs2walVv8Xz9V9QTgEU/e340h96yfNTHUpiqV7/4Y r2izXrLJRBeibyjSrxjFbsi0K7HAVYYDT4nhfRoMSMkpEoGCYTAct8WDTo/3k2rH kgTrt7BXXZMDvgY4Ir6Eo/PqkR2Pt/pXIPzO8PTqP+4DFi4qML/dubS0XgSmRxcV rIFKVk0V5cQtoETtjdaQgHznZ+SxqdLuvaVhEjYXhiU0aGmaH8nu+GQfCKRMwwQW IVmEZTorNnsfoXZ7p7dQ23T2IiQQoA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:20 2025 by rpki-client