This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea68d356-808a-3d4e-8508-5ee2d96d7ef8.roa File: ea68d356-808a-3d4e-8508-5ee2d96d7ef8.roa (raw, json) Hash identifier: 26Pvp2EjxarRbDEf979eY4TVdhRPMca5V/wDy1xdGpA= Subject key identifier: 2C:7B:A9:76:B6:0E:F3:E8:3F:12:BE:75:6F:06:A0:5B:92:3D:6D:AF Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584BF8E0C0B1DF1C8250A4084C34 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea68d356-808a-3d4e-8508-5ee2d96d7ef8.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 22516 IP address blocks: 138.229.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:c0:b1:df:1c:82:50:a4:08:4c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=fd62dc29-0914-46e5-a75f-3a0ff349f989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a4:70:9a:b0:cb:f5:0e:ae:28:2b:75:53:9f: 82:f9:92:77:cd:8c:62:f0:40:52:6a:34:03:5f:3f: d5:09:92:61:42:ae:dc:8c:1b:aa:9c:4f:5a:0c:5c: b9:a7:18:e3:99:5b:ae:b4:6a:98:3a:74:42:92:01: eb:af:be:28:06:b6:ef:44:22:94:5f:9d:eb:e8:20: f4:ab:57:13:32:90:ff:37:a0:77:d8:29:4a:40:9c: d2:9f:fa:9b:0b:25:b9:99:41:9f:28:7e:b0:02:b0: 27:9a:63:54:f7:2e:a7:f5:82:19:80:fb:5c:98:9e: 72:4a:c8:40:ba:85:5f:27:fd:69:cf:73:90:6b:53: 7a:9f:6c:17:3e:4c:8a:02:e9:46:ac:ae:c6:95:ac: 16:c6:a0:ed:e0:80:e3:ba:53:dd:41:d6:b2:ef:d3: 85:c6:ea:2d:35:18:d2:70:b7:c1:16:d0:6c:62:9f: 56:9a:17:af:eb:5b:6a:28:b5:a5:a0:07:24:7c:c4: 68:d5:e9:2d:10:79:58:47:15:41:4e:2a:2c:90:97: e1:46:90:10:00:88:14:ab:fc:37:3e:3d:48:2c:9c: a5:7d:30:2b:9c:31:c1:79:1f:ce:b9:64:fe:3a:32: c5:e0:f7:e8:ee:15:90:0d:4e:8f:cb:9a:c0:60:ca: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7B:A9:76:B6:0E:F3:E8:3F:12:BE:75:6F:06:A0:5B:92:3D:6D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ea68d356-808a-3d4e-8508-5ee2d96d7ef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:81:28:91:c5:2f:06:ff:59:39:ca:16:7b:b2:e7:0b:96:eb: 4f:4f:90:1e:82:b7:81:cb:ca:a0:fe:a7:6a:84:85:7b:5b:7a: 24:05:ac:d2:a9:12:4b:63:78:d3:7a:d6:8e:07:fa:a5:17:8c: 2e:81:dc:1a:67:05:89:11:1d:8c:b1:da:48:96:a2:6f:40:09: f6:98:2a:b3:36:21:60:a8:4c:17:00:91:ed:34:5a:e7:09:d8: c5:47:4c:8b:40:05:3a:9e:2c:48:fd:18:55:e1:e8:a5:2b:fa: e7:14:e7:99:5e:0e:75:2d:de:2d:4a:26:b0:29:0d:9a:69:26: 40:d4:e5:c6:43:d0:92:47:8e:44:a0:02:c5:0d:ab:f0:94:b6: 25:bd:1c:f2:ea:e2:0e:a8:f9:18:0b:c4:aa:1c:a6:79:78:d9: c6:c8:04:53:dd:e9:01:96:3b:4d:12:59:7c:e2:32:e1:20:09: 87:b2:33:75:18:db:5f:cc:cf:5e:f8:3f:7f:b5:8b:3d:97:2e: 8c:5c:2b:2c:62:95:03:fe:5e:09:f3:7c:7c:e7:37:a4:e0:1f: 6f:9e:f3:d0:da:a5:40:a6:b6:7f:dc:78:85:cf:77:c5:9c:9d: 0f:49:49:28:43:99:70:d8:61:29:ed:99:60:26:e4:97:a5:83: 72:fc:00:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv44MCx3xyCUKQITDQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ2MmRjMjktMDkxNC00NmU1LWE3NWYtM2EwZmYzNDlmOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6RwmrDL9Q6uKCt1U5+C+ZJ3zYxi8EBSajQD Xz/VCZJhQq7cjBuqnE9aDFy5pxjjmVuutGqYOnRCkgHrr74oBrbvRCKUX53r6CD0 q1cTMpD/N6B32ClKQJzSn/qbCyW5mUGfKH6wArAnmmNU9y6n9YIZgPtcmJ5ySshA uoVfJ/1pz3OQa1N6n2wXPkyKAulGrK7GlawWxqDt4IDjulPdQday79OFxuotNRjS cLfBFtBsYp9Wmhev61tqKLWloAckfMRo1ektEHlYRxVBTioskJfhRpAQAIgUq/w3 Pj1ILJylfTArnDHBeR/OuWT+OjLF4Pfo7hWQDU6Py5rAYMoBrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCx7qXa2DvPoPxK+dW8GoFuSPW2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZWE2OGQzNTYtODA4YS0z ZDRlLTg1MDgtNWVlMmQ5NmQ3ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmBKJHFLwb/WTnKFnuy5wuW609PkB6Ct4HLyqD+p2qEhXtbeiQFrNKp EktjeNN61o4H+qUXjC6B3BpnBYkRHYyx2kiWom9ACfaYKrM2IWCoTBcAke00WucJ 2MVHTItABTqeLEj9GFXh6KUr+ucU55leDnUt3i1KJrApDZppJkDU5cZD0JJHjkSg AsUNq/CUtiW9HPLq4g6o+RgLxKocpnl42cbIBFPd6QGWO00SWXziMuEgCYeyM3UY 21/Mz174P3+1iz2XLoxcKyxilQP+XgnzfHznN6TgH2+e89DapUCmtn/ceIXPd8Wc nQ9JSShDmXDYYSntmWAm5Jelg3L8AN4= -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:35 2025 by rpki-client