This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa File: 0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa (raw, json) Hash identifier: wjXy2VEjDXgAI7w1bt2aY5Vcci93lQ3ofGMzqnwojBw= Subject key identifier: D3:E4:B7:7E:06:E5:A7:7E:F7:E7:D8:26:EA:54:07:BB:A7:06:45:4B Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C33811AFF3BADF1D5443A7380 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 202 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:1a:ff:3b:ad:f1:d5:44:3a:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=f9206859-0284-4f92-a2b1-cb8c5c67492d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bc:21:78:0d:0e:a8:4d:68:15:59:86:5e:fd: 19:9e:cb:7e:df:8e:bc:a4:bd:a8:1b:5b:b9:41:48: 5b:90:9b:0b:17:65:20:87:6b:cb:30:e2:b7:c7:a3: 53:93:a6:f0:14:eb:ad:9f:31:ba:7c:12:ef:cc:7b: a1:cb:25:47:7e:38:d5:ea:46:f4:ee:b6:41:b4:e0: 74:ac:89:62:55:e5:93:08:fd:d3:55:93:93:3e:e0: 48:6d:b7:3b:3d:cb:81:fa:7a:7c:0a:83:b9:4e:64: 32:c5:6c:6d:f0:f2:4e:fc:eb:e3:d8:bf:dd:8b:b0: 55:85:1e:48:b6:00:20:3a:f9:fb:71:53:de:5a:1b: bb:16:37:b6:80:e6:1b:c0:59:1c:c5:80:d7:a1:36: 1f:5c:f3:82:d2:79:5e:39:11:1b:10:bd:5b:cd:a6: a7:24:a0:1f:5c:77:17:38:ab:e0:be:79:aa:f8:c9: 44:a7:3a:7b:81:e1:b1:51:ab:48:54:d0:0d:f8:fd: 4a:07:b0:71:92:a7:e6:2b:d0:bf:1d:65:88:ab:02: c1:5d:b2:7e:79:36:f1:cf:5e:ef:bf:35:9c:9b:19: ca:a8:35:25:de:89:ec:8b:f5:60:45:90:15:7a:b2: 7a:b1:03:f0:72:2f:91:f8:15:4b:2e:94:0d:12:e4: 2f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E4:B7:7E:06:E5:A7:7E:F7:E7:D8:26:EA:54:07:BB:A7:06:45:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0b5b5f03-81f3-3c83-8bef-43503d21ca3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f8:cc:26:f3:b6:79:fd:52:c8:02:2a:f7:43:06:01:6b:ef: f1:b3:96:08:fd:eb:f8:78:04:d7:e9:93:d6:b5:17:6a:1b:30: d9:a7:10:5b:57:38:9b:7f:77:d2:90:bc:ba:5c:28:32:4f:0f: 59:ac:ed:70:30:8c:ae:9f:a8:5d:9b:44:3e:59:c7:34:b6:d0: ad:50:a0:66:3c:88:c7:27:b4:c8:d2:9e:39:3d:3f:0b:9f:7e: fc:93:2b:66:1c:e0:c5:b6:ce:0a:be:3e:ce:5e:04:f2:5e:24: 78:c1:23:f1:c9:2c:de:4d:a0:b4:f1:60:84:0e:10:26:11:23: 37:eb:63:0b:9c:1d:1e:7b:1b:9d:9b:6f:b2:3b:63:d4:28:ba: 0c:d4:b1:cc:7f:ab:57:9f:a0:28:39:29:c5:2e:2f:22:83:b7: 6e:02:00:da:44:f7:1a:90:33:14:cd:fd:05:e1:4d:82:f9:76: a1:c6:c9:49:27:ab:34:67:fa:27:eb:86:26:01:08:59:0a:f7: 95:29:37:56:67:26:94:aa:10:47:91:c9:66:78:63:9b:0b:c6: 73:5a:5d:a0:25:58:c2:63:7b:12:f9:d2:c7:6f:9a:b0:1d:7a: be:b6:8e:f0:be:8f:de:1e:92:d5:b2:49:c7:a8:46:6e:b5:c1: d6:23:85:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgRr/O63x1UQ6c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk ZjkyMDY4NTktMDI4NC00ZjkyLWEyYjEtY2I4YzVjNjc0OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirwheA0OqE1oFVmGXv0Znst+3468pL2oG1u5 QUhbkJsLF2Ugh2vLMOK3x6NTk6bwFOutnzG6fBLvzHuhyyVHfjjV6kb07rZBtOB0 rIliVeWTCP3TVZOTPuBIbbc7PcuB+np8CoO5TmQyxWxt8PJO/Ovj2L/di7BVhR5I tgAgOvn7cVPeWhu7Fje2gOYbwFkcxYDXoTYfXPOC0nleOREbEL1bzaanJKAfXHcX OKvgvnmq+MlEpzp7geGxUatIVNAN+P1KB7BxkqfmK9C/HWWIqwLBXbJ+eTbxz17v vzWcmxnKqDUl3onsi/VgRZAVerJ6sQPwci+R+BVLLpQNEuQvRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPkt34G5ad+9+fYJupUB7unBkVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGI1YjVmMDMtODFmMy0z YzgzLThiZWYtNDM1MDNkMjFjYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/4zCbztnn9UsgCKvdDBgFr7/Gzlgj96/h4BNfpk9a1F2obMNmnEFtX OJt/d9KQvLpcKDJPD1ms7XAwjK6fqF2bRD5ZxzS20K1QoGY8iMcntMjSnjk9Pwuf fvyTK2Yc4MW2zgq+Ps5eBPJeJHjBI/HJLN5NoLTxYIQOECYRIzfrYwucHR57G52b b7I7Y9QougzUscx/q1efoCg5KcUuLyKDt24CANpE9xqQMxTN/QXhTYL5dqHGyUkn qzRn+ifrhiYBCFkK95UpN1ZnJpSqEEeRyWZ4Y5sLxnNaXaAlWMJjexL50sdvmrAd er62jvC+j94ektWySceoRm61wdYjhfE= -----END CERTIFICATE-----Generated at Sun Jan 25 16:05:44 2026 by rpki-client