This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dcf55144-e9e1-317f-ae55-f1762a157490.roa File: dcf55144-e9e1-317f-ae55-f1762a157490.roa (raw, json) Hash identifier: OrqsAf90WD4zya+A9iy323oRPBKsPl0W3GrxI0Eutt4= Subject key identifier: 09:CD:60:56:68:4A:FA:50:1A:08:44:B4:14:B5:B6:E8:E6:A6:E3:EA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C3DE4563AA1C071CA7BA4EB40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dcf55144-e9e1-317f-ae55-f1762a157490.roa Signing time: Fri 19 Dec 2025 19:19:01 +0000 ROA not before: Fri 19 Dec 2025 19:19:01 +0000 ROA not after: Thu 19 Mar 2026 18:19:01 +0000 asID: 274117 IP address blocks: 38.41.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:e4:56:3a:a1:c0:71:ca:7b:a4:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 19 19:19:01 2025 GMT Not After : Mar 19 18:19:01 2026 GMT Subject: CN=8c3847a2-0686-4245-9ad4-b91bfabcc18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:b4:a0:df:24:ff:6e:76:c2:0a:0a:59:69: f5:5d:31:35:7e:44:d6:60:77:34:c6:2a:dc:d3:10: 73:29:82:1e:d7:2e:bb:5e:d0:1d:d3:d0:22:ee:71: 9a:41:03:8c:f8:45:9a:2a:67:42:20:62:85:9f:c9: 7f:cf:ef:39:5a:38:51:2c:ce:97:27:4d:f4:35:87: b8:15:f2:ca:d7:d2:2a:ad:40:82:34:42:a9:54:de: bc:1b:98:9f:65:35:2b:a0:c9:c9:96:ed:81:61:d4: 9f:07:72:04:4c:ac:f0:6e:43:b5:bf:98:e9:02:15: ae:e9:27:9a:7a:86:d9:5c:89:b4:66:31:23:da:d0: 27:c7:92:30:7a:0e:e8:e5:57:85:93:69:c3:5b:41: e0:d8:44:e4:12:5e:1a:10:fe:14:94:99:f4:49:f5: 7d:10:87:b0:57:14:91:e3:53:41:d2:c7:a9:ee:d3: a5:7d:11:34:b9:9d:bc:80:3e:32:41:3e:b2:e8:9e: d9:38:1d:bc:c0:b7:1b:a1:66:a9:1c:79:2d:92:23: 39:8c:9c:04:93:8d:fb:c3:60:79:f9:60:d5:9e:40: d0:1c:be:fd:dd:90:66:92:63:a6:10:e8:8b:d6:8e: 6c:a5:01:3a:68:a7:d3:74:9a:11:04:61:39:82:31: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CD:60:56:68:4A:FA:50:1A:08:44:B4:14:B5:B6:E8:E6:A6:E3:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dcf55144-e9e1-317f-ae55-f1762a157490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.41.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ce:80:ca:36:22:7d:be:40:fd:32:a8:f4:97:14:0a:9d:c5: c0:2e:bd:ac:2f:ca:21:6a:ca:58:14:5c:66:8e:54:e8:85:a0: 7c:13:8a:bb:0b:bd:13:d4:6e:63:81:22:b2:0c:b2:2d:d5:cd: 5f:f2:5c:4e:fa:9e:cd:c6:ea:a3:92:f0:11:e5:17:14:d3:02: 9f:b3:e9:b5:f9:08:b2:7d:14:13:3b:a3:fb:db:88:e1:1f:70: 4f:2d:45:d2:fd:cf:aa:3d:07:62:58:4d:96:08:07:fc:da:0d: 89:81:fc:4e:a2:59:51:05:f1:1b:2c:e0:1c:e0:b0:8e:b7:63: 84:64:4b:7b:00:c9:1c:7f:b6:fa:31:1e:d4:9e:98:ab:a6:d8: 59:86:97:f3:3c:cf:fd:d8:fd:d6:95:74:a9:98:64:eb:1a:83: 69:37:72:e5:dd:0d:e6:f7:b8:f9:9e:df:1f:55:51:f6:5c:26: ad:4a:f2:74:9f:44:75:ac:63:63:55:c4:03:33:23:0d:65:0a: b1:9f:cf:d8:51:14:cc:ca:87:66:34:18:f4:04:13:2e:b3:2c: 69:ed:86:85:00:db:dc:92:49:a4:e0:d5:90:c7:ff:cd:f6:6c: d4:33:a0:b5:68:0c:ac:1c:fd:27:b6:da:6b:c0:95:b5:6e:03: a9:c7:0c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw95FY6ocBxynuk60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIxOTE5MTkwMVoXDTI2MDMxOTE4MTkwMVowLzEtMCsGA1UEAxMk OGMzODQ3YTItMDY4Ni00MjQ1LTlhZDQtYjkxYmZhYmNjMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseq0oN8k/252wgoKWWn1XTE1fkTWYHc0xirc 0xBzKYIe1y67XtAd09Ai7nGaQQOM+EWaKmdCIGKFn8l/z+85WjhRLM6XJ030NYe4 FfLK19IqrUCCNEKpVN68G5ifZTUroMnJlu2BYdSfB3IETKzwbkO1v5jpAhWu6Sea eobZXIm0ZjEj2tAnx5Iweg7o5VeFk2nDW0Hg2ETkEl4aEP4UlJn0SfV9EIewVxSR 41NB0sep7tOlfRE0uZ28gD4yQT6y6J7ZOB28wLcboWapHHktkiM5jJwEk437w2B5 +WDVnkDQHL793ZBmkmOmEOiL1o5spQE6aKfTdJoRBGE5gjE0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnNYFZoSvpQGghEtBS1tujmpuPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGNmNTUxNDQtZTllMS0z MTdmLWFlNTUtZjE3NjJhMTU3NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJikwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLOgMo2In2+QP0yqPSXFAqdxcAuvawvyiFqylgUXGaOVOiFoHwTirsL vRPUbmOBIrIMsi3VzV/yXE76ns3G6qOS8BHlFxTTAp+z6bX5CLJ9FBM7o/vbiOEf cE8tRdL9z6o9B2JYTZYIB/zaDYmB/E6iWVEF8Rss4BzgsI63Y4RkS3sAyRx/tvox HtSemKum2FmGl/M8z/3Y/daVdKmYZOsag2k3cuXdDeb3uPme3x9VUfZcJq1K8nSf RHWsY2NVxAMzIw1lCrGfz9hRFMzKh2Y0GPQEEy6zLGnthoUA29ySSaTg1ZDH/832 bNQzoLVoDKwc/Se22mvAlbVuA6nHDDg= -----END CERTIFICATE-----Generated at Sun Dec 21 03:47:33 2025 by rpki-client