This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a24f0558-18cf-3fa7-9320-05ac0449745d.roa File: a24f0558-18cf-3fa7-9320-05ac0449745d.roa (raw, json) Hash identifier: pxV7sFdqajmgF/xCPUS+7NaKYL42EjjO51yaOxfMShk= Subject key identifier: EA:FC:3D:FA:7D:29:F3:08:D5:67:2A:38:06:00:D1:05:B1:36:1D:CC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C0B188AB19C9284F6A060BA70 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a24f0558-18cf-3fa7-9320-05ac0449745d.roa Signing time: Mon 01 Dec 2025 14:37:59 +0000 ROA not before: Mon 01 Dec 2025 14:37:59 +0000 ROA not after: Sun 01 Mar 2026 14:37:59 +0000 asID: 273245 IP address blocks: 38.58.170.0/23 maxlen: 23 38.210.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:18:8a:b1:9c:92:84:f6:a0:60:ba:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 1 14:37:59 2025 GMT Not After : Mar 1 14:37:59 2026 GMT Subject: CN=7a8dc0f5-5f31-4a5e-8de7-8f3b42d5d160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:0b:95:35:81:e9:54:37:f2:79:1c:20:a6: b2:46:d2:d1:4e:ee:4d:c1:32:66:73:d2:a2:7d:bf: a0:62:98:b1:a7:70:22:fc:9b:3e:00:5a:92:c4:e0: 53:94:5b:50:17:e0:5b:97:92:6a:5b:26:5c:2f:93: cd:c9:66:c0:d6:aa:31:74:58:92:eb:7d:ed:c4:8f: 1c:6c:ad:1b:bb:75:61:41:d7:85:74:3c:bc:1c:ad: 61:4d:c8:ed:43:b7:00:48:36:17:62:ef:63:37:1f: 39:9a:50:18:e0:16:91:e1:1d:de:2e:3d:68:12:3e: 69:83:c4:b0:8d:a6:39:87:36:57:09:38:97:ad:58: c6:9a:a5:29:32:1a:d2:0d:eb:cc:9b:78:c4:65:a7: 5c:c6:10:81:c9:38:01:41:84:09:d0:06:a5:97:38: d2:86:be:37:68:22:fd:2b:d7:ac:f6:a9:95:33:8c: f2:7d:58:0e:6a:26:fb:6a:59:f6:a6:bd:0d:ef:18: bc:7d:13:d7:f6:ce:39:1a:a2:03:cc:d9:a6:6d:5b: 58:59:74:3f:27:7d:18:b3:26:d7:83:f8:43:75:ce: 09:53:af:ab:74:07:cb:dc:a3:d7:d8:a2:e2:e9:4d: 39:b7:7e:5f:fa:be:0c:c9:de:f9:d2:32:96:18:b8: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FC:3D:FA:7D:29:F3:08:D5:67:2A:38:06:00:D1:05:B1:36:1D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a24f0558-18cf-3fa7-9320-05ac0449745d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.170.0/23 38.210.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:59:2e:df:84:ea:cf:27:59:89:e8:49:48:e6:39:cf:32:eb: 63:04:54:fd:91:e3:80:b6:cb:fc:a0:49:c6:a4:8b:29:94:b1: 52:2d:09:b9:04:3d:07:9d:d1:55:e3:76:b3:46:a3:1d:5d:9f: 81:7d:cb:bb:bf:54:a1:f6:6d:68:d7:8c:2f:62:ba:38:62:43: e3:b8:50:b2:58:5b:dc:55:e6:2c:61:a0:10:ec:c1:79:d2:96: 83:19:87:18:3e:37:c5:a0:77:03:7b:7d:46:d7:23:75:8c:cf: 15:24:e1:42:36:6d:e7:51:16:99:cb:b0:7c:d0:53:db:c5:1a: 0a:54:78:56:59:42:7e:ed:87:1b:cd:94:e4:b1:d3:4c:c9:66: dc:ca:1a:bd:ba:d3:9b:90:e8:18:c2:40:95:05:d8:51:86:25: ef:8f:7e:1d:f7:c7:7e:6e:47:03:87:1e:1a:b1:71:9c:0e:79: 40:3f:e9:a4:83:64:29:53:44:98:41:f6:3a:a2:86:70:76:d8: e1:84:e2:48:ff:0e:22:b8:22:44:d2:91:88:69:e5:3b:01:d4: 07:16:04:0f:fd:29:e7:22:85:fc:85:1d:1b:5e:9e:78:5d:cc: 03:cc:7f:46:78:3f:9e:79:9d:39:03:f0:98:fa:13:a9:1a:12: c3:21:c1:da -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEwLGIqxnJKE9qBgunAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIwMTE0Mzc1OVoXDTI2MDMwMTE0Mzc1OVowLzEtMCsGA1UEAxMk N2E4ZGMwZjUtNWYzMS00YTVlLThkZTctOGYzYjQyZDVkMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ULlTWB6VQ38nkcIKayRtLRTu5NwTJmc9Ki fb+gYpixp3Ai/Js+AFqSxOBTlFtQF+Bbl5JqWyZcL5PNyWbA1qoxdFiS633txI8c bK0bu3VhQdeFdDy8HK1hTcjtQ7cASDYXYu9jNx85mlAY4BaR4R3eLj1oEj5pg8Sw jaY5hzZXCTiXrVjGmqUpMhrSDevMm3jEZadcxhCByTgBQYQJ0AallzjShr43aCL9 K9es9qmVM4zyfVgOaib7aln2pr0N7xi8fRPX9s45GqIDzNmmbVtYWXQ/J30YsybX g/hDdc4JU6+rdAfL3KPX2KLi6U05t35f+r4Myd750jKWGLgQCwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOr8Pfp9KfMI1WcqOAYA0QWxNh3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTI0ZjA1NTgtMThjZi0z ZmE3LTkzMjAtMDVhYzA0NDk3NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJjqqAwQB JtL8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD1ZLt+E6s8nWYnoSUjmOc8y62MEVP2R44C2y/ygScakiymU sVItCbkEPQed0VXjdrNGox1dn4F9y7u/VKH2bWjXjC9iujhiQ+O4ULJYW9xV5ixh oBDswXnSloMZhxg+N8WgdwN7fUbXI3WMzxUk4UI2bedRFpnLsHzQU9vFGgpUeFZZ Qn7thxvNlOSx00zJZtzKGr2605uQ6BjCQJUF2FGGJe+Pfh33x35uRwOHHhqxcZwO eUA/6aSDZClTRJhB9jqihnB22OGE4kj/DiK4IkTSkYhp5TsB1AcWBA/9KecihfyF HRtennhdzAPMf0Z4P555nTkD8Jj6E6kaEsMhwdo= -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:10 2025 by rpki-client