This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa File: cf72ba59-053f-3de2-833b-4c405ca166b0.roa (raw, json) Hash identifier: rXnYhHlJHQGvEN/K7wVx4l5RuOoSgfrQi2NvLTkPiM4= Subject key identifier: 9F:0A:16:E2:11:20:ED:18:88:29:7A:1E:C8:92:67:64:9E:B2:BD:D1 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BCF0042C1DA82F4A36F8CD040 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 14061 IP address blocks: 209.38.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:42:c1:da:82:f4:a3:6f:8c:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=2e44cd2e-6690-4951-8a41-c71cfc08649e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ed:aa:79:2c:08:90:b0:ed:40:8e:64:18:6f: e5:57:ee:72:6a:e5:cc:70:39:8d:6d:c0:a3:93:03: 50:6e:7e:85:59:92:06:45:fe:8f:50:5e:fa:20:e4: 05:45:fc:ca:94:a5:33:4f:76:77:e6:cb:19:b0:19: 3f:8e:27:69:7c:5a:0f:21:ef:79:da:f0:ba:c5:26: 5a:2c:42:7d:5c:58:bb:af:39:b5:3a:73:77:c2:1c: dc:0e:43:7a:32:be:24:ef:14:c3:65:9b:4b:07:8a: 58:9b:22:7d:7d:63:db:74:09:bc:ef:7d:3b:5b:09: 39:8d:25:8c:4f:07:7b:1e:c2:54:dc:ae:d9:86:f8: 9c:21:d1:ea:4e:66:d7:e9:23:06:f4:06:c1:e2:5a: e1:be:1f:48:6b:07:6b:77:8a:bd:a2:f1:37:80:54: 29:06:81:76:0f:e9:38:33:f4:56:a3:7c:c5:28:c4: e8:79:cc:72:bd:e1:51:bb:29:d7:39:8e:46:83:a2: 83:76:0d:79:55:93:cf:0a:81:09:f1:3a:b9:4a:1e: ca:4b:1b:7f:10:39:20:6f:56:1c:8c:76:ea:98:04: a3:52:e7:5d:fe:3b:c8:bd:a8:c5:0e:9e:53:60:1d: b3:d0:95:c1:5e:26:e5:2c:50:95:44:94:0e:8c:35: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0A:16:E2:11:20:ED:18:88:29:7A:1E:C8:92:67:64:9E:B2:BD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cf72ba59-053f-3de2-833b-4c405ca166b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:38:5c:ee:2b:b0:b5:de:8e:b9:ff:c5:01:db:63:6e:64:04: 9c:ca:2f:2b:77:7f:53:89:a9:48:ec:4b:d0:51:a8:18:82:0e: 00:22:49:b2:91:94:4d:96:3a:c4:f5:ce:d6:f3:0e:61:13:9a: 54:e1:70:00:e4:bd:5f:23:38:32:66:2a:f4:79:e2:d4:93:28: d0:c4:5d:3f:46:70:0d:f2:9b:c3:87:d2:c1:e8:29:05:69:7a: 1e:6f:3e:ab:14:f6:d8:42:6f:c9:1c:bf:a1:5d:5d:02:82:46: e9:16:e0:e2:5b:be:2c:7e:d9:5e:10:a0:05:1a:e4:79:bf:61: 07:64:88:9a:82:da:fa:f4:ac:3f:5e:91:35:93:ad:e8:e8:a4: 3e:29:55:be:70:e0:6a:92:4e:72:15:8c:d9:4b:3c:d6:0b:96: 1e:ea:4e:46:39:e5:62:90:ef:94:45:4d:54:89:75:a0:8e:c3: c9:3b:1f:83:f4:94:7d:e9:73:4b:68:96:54:81:1e:ef:2f:cf: c6:a1:d4:f3:b5:df:69:8c:78:be:57:24:f1:f4:c4:fd:5e:8f: 0f:53:7e:f3:f6:b5:16:b3:93:68:b8:97:a8:0d:c1:ac:aa:36: a4:f6:34:53:84:5c:86:97:b0:9d:b7:35:7f:0a:73:3e:07:77: 75:53:48:65 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEvPAELB2oL0o2+M0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk MmU0NGNkMmUtNjY5MC00OTUxLThhNDEtYzcxY2ZjMDg2NDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu2qeSwIkLDtQI5kGG/lV+5yauXMcDmNbcCj kwNQbn6FWZIGRf6PUF76IOQFRfzKlKUzT3Z35ssZsBk/jidpfFoPIe952vC6xSZa LEJ9XFi7rzm1OnN3whzcDkN6Mr4k7xTDZZtLB4pYmyJ9fWPbdAm87307Wwk5jSWM Twd7HsJU3K7ZhvicIdHqTmbX6SMG9AbB4lrhvh9Iawdrd4q9ovE3gFQpBoF2D+k4 M/RWo3zFKMToecxyveFRuynXOY5Gg6KDdg15VZPPCoEJ8Tq5Sh7KSxt/EDkgb1Yc jHbqmASjUudd/jvIvajFDp5TYB2z0JXBXiblLFCVRJQOjDV7eQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ8KFuIRIO0YiCl6HsiSZ2Sesr3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvY2Y3MmJhNTktMDUzZi0z ZGUyLTgzM2ItNGM0MDVjYTE2NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0SYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAyjhc7iuwtd6Ouf/FAdtjbmQEnMovK3d/U4mpSOxL0FGoGIIOACJJspGU TZY6xPXO1vMOYROaVOFwAOS9XyM4MmYq9Hni1JMo0MRdP0ZwDfKbw4fSwegpBWl6 Hm8+qxT22EJvyRy/oV1dAoJG6Rbg4lu+LH7ZXhCgBRrkeb9hB2SImoLa+vSsP16R NZOt6OikPilVvnDgapJOchWM2Us81guWHupORjnlYpDvlEVNVIl1oI7DyTsfg/SU felzS2iWVIEe7y/PxqHU87XfaYx4vlck8fTE/V6PD1N+8/a1FrOTaLiXqA3BrKo2 pPY0U4Rchpewnbc1fwpzPgd3dVNIZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:24 2025 by rpki-client