This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa File: 38de40ee-de7d-3e52-915c-2c28b398f4ea.roa (raw, json) Hash identifier: dlZlXN6nJH5vvmVimIxAeoDv9T40aOnCKhdGDyWoqkg= Subject key identifier: 43:DD:B7:75:D1:66:7B:84:19:DB:72:97:7E:CF:67:D7:52:C2:E0:36 Certificate issuer: /CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Certificate serial: 010D0C9F4328584C50D19580D3A3BBDE1BAFF500 Authority key identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 3257 IP address blocks: 23.140.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:95:80:d3:a3:bb:de:1b:af:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=024b65ce-8be7-4147-aaab-d4df2923e920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:02:7e:e8:45:30:55:f4:00:55:b5:97:a9: ac:5b:f1:fd:2c:b0:81:29:0c:d0:e7:17:23:ec:e1: c9:a1:8a:22:21:05:1c:6b:60:25:b6:ee:72:df:3a: 3f:fd:16:d2:da:d1:10:70:a7:eb:40:7d:15:ad:a3: b2:a4:78:7c:5b:4b:01:54:3a:10:cd:fe:d6:86:47: e3:75:53:c3:b7:e9:80:01:5d:ac:f9:4f:8a:51:8d: b6:4b:6b:81:57:e3:16:80:f7:10:b9:79:02:f5:8a: 4c:d1:46:e3:b7:6e:b9:ef:34:ff:92:45:bc:d2:94: 8a:bc:13:49:16:da:b5:57:0e:d6:b7:cb:19:4e:9d: eb:5f:5c:d3:39:68:c1:76:b6:95:7b:98:b6:87:9a: 1e:6f:72:10:d2:12:35:3b:55:55:7b:b7:ca:19:3e: b7:01:18:9e:e3:a6:6f:e4:aa:e9:7c:5d:c5:22:49: 43:fc:dd:8a:51:5f:bd:00:b8:12:15:b5:c7:fa:10: d1:1f:2f:b5:f2:43:0d:d4:37:c1:1d:26:2f:b9:b2: 25:b6:cc:a2:09:21:ff:71:52:c7:b3:f2:12:31:a8: 70:04:f7:c3:69:e1:3f:e6:ce:5c:4f:c1:48:9e:0e: 23:20:6c:4b:77:d6:9c:c9:90:6c:a7:03:cd:79:22: 61:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DD:B7:75:D1:66:7B:84:19:DB:72:97:7E:CF:67:D7:52:C2:E0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl X509v3 Authority Key Identifier: keyid:8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer sbgp-ipAddrBlock: critical IPv4: 23.140.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:08:f8:27:68:3e:86:aa:ed:87:b2:64:f9:39:03:16:19:d5: b6:89:52:a2:84:97:10:d0:3c:76:15:65:f1:5e:d6:93:de:74: 30:51:bd:c4:34:08:db:01:be:52:74:0a:a5:ce:4a:3a:38:47: e1:88:86:b6:4d:84:bf:04:6f:e8:cd:eb:08:2b:09:6d:c2:47: 3c:92:cb:fb:72:4a:84:f6:2f:ef:e7:68:27:ab:66:8c:0c:fe: 1a:f0:9d:cd:95:e0:0c:5c:47:d6:e7:31:07:28:08:d3:c6:1b: c2:5a:7a:e7:4a:a8:8a:a8:5b:b8:6b:64:e1:e1:9d:3b:98:54: d5:ec:6a:a1:cc:e5:0c:70:a3:96:fa:99:81:e5:71:de:64:d6: ce:36:69:a9:aa:26:4d:86:f7:50:7a:d6:21:16:eb:dd:12:b6: ac:e8:5d:d2:81:66:3f:3b:21:13:fc:0f:b7:e1:28:75:d8:12: 0e:02:05:1f:7a:ad:92:f4:12:a0:45:62:14:c1:a1:8b:cc:a6: 47:dd:cc:59:96:12:6e:e0:a3:6a:cc:64:7d:46:d6:2a:8e:ea: 43:32:14:75:11:0f:cd:e9:32:1a:18:42:63:03:8c:51:a1:bc: f6:24:c4:25:1e:c6:2d:8b:64:11:23:cb:5d:da:b5:c4:f1:eb: 79:aa:d1:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0ZWA06O73huv9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiZTVkZDQtYjlmYS00MDIxLTg3YTEtMzAwMmY4MGNj NDQ5MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MDI0YjY1Y2UtOGJlNy00MTQ3LWFhYWItZDRkZjI5MjNlOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOkCfuhFMFX0AFW1l6msW/H9LLCBKQzQ5xcj 7OHJoYoiIQUca2Altu5y3zo//RbS2tEQcKfrQH0VraOypHh8W0sBVDoQzf7Whkfj dVPDt+mAAV2s+U+KUY22S2uBV+MWgPcQuXkC9YpM0Ubjt2657zT/kkW80pSKvBNJ Ftq1Vw7Wt8sZTp3rX1zTOWjBdraVe5i2h5oeb3IQ0hI1O1VVe7fKGT63ARie46Zv 5KrpfF3FIklD/N2KUV+9ALgSFbXH+hDRHy+18kMN1DfBHSYvubIltsyiCSH/cVLH s/ISMahwBPfDaeE/5s5cT8FIng4jIGxLd9acyZBspwPNeSJhiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPdt3XRZnuEGdtyl37PZ9dSwuA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJl NWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgwY2M0NDkvMzhkZTQwZWUtZGU3ZC0z ZTUyLTkxNWMtMmMyOGIzOThmNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2RiZTVkZDQtYjlmYS00MDIxLTg3 YTEtMzAwMmY4MGNjNDQ5L2NkYmU1ZGQ0LWI5ZmEtNDAyMS04N2ExLTMwMDJmODBj YzQ0OS5jcmwwHwYDVR0jBBgwFoAUj+CGD4v7Wq1p3hTxt0kNkGphwyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAy ZjgwY2M0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4yUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4I+CdoPoaq7YeyZPk5AxYZ1baJUqKElxDQPHYVZfFe1pPedDBRvcQ0 CNsBvlJ0CqXOSjo4R+GIhrZNhL8Eb+jN6wgrCW3CRzySy/tySoT2L+/naCerZowM /hrwnc2V4AxcR9bnMQcoCNPGG8JaeudKqIqoW7hrZOHhnTuYVNXsaqHM5Qxwo5b6 mYHlcd5k1s42aamqJk2G91B61iEW690StqzoXdKBZj87IRP8D7fhKHXYEg4CBR96 rZL0EqBFYhTBoYvMpkfdzFmWEm7go2rMZH1G1iqO6kMyFHURD83pMhoYQmMDjFGh vPYkxCUexi2LZBEjy13atcTx63mq0Rc= -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:22 2026 by rpki-client