This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ced324db-e30f-3b76-9a23-65871e129ffe.roa File: ced324db-e30f-3b76-9a23-65871e129ffe.roa (raw, json) Hash identifier: WRKLR1QjdakBgmYSnqkwdTbhkJOeD5/2QDYnD5PBAG4= Subject key identifier: EB:56:6A:76:D6:C6:C8:7A:C9:CF:B3:38:49:EC:47:84:42:FA:DD:72 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C0DF0137BB280019D3547BD80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ced324db-e30f-3b76-9a23-65871e129ffe.roa Signing time: Tue 02 Dec 2025 15:03:52 +0000 ROA not before: Tue 02 Dec 2025 15:03:52 +0000 ROA not after: Mon 02 Mar 2026 15:03:52 +0000 asID: 273125 IP address blocks: 38.253.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:f0:13:7b:b2:80:01:9d:35:47:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 2 15:03:52 2025 GMT Not After : Mar 2 15:03:52 2026 GMT Subject: CN=778198ec-ebb2-4c05-956a-26046a7d307d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:b1:0e:f0:84:63:48:5c:9b:3f:32:57:02: 59:65:ea:50:8a:57:b1:8c:cc:c1:bf:1a:da:00:99: f6:36:91:76:dd:8a:32:ae:31:b5:3b:04:8c:09:b2: cb:bc:1c:df:80:71:30:c8:32:55:30:08:29:99:60: ae:da:20:5a:68:16:f8:cd:8d:ef:8c:22:2e:23:bb: ce:5d:86:bf:08:cc:51:b7:97:95:86:df:aa:f0:dd: 48:65:a3:a5:fe:81:9c:01:e3:3a:34:38:76:1a:3f: d7:d3:f2:f2:25:fa:ea:b5:50:85:21:69:42:b7:3c: a2:46:2f:3e:6d:bb:53:e4:40:db:3d:ff:5a:e1:e4: a9:91:d4:a8:13:ed:57:15:d2:57:53:f6:78:2c:44: f2:e0:09:0e:15:9e:7c:3b:96:4c:fc:14:9c:38:75: cf:6c:0f:9f:ab:8a:88:c9:96:80:a8:47:9f:62:92: 0a:19:55:9a:c8:98:51:d3:83:2f:5d:e8:7d:6a:c2: fe:94:41:98:95:9e:f4:c5:01:ff:c4:68:12:c9:fe: b8:a2:8e:8b:79:1b:0d:34:4e:b3:74:6e:36:9e:3a: fb:3c:4c:f6:88:dd:84:25:b6:65:52:01:44:5a:b6: c0:08:d1:84:ef:45:af:36:84:06:25:4c:c2:d8:f5: f4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:56:6A:76:D6:C6:C8:7A:C9:CF:B3:38:49:EC:47:84:42:FA:DD:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ced324db-e30f-3b76-9a23-65871e129ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:bb:99:87:dc:7c:b3:3c:3e:1a:ab:8d:a8:9c:22:b3:ba:9a: 10:4b:b5:2e:f2:86:8e:8d:b6:5d:b6:2a:20:dd:a5:5e:b8:6b: 95:b3:83:93:e9:89:75:3e:7f:54:95:e9:cb:62:b6:8a:e3:f4: 91:7b:ca:6a:95:4f:8b:2f:e1:de:af:16:a2:1d:d8:d0:d2:aa: a2:0c:41:79:37:9b:5d:86:eb:60:a3:73:73:5e:9a:b9:ae:97: e4:3f:2d:bf:6b:d1:91:4f:7e:3e:98:cf:39:4e:25:81:b6:bc: ef:11:86:39:73:f0:47:b8:b3:b3:d8:ba:30:6c:d2:ee:b9:33: 26:c4:72:7c:ab:02:bc:72:24:0e:7c:7c:4c:a2:42:7f:28:32: 84:41:e1:da:68:88:50:2a:3e:24:07:8b:47:25:5e:37:77:31: e6:37:52:9a:70:7f:c5:20:e3:3c:7c:32:f1:d1:05:80:1a:ef: 81:86:9a:29:42:90:0e:b2:d5:33:2f:2c:81:19:b4:39:d4:f7: c5:9c:42:c3:f8:5a:8d:a2:7c:6b:02:cf:0f:80:67:95:61:91: 49:1c:97:5b:55:36:8a:6e:4d:eb:73:a1:11:a5:0e:6f:b2:21: 05:ed:ae:9e:a1:e6:91:3a:48:70:50:82:b3:4e:f4:a1:13:8e: 3a:98:e2:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN8BN7soABnTVHvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIwMjE1MDM1MloXDTI2MDMwMjE1MDM1MlowLzEtMCsGA1UEAxMk Nzc4MTk4ZWMtZWJiMi00YzA1LTk1NmEtMjYwNDZhN2QzMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvCxDvCEY0hcmz8yVwJZZepQilexjMzBvxra AJn2NpF23YoyrjG1OwSMCbLLvBzfgHEwyDJVMAgpmWCu2iBaaBb4zY3vjCIuI7vO XYa/CMxRt5eVht+q8N1IZaOl/oGcAeM6NDh2Gj/X0/LyJfrqtVCFIWlCtzyiRi8+ bbtT5EDbPf9a4eSpkdSoE+1XFdJXU/Z4LETy4AkOFZ58O5ZM/BScOHXPbA+fq4qI yZaAqEefYpIKGVWayJhR04MvXeh9asL+lEGYlZ70xQH/xGgSyf64oo6LeRsNNE6z dG42njr7PEz2iN2EJbZlUgFEWrbACNGE70WvNoQGJUzC2PX01QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtWanbWxsh6yc+zOEnsR4RC+t1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2VkMzI0ZGItZTMwZi0z Yjc2LTlhMjMtNjU4NzFlMTI5ZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALK7mYfcfLM8PhqrjaicIrO6mhBLtS7yho6Ntl22KiDdpV64a5Wzg5Pp iXU+f1SV6ctitorj9JF7ymqVT4sv4d6vFqId2NDSqqIMQXk3m12G62Cjc3Nemrmu l+Q/Lb9r0ZFPfj6YzzlOJYG2vO8Rhjlz8Ee4s7PYujBs0u65MybEcnyrArxyJA58 fEyiQn8oMoRB4dpoiFAqPiQHi0clXjd3MeY3Uppwf8Ug4zx8MvHRBYAa74GGmilC kA6y1TMvLIEZtDnU98WcQsP4Wo2ifGsCzw+AZ5VhkUkcl1tVNopuTetzoRGlDm+y IQXtrp6h5pE6SHBQgrNO9KETjjqY4oI= -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:23 2025 by rpki-client