This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65d9eda1-4964-3bc3-83ea-56e66f4e9516.roa File: 65d9eda1-4964-3bc3-83ea-56e66f4e9516.roa (raw, json) Hash identifier: l3rgdgdylJiuRASB/GWvMEkjMYZW/PeZAV8sUiFLMOc= Subject key identifier: 00:AA:67:FE:19:8D:47:F0:7C:DC:46:63:FA:99:F8:6C:79:1B:30:03 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584BF8E082DEB5B3C826BA2A5C00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65d9eda1-4964-3bc3-83ea-56e66f4e9516.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 138.229.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:82:de:b5:b3:c8:26:ba:2a:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=9c328d15-cf9b-4553-8693-1940f97a39a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:25:f9:1e:66:bb:66:0d:ef:9c:bf:f6:4b: 70:a2:d0:69:30:5e:87:da:22:f2:fc:d9:e3:72:84: b7:a8:f6:40:10:f3:f4:a0:80:3d:b8:0e:62:66:5d: a5:73:f6:ac:a5:31:a3:af:b0:2d:0d:f5:8f:80:04: 2b:26:f1:65:6a:ca:18:2b:ab:cf:fc:85:99:34:a4: 75:79:73:55:1c:f7:61:59:f3:6c:6c:99:e5:ba:ac: 0d:58:b3:64:a4:80:79:de:da:58:e3:ad:80:49:fb: 08:da:69:c9:73:25:5f:0b:71:37:0b:ae:23:94:5d: 77:43:d6:a4:91:fe:93:d3:e2:6e:8f:bf:19:75:98: 4a:3c:1a:56:1a:09:c7:95:b0:bb:fb:eb:de:48:95: cb:b5:91:7e:a6:88:e2:c4:ee:a2:a2:60:27:0a:32: 32:09:65:84:11:9a:c7:14:12:70:db:93:14:12:bd: 0c:7c:c0:dc:39:a6:51:63:40:4c:a8:8d:cb:47:42: 15:b7:f3:8c:b8:27:e3:ed:68:81:74:b3:73:56:75: da:80:a9:fe:78:33:54:bf:1b:38:4b:73:18:0e:8f: 3c:13:25:b7:e2:0f:1c:18:41:db:95:e6:77:d1:ce: e7:52:f8:ad:86:4c:45:89:38:15:d3:ca:9e:cf:51: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AA:67:FE:19:8D:47:F0:7C:DC:46:63:FA:99:F8:6C:79:1B:30:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65d9eda1-4964-3bc3-83ea-56e66f4e9516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:d7:c2:0c:75:7e:62:d1:fb:d7:ed:5f:a4:13:7c:d1:93:8e: 90:c3:30:07:8f:b3:b0:8c:9b:76:35:fb:b9:2b:cb:9c:1c:ea: 1d:ac:36:8f:0d:fd:de:3a:fd:25:b7:1c:86:a1:eb:ed:db:85: 74:94:d8:4b:e6:83:12:0a:4d:31:a2:53:ff:0e:18:2e:91:31: 51:e4:75:80:18:f6:60:26:71:96:f3:6e:18:08:2f:82:b3:22: 9f:dc:f5:e0:5e:46:04:08:2a:d0:71:ca:56:70:92:f9:30:aa: 5b:76:8f:61:7a:ed:2b:c5:74:fa:52:b1:ea:de:31:ad:1b:e1: 81:a5:54:44:44:93:fb:54:a6:02:5a:b6:44:90:75:a5:37:f1: cd:01:02:6d:9f:90:56:33:25:2b:a9:68:aa:30:cd:ec:0c:ed: b3:37:0a:bc:7b:2d:d4:f9:54:a7:f4:9c:45:de:6c:0e:32:5b: de:f3:2e:e8:2e:f2:9f:81:39:7f:bc:8a:fe:eb:80:0c:c3:ec: 59:1b:19:46:be:03:d3:40:d4:c3:19:66:89:c1:35:12:fc:c8: cc:37:98:99:d7:b4:e1:42:2f:62:8d:d7:e1:c0:42:64:e3:6b: ce:e3:e1:17:a5:72:e2:6d:2f:eb:1e:e0:b3:9e:5b:2b:18:5f: f7:2c:08:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv44ILetbPIJroqXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk OWMzMjhkMTUtY2Y5Yi00NTUzLTg2OTMtMTk0MGY5N2EzOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMkl+R5mu2YN75y/9ktwotBpMF6H2iLy/Nnj coS3qPZAEPP0oIA9uA5iZl2lc/aspTGjr7AtDfWPgAQrJvFlasoYK6vP/IWZNKR1 eXNVHPdhWfNsbJnluqwNWLNkpIB53tpY462ASfsI2mnJcyVfC3E3C64jlF13Q9ak kf6T0+Juj78ZdZhKPBpWGgnHlbC7++veSJXLtZF+pojixO6iomAnCjIyCWWEEZrH FBJw25MUEr0MfMDcOaZRY0BMqI3LR0IVt/OMuCfj7WiBdLNzVnXagKn+eDNUvxs4 S3MYDo88EyW34g8cGEHbleZ30c7nUvithkxFiTgV08qez1HLVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACqZ/4ZjUfwfNxGY/qZ+Gx5GzADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjVkOWVkYTEtNDk2NC0z YmMzLTgzZWEtNTZlNjZmNGU5NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDXwgx1fmLR+9ftX6QTfNGTjpDDMAePs7CMm3Y1+7kry5wc6h2sNo8N /d46/SW3HIah6+3bhXSU2EvmgxIKTTGiU/8OGC6RMVHkdYAY9mAmcZbzbhgIL4Kz Ip/c9eBeRgQIKtBxylZwkvkwqlt2j2F67SvFdPpSsereMa0b4YGlVEREk/tUpgJa tkSQdaU38c0BAm2fkFYzJSupaKowzewM7bM3Crx7LdT5VKf0nEXebA4yW97zLugu 8p+BOX+8iv7rgAzD7FkbGUa+A9NA1MMZZonBNRL8yMw3mJnXtOFCL2KN1+HAQmTj a87j4RelcuJtL+se4LOeWysYX/csCHY= -----END CERTIFICATE-----Generated at Sun Dec 21 03:03:49 2025 by rpki-client