This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8ca76fe4-8f88-33e2-bda3-f8606881abf6.roa File: 8ca76fe4-8f88-33e2-bda3-f8606881abf6.roa (raw, json) Hash identifier: YqwwmdiJ+IfyVoRDR+8jAQOHt9l+QGAh2ZPpOJINalM= Subject key identifier: 72:F8:36:6C:73:F3:B1:B7:2F:69:CE:10:24:FE:9A:34:E3:12:1B:19 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C109B94668A59A7532E894500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8ca76fe4-8f88-33e2-bda3-f8606881abf6.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 3949 IP address blocks: 157.238.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:94:66:8a:59:a7:53:2e:89:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=ddaf137a-dca6-4145-8305-fe8dc6b0bccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:aa:86:8d:cd:8d:64:6a:56:62:53:7c:bc: 08:3f:ae:1f:bb:a9:5e:a0:4a:ab:d3:6c:83:e0:16: 0b:45:ae:c4:4c:a4:c8:6d:68:54:cd:51:4e:d9:af: 92:a7:b4:af:19:b8:18:ec:f1:33:2c:1b:f1:3b:2f: 95:58:ef:3f:71:73:86:0f:08:ec:4a:6a:4e:ea:5c: 4d:8d:1c:61:47:20:76:20:55:05:a3:6f:e0:f3:82: 3a:d7:3b:1a:20:88:15:38:b9:b9:33:78:f3:47:92: 2f:b0:be:44:07:2f:fb:35:cb:43:e2:4b:ce:ac:02: e7:e0:21:62:a6:5b:4e:6e:9a:75:d0:9c:ee:5d:2b: cf:b8:44:f0:6e:e8:c1:7f:e2:8d:33:2e:dc:61:fc: 3a:0f:6e:ab:35:2d:dd:18:0f:57:35:70:b5:22:d3: 67:d0:7a:6d:14:a9:d9:21:c3:ba:ca:98:e3:da:43: e3:ea:02:3c:6e:82:26:c5:cf:e3:4c:a6:8a:f7:6e: a7:fc:d0:f1:49:0f:b7:da:d2:b4:89:97:09:4b:69: 15:99:3a:14:88:fa:a2:01:df:e9:65:d4:fe:62:83: 28:aa:1e:aa:fb:c7:e0:24:7a:95:cf:cc:8c:8c:ac: 7f:b8:a7:f7:c4:7b:99:2c:fe:40:a0:66:8f:ee:f3: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:36:6C:73:F3:B1:B7:2F:69:CE:10:24:FE:9A:34:E3:12:1B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8ca76fe4-8f88-33e2-bda3-f8606881abf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6c:1f:59:29:16:78:1b:fd:da:30:0b:33:33:fb:3e:3c:98: 59:80:b0:05:e4:33:62:19:7b:c5:d0:17:c6:19:17:3f:ae:b5: 9a:6b:46:5f:91:a5:dd:0c:19:fa:05:aa:31:09:9c:f7:a6:7a: 35:f9:fd:18:6b:07:99:e2:37:c6:09:a7:04:9f:e2:37:ee:e1: 98:e7:2d:bc:fe:71:77:b8:f1:b3:c5:06:14:8f:3e:c5:a7:b9: 22:73:31:1e:d1:a7:32:ba:7c:0b:dd:7d:9f:fa:9a:70:46:dd: 71:82:25:cb:51:b9:7e:a3:c2:44:ce:78:49:9e:1c:7f:6b:60: 00:21:0c:9a:b2:c3:f9:05:63:d2:30:ce:95:59:5e:c0:b7:ab: 99:63:b4:09:8e:05:39:e5:35:0d:eb:21:a4:0f:bb:ea:4d:6f: 27:71:fe:f0:00:93:57:90:e9:58:62:75:bf:53:60:a8:22:0f: 39:b3:4a:ff:a1:31:93:c9:86:4d:58:23:6a:3c:ed:c2:22:1f: 55:5c:b5:11:6f:83:7e:0c:4c:1b:bf:84:7f:02:8d:23:7d:39: dd:47:38:cd:12:21:43:77:e5:02:27:a1:3c:92:eb:d1:b1:0f: ce:67:e7:6c:d1:0d:91:5a:c3:76:61:02:cc:54:4d:36:01:b6: 4a:47:a0:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm5RmilmnUy6JRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZGRhZjEzN2EtZGNhNi00MTQ1LTgzMDUtZmU4ZGM2YjBiY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb2qho3NjWRqVmJTfLwIP64fu6leoEqr02yD 4BYLRa7ETKTIbWhUzVFO2a+Sp7SvGbgY7PEzLBvxOy+VWO8/cXOGDwjsSmpO6lxN jRxhRyB2IFUFo2/g84I61zsaIIgVOLm5M3jzR5IvsL5EBy/7NctD4kvOrALn4CFi pltObpp10JzuXSvPuETwbujBf+KNMy7cYfw6D26rNS3dGA9XNXC1ItNn0HptFKnZ IcO6ypjj2kPj6gI8boImxc/jTKaK926n/NDxSQ+32tK0iZcJS2kVmToUiPqiAd/p ZdT+YoMoqh6q+8fgJHqVz8yMjKx/uKf3xHuZLP5AoGaP7vMi1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL4Nmxz87G3L2nOECT+mjTjEhsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGNhNzZmZTQtOGY4OC0z M2UyLWJkYTMtZjg2MDY4ODFhYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdsH1kpFngb/dowCzMz+z48mFmAsAXkM2IZe8XQF8YZFz+utZprRl+R pd0MGfoFqjEJnPemejX5/RhrB5niN8YJpwSf4jfu4ZjnLbz+cXe48bPFBhSPPsWn uSJzMR7RpzK6fAvdfZ/6mnBG3XGCJctRuX6jwkTOeEmeHH9rYAAhDJqyw/kFY9Iw zpVZXsC3q5ljtAmOBTnlNQ3rIaQPu+pNbydx/vAAk1eQ6Vhidb9TYKgiDzmzSv+h MZPJhk1YI2o87cIiH1VctRFvg34MTBu/hH8CjSN9Od1HOM0SIUN35QInoTyS69Gx D85n52zRDZFaw3ZhAsxUTTYBtkpHoBo= -----END CERTIFICATE-----Generated at Sat Dec 6 06:44:24 2025 by rpki-client