This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ca45ab97-2795-3da3-8914-8da176d1a752.roa File: ca45ab97-2795-3da3-8914-8da176d1a752.roa (raw, json) Hash identifier: MeEMX3HrqfQ5B47DtC61nIpCUyppjJpCMkoEfhLMXJs= Subject key identifier: 00:99:25:3B:06:F7:58:E7:37:D2:67:F2:1C:4F:D6:F0:EA:52:E7:13 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C139A64EE1005CEE7F94B6EC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ca45ab97-2795-3da3-8914-8da176d1a752.roa Signing time: Mon 01 Dec 2025 16:56:41 +0000 ROA not before: Mon 01 Dec 2025 16:56:41 +0000 ROA not after: Sun 01 Mar 2026 16:56:41 +0000 asID: 151786 IP address blocks: 38.64.100.0/22 maxlen: 22 38.66.108.0/22 maxlen: 22 38.88.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:9a:64:ee:10:05:ce:e7:f9:4b:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 1 16:56:41 2025 GMT Not After : Mar 1 16:56:41 2026 GMT Subject: CN=09e59698-136b-496a-bbcc-c44935e7572a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:6e:1e:e3:69:d4:e5:3c:63:d1:8e:35:16: 37:74:7a:dc:08:67:cf:4a:95:9f:76:c2:8a:ac:9c: 3d:e1:99:8f:52:8f:c8:74:eb:d1:1e:c2:68:19:e1: 6e:ab:0a:ef:cd:ef:92:b8:36:bf:c7:18:70:1d:09: 95:aa:f3:cb:fe:48:1a:c5:4f:d6:4e:3a:6f:93:3f: 3c:42:87:87:8f:b3:c4:e0:f1:4d:ff:3f:94:a6:d7: 9e:ad:35:c7:90:38:68:23:cc:15:6b:01:da:f6:f5: 69:7b:29:ab:99:6b:25:e6:e2:01:2b:a5:34:0b:bb: 6d:79:8c:a7:ea:2d:8d:77:d9:33:35:aa:c7:26:87: cf:c7:60:79:1e:24:f4:27:c6:bd:bf:52:ad:7d:69: 15:69:f6:80:12:00:22:8c:1b:35:b7:94:3a:2d:4f: cc:93:70:3d:9e:30:0f:86:c5:a1:5c:3e:cd:a7:1d: bf:a1:54:3d:58:69:01:73:a0:8f:68:90:2a:f8:b5: c8:75:3c:da:77:cf:59:49:d1:3e:84:21:ab:75:d2: 49:de:b5:4a:71:a3:90:8b:5c:ec:9d:ee:4e:06:9a: 44:fe:81:08:3b:77:b0:6e:f9:31:f7:b8:8e:19:77: d7:b6:08:0b:e9:22:01:55:10:b1:b6:8e:f0:2f:14: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:25:3B:06:F7:58:E7:37:D2:67:F2:1C:4F:D6:F0:EA:52:E7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ca45ab97-2795-3da3-8914-8da176d1a752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.64.100.0/22 38.66.108.0/22 38.88.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:2a:27:ff:fd:fa:c9:58:24:8e:e0:1f:33:95:d7:e2:bb:d9: 6e:46:68:98:bd:48:8a:df:b8:55:f4:62:65:4e:2b:b8:91:41: c3:72:b2:51:95:a9:1e:be:52:bc:87:2a:91:92:8e:f8:1c:6d: e6:be:c0:fd:98:ac:96:b1:de:9f:2f:46:13:10:ed:2f:a5:17: fb:df:9e:8a:c9:31:4b:06:c1:34:fa:4e:7d:25:08:70:a4:6f: 16:9e:16:53:b3:6a:4f:73:96:d0:f6:0b:56:a7:cc:d7:00:ae: 89:1a:90:c7:f6:c2:d6:29:09:b2:69:19:23:05:85:48:cf:73: fa:18:4d:9d:17:4c:7c:88:80:99:67:f8:1f:21:69:97:60:83: 07:bd:ee:6e:f7:cb:8b:b0:f8:96:ff:fb:af:81:93:bd:23:72: 3e:f1:f4:f0:43:14:76:15:6a:06:38:5f:b3:93:fc:f4:3a:c3: 35:69:4f:93:7b:4c:92:c8:0e:5d:ef:40:10:92:4f:42:2a:6f: 9e:17:f5:c8:f9:27:3a:f3:1b:9e:d1:7f:5c:4f:1d:9e:cb:9b: 01:08:17:d9:31:fc:d3:89:33:30:57:50:6f:77:67:e6:f9:ce: 4c:c5:c7:54:43:d2:4c:46:ac:30:73:a4:90:89:76:2b:90:e1: 72:39:df:7a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEwTmmTuEAXO5/lLbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIwMTE2NTY0MVoXDTI2MDMwMTE2NTY0MVowLzEtMCsGA1UEAxMk MDllNTk2OTgtMTM2Yi00OTZhLWJiY2MtYzQ0OTM1ZTc1NzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6FuHuNp1OU8Y9GONRY3dHrcCGfPSpWfdsKK rJw94ZmPUo/IdOvRHsJoGeFuqwrvze+SuDa/xxhwHQmVqvPL/kgaxU/WTjpvkz88 QoeHj7PE4PFN/z+UpteerTXHkDhoI8wVawHa9vVpeymrmWsl5uIBK6U0C7tteYyn 6i2Nd9kzNarHJofPx2B5HiT0J8a9v1KtfWkVafaAEgAijBs1t5Q6LU/Mk3A9njAP hsWhXD7Npx2/oVQ9WGkBc6CPaJAq+LXIdTzad89ZSdE+hCGrddJJ3rVKcaOQi1zs ne5OBppE/oEIO3ewbvkx97iOGXfXtggL6SIBVRCxto7wLxR0SQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFACZJTsG91jnN9Jn8hxP1vDqUucTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2E0NWFiOTctMjc5NS0z ZGEzLTg5MTQtOGRhMTc2ZDFhNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJkBkAwQC JkJsAwQAJlhUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMEqJ//9+slYJI7gHzOV1+K72W5GaJi9SIrfuFX0 YmVOK7iRQcNyslGVqR6+UryHKpGSjvgcbea+wP2YrJax3p8vRhMQ7S+lF/vfnorJ MUsGwTT6Tn0lCHCkbxaeFlOzak9zltD2C1anzNcArokakMf2wtYpCbJpGSMFhUjP c/oYTZ0XTHyIgJln+B8haZdggwe97m73y4uw+Jb/+6+Bk70jcj7x9PBDFHYVagY4 X7OT/PQ6wzVpT5N7TJLIDl3vQBCST0Iqb54X9cj5JzrzG57Rf1xPHZ7LmwEIF9kx /NOJMzBXUG93Z+b5zkzFx1RD0kxGrDBzpJCJdiuQ4XI533o= -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:37 2025 by rpki-client