This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa File: cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa (raw, json) Hash identifier: ZhvMPu0UPBoz5svKYh/G3Rav0E3+7s2E1TXq6qo04rg= Subject key identifier: A5:77:64:88:F7:63:AE:CE:0E:F7:05:BB:EA:22:76:6B:F8:2F:99:BC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C3E48B6AB7487ADA83206BC80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa Signing time: Fri 19 Dec 2025 22:41:16 +0000 ROA not before: Fri 19 Dec 2025 22:41:16 +0000 ROA not after: Thu 19 Mar 2026 21:41:16 +0000 asID: 271996 IP address blocks: 38.158.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:48:b6:ab:74:87:ad:a8:32:06:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 19 22:41:16 2025 GMT Not After : Mar 19 21:41:16 2026 GMT Subject: CN=b8d74a29-f948-4088-acf9-1f150ea33f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:75:33:40:69:d9:f3:06:43:b9:43:02:42: ec:d5:c8:6f:88:84:20:21:98:41:01:15:38:bf:b5: c5:46:03:f6:2d:1b:67:6e:c4:04:99:32:4e:c8:91: f4:59:cc:b8:2a:b7:29:2c:b1:ae:b7:40:f6:2b:63: 51:01:13:29:1e:8e:30:c5:12:6e:93:9f:a6:87:cb: e1:b0:d2:46:68:59:61:f7:78:24:0a:90:6b:8a:5b: 90:14:22:74:25:dd:62:02:25:e8:6c:ed:86:8f:3a: 19:e6:dc:b4:1b:34:15:84:a2:70:17:76:98:e0:34: 77:ed:22:9d:b9:bf:10:ee:84:f8:5c:04:90:2b:14: 22:4b:1d:22:b1:53:df:24:a3:c4:d8:ee:6f:df:af: 2e:11:4b:b3:0d:86:b4:66:f7:3d:a7:b9:d9:09:79: 8d:7e:c7:f8:5d:28:01:f8:20:8a:57:7c:cc:4c:00: 7d:81:17:79:f3:61:cd:a3:22:91:5f:40:7c:09:fd: f9:25:88:e2:66:ee:44:c2:22:50:ac:32:ca:f0:fb: 0f:d6:04:aa:34:81:ee:53:c0:cd:22:db:6a:90:13: 6d:b4:12:97:e8:0a:a9:57:40:bb:70:70:f2:b3:29: 24:03:22:30:fb:ca:b1:45:95:50:89:f7:27:c3:a1: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:77:64:88:F7:63:AE:CE:0E:F7:05:BB:EA:22:76:6B:F8:2F:99:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdf405e8-6425-3a5a-9b1a-2a63c3f95f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.158.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:eb:cb:f2:71:db:fb:3e:a3:7a:8d:05:5b:68:94:59:34:4b: f4:22:ae:5d:ca:af:52:85:6d:ce:64:eb:12:9f:52:be:d2:1e: c0:f9:0e:d7:a2:86:d8:f2:6c:d4:a9:2a:2d:a0:c8:aa:aa:4e: cc:27:b1:4d:ea:b4:26:95:a0:f6:97:35:c3:05:eb:fb:86:15: e0:08:b3:92:56:96:ba:21:04:4a:72:cb:3d:62:ff:30:6d:d7: c4:86:49:c2:57:ec:3b:aa:38:29:09:40:6b:69:ae:c6:45:6f: de:d9:3b:15:c8:bb:df:8d:4e:aa:e6:86:37:c2:de:47:af:bf: 6b:92:69:ab:c5:45:19:51:62:fa:dd:69:8f:a2:fd:8d:6a:55: ba:6f:e7:77:d5:78:3a:1f:dd:66:c4:9b:40:b2:5c:66:fa:33: 4c:e2:a3:2b:ae:d3:b9:4b:c7:1c:11:03:df:74:1d:88:7a:b7: 8f:3a:fa:9a:1c:d0:c9:dd:6c:e5:88:65:b9:a1:7c:cb:8e:fc: b6:22:9e:66:9a:98:00:77:8b:28:42:7f:df:d7:51:b6:3b:bc: 3f:2c:cb:b3:6f:d1:03:4b:c1:e9:6d:15:37:da:e8:61:85:26: 8c:b2:7f:52:28:19:de:41:09:a8:95:63:81:2d:0d:a2:60:66: bc:bd:6e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+SLardIetqDIGvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIxOTIyNDExNloXDTI2MDMxOTIxNDExNlowLzEtMCsGA1UEAxMk YjhkNzRhMjktZjk0OC00MDg4LWFjZjktMWYxNTBlYTMzZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ91M0Bp2fMGQ7lDAkLs1chviIQgIZhBARU4 v7XFRgP2LRtnbsQEmTJOyJH0Wcy4KrcpLLGut0D2K2NRARMpHo4wxRJuk5+mh8vh sNJGaFlh93gkCpBriluQFCJ0Jd1iAiXobO2GjzoZ5ty0GzQVhKJwF3aY4DR37SKd ub8Q7oT4XASQKxQiSx0isVPfJKPE2O5v368uEUuzDYa0Zvc9p7nZCXmNfsf4XSgB +CCKV3zMTAB9gRd582HNoyKRX0B8Cf35JYjiZu5EwiJQrDLK8PsP1gSqNIHuU8DN IttqkBNttBKX6AqpV0C7cHDysykkAyIw+8qxRZVQifcnw6EPkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV3ZIj3Y67ODvcFu+oidmv4L5m8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2RmNDA1ZTgtNjQyNS0z YTVhLTliMWEtMmE2M2MzZjk1ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJp7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfry/Jx2/s+o3qNBVtolFk0S/Qirl3Kr1KFbc5k6xKfUr7SHsD5Dtei htjybNSpKi2gyKqqTswnsU3qtCaVoPaXNcMF6/uGFeAIs5JWlrohBEpyyz1i/zBt 18SGScJX7DuqOCkJQGtprsZFb97ZOxXIu9+NTqrmhjfC3kevv2uSaavFRRlRYvrd aY+i/Y1qVbpv53fVeDof3WbEm0CyXGb6M0zioyuu07lLxxwRA990HYh6t486+poc 0MndbOWIZbmhfMuO/LYinmaamAB3iyhCf9/XUbY7vD8sy7Nv0QNLweltFTfa6GGF Joyyf1IoGd5BCaiVY4EtDaJgZry9biQ= -----END CERTIFICATE-----Generated at Sun Dec 21 05:36:56 2025 by rpki-client