This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5ae86e-a425-36ba-bb77-099ec100601e.roa File: 3b5ae86e-a425-36ba-bb77-099ec100601e.roa (raw, json) Hash identifier: imLjKTkV4hgNE96SBHCtppFBEKsa/h8VEsI9yNDPrkI= Subject key identifier: 08:F3:27:35:BF:91:B6:76:BD:5C:C1:09:DF:F1:34:2E:91:64:B8:73 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C16E14AC8148F8E4CE2FF3C00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5ae86e-a425-36ba-bb77-099ec100601e.roa Signing time: Fri 05 Dec 2025 19:56:21 +0000 ROA not before: Fri 05 Dec 2025 19:56:21 +0000 ROA not after: Thu 05 Mar 2026 19:56:21 +0000 asID: 154112 IP address blocks: 38.242.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:e1:4a:c8:14:8f:8e:4c:e2:ff:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 5 19:56:21 2025 GMT Not After : Mar 5 19:56:21 2026 GMT Subject: CN=863591b7-f8fa-4a48-8905-c1365c491d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:5a:b6:a7:ab:cd:a5:3f:79:ef:02:d4:30: 79:d5:62:99:56:55:72:03:d5:43:91:ad:7b:5f:0a: d8:92:00:96:7d:b0:58:d1:a7:bf:e6:4d:46:18:45: 09:74:19:a0:a9:21:7a:5d:f0:f5:9c:9a:cb:82:5f: 28:1c:c1:de:06:85:40:52:14:c7:70:3d:bd:cf:da: 1e:82:68:1d:29:36:03:6b:a2:c4:c0:6a:f2:f9:eb: e0:f5:10:35:09:d7:fb:c7:4b:51:f0:3a:80:75:1f: 89:75:70:c4:ab:81:44:92:6d:a6:d5:2b:28:7d:ea: 10:24:0c:3e:6a:43:bf:83:50:d0:86:73:db:b2:3d: 2f:28:5c:0c:ab:2d:d0:87:3b:01:20:f1:06:5a:09: f7:18:6a:7f:fa:cd:7f:93:49:95:93:6c:9b:f4:84: 6d:1c:61:40:af:c7:cd:5e:c6:69:ea:bc:dd:1b:c1: b0:7d:5a:ab:5f:eb:94:46:1f:2c:8a:7a:14:5d:2e: 94:ce:d7:27:3e:14:fa:47:91:85:e0:58:d5:cc:e9: 35:b6:89:5a:f6:bc:7a:d9:85:5a:39:42:0c:f0:5d: 36:1a:5a:cc:7c:40:e6:84:ff:ae:ae:1d:f2:a0:9f: dc:51:a1:6c:a6:f0:56:fc:c4:92:07:42:c9:9e:fc: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F3:27:35:BF:91:B6:76:BD:5C:C1:09:DF:F1:34:2E:91:64:B8:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5ae86e-a425-36ba-bb77-099ec100601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.242.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:37:2f:8f:df:b2:3e:4c:0d:79:80:f9:74:b8:af:ea:97:df: 53:dc:64:17:74:3c:bd:eb:fc:91:34:ef:9f:2c:e6:a4:8a:35: 54:fe:01:65:24:69:5d:e4:89:ef:0c:7a:eb:59:1a:9b:33:bc: c6:20:1d:de:a0:15:7a:9d:61:34:ab:0c:ff:08:06:b1:90:28: 54:46:ae:f8:e9:a6:bd:dc:ee:e7:dd:b5:67:9d:a6:50:ce:f9: ef:d9:9e:18:62:64:00:d8:f9:db:aa:01:36:84:ff:6c:64:54: 9f:e7:b0:84:52:b5:4d:9b:ca:84:82:3f:bf:7b:45:5d:fe:b6: 79:9c:37:43:6b:3a:e1:53:6a:6d:08:0e:2d:76:4b:26:56:07: 77:7e:d1:f7:b5:14:ec:fd:f1:74:0c:40:dd:4d:ac:cd:6f:5c: a3:20:93:b4:3b:ff:16:c1:5d:d1:6e:06:bd:cb:39:74:41:75: 9d:b8:ab:3f:7b:e2:44:58:c1:92:9b:a8:ae:0f:2a:77:f5:f0: fa:3f:2c:8f:23:c0:5b:9d:3a:4d:d5:e3:ec:f3:43:15:39:dd: 81:31:b8:32:88:cd:9b:f8:02:1c:b4:10:49:f9:67:89:ce:d3: 96:c2:f5:39:09:c7:27:d7:e6:e8:83:1e:cc:05:59:12:74:a2: 55:47:90:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwW4UrIFI+OTOL/PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIwNTE5NTYyMVoXDTI2MDMwNTE5NTYyMVowLzEtMCsGA1UEAxMk ODYzNTkxYjctZjhmYS00YTQ4LTg5MDUtYzEzNjVjNDkxZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifBatqerzaU/ee8C1DB51WKZVlVyA9VDka17 XwrYkgCWfbBY0ae/5k1GGEUJdBmgqSF6XfD1nJrLgl8oHMHeBoVAUhTHcD29z9oe gmgdKTYDa6LEwGry+evg9RA1Cdf7x0tR8DqAdR+JdXDEq4FEkm2m1SsofeoQJAw+ akO/g1DQhnPbsj0vKFwMqy3QhzsBIPEGWgn3GGp/+s1/k0mVk2yb9IRtHGFAr8fN XsZp6rzdG8GwfVqrX+uURh8sinoUXS6UztcnPhT6R5GF4FjVzOk1tola9rx62YVa OUIM8F02GlrMfEDmhP+urh3yoJ/cUaFspvBW/MSSB0LJnvzSjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjzJzW/kbZ2vVzBCd/xNC6RZLhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2I1YWU4NmUtYTQyNS0z NmJhLWJiNzctMDk5ZWMxMDA2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJvIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs3L4/fsj5MDXmA+XS4r+qX31PcZBd0PL3r/JE0758s5qSKNVT+AWUk aV3kie8MeutZGpszvMYgHd6gFXqdYTSrDP8IBrGQKFRGrvjppr3c7ufdtWedplDO +e/ZnhhiZADY+duqATaE/2xkVJ/nsIRStU2byoSCP797RV3+tnmcN0NrOuFTam0I Di12SyZWB3d+0fe1FOz98XQMQN1NrM1vXKMgk7Q7/xbBXdFuBr3LOXRBdZ24qz97 4kRYwZKbqK4PKnf18Po/LI8jwFudOk3V4+zzQxU53YExuDKIzZv4Ahy0EEn5Z4nO 05bC9TkJxyfX5uiDHswFWRJ0olVHkO0= -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:07 2025 by rpki-client