This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa
File: 0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa (raw, json)
Hash identifier: oEAYTYq0Vx8yAeEcrS2RGprYYJhVnYdyhcomykIbs9M=
Subject key identifier: A2:A0:3C:A1:D1:30:5E:65:AB:DC:C5:C3:7B:35:2A:0A:FD:5C:13:40
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584BCD9B1F8165995A5B35428900
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 203
IP address blocks: 20.148.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9b:1f:81:65:99:5a:5b:35:42:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=85adadf3-b24c-4005-931e-4cda587d57d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:18:1b:e3:51:ff:56:bf:46:0a:58:98:e0:40:
6d:8a:b0:ba:85:52:f3:94:da:68:5a:ad:1b:bc:71:
31:96:52:0f:a0:12:76:01:ca:6f:4b:a5:c6:a3:0b:
b4:aa:aa:c0:26:4c:18:55:7a:8e:1a:d3:c7:90:4f:
69:ba:6d:14:e8:fb:70:db:2d:fb:80:ee:d1:41:c4:
45:14:67:f1:70:fb:4a:c2:c5:eb:48:3f:b3:fd:c8:
f1:d1:91:3a:9d:50:b1:29:ce:53:31:a6:a4:91:33:
8e:fb:9f:43:b6:d5:f3:4a:45:ff:1d:58:fb:8d:7e:
b8:9d:06:98:7b:1e:a0:1c:28:50:c9:d3:af:11:33:
08:c3:0e:7e:ab:c9:31:e6:0c:0e:da:56:af:48:62:
2a:36:65:48:ea:94:fc:b7:26:57:fc:79:af:b9:c8:
97:e0:90:cc:df:5a:df:4f:89:16:65:5a:20:17:42:
87:ee:6b:e7:8c:0e:fc:96:2b:95:aa:cb:9a:85:37:
d6:90:ad:b3:f8:52:2e:79:f6:9b:90:81:0b:54:b8:
92:f0:63:a7:9d:24:d7:0f:e9:97:2d:97:86:8b:73:
0a:cc:59:f6:50:7e:a2:3a:dd:44:29:62:e4:37:9d:
1c:b4:4b:60:e0:38:1d:79:ba:b7:7c:34:6e:ca:e1:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A0:3C:A1:D1:30:5E:65:AB:DC:C5:C3:7B:35:2A:0A:FD:5C:13:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0fa1af53-ce9b-3cb7-ad6a-76d49add7e6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.148.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ad:1e:0d:c7:2b:a8:bf:10:8c:e3:d3:03:e5:fd:ae:d5:d8:
8b:4e:45:c6:ed:be:77:52:f0:09:6f:9f:d0:03:e3:db:ed:7d:
a9:41:00:3d:62:c8:fa:cc:2e:af:a3:f5:a7:4e:f3:c4:85:37:
67:33:75:96:c2:00:68:d7:39:3c:f8:ca:6c:de:2f:39:e3:a0:
d5:32:a2:5d:3c:f1:f6:a9:b6:c1:d2:bb:54:f3:a8:85:9a:bd:
26:30:54:1d:a2:3a:38:51:5d:ff:cd:bd:e1:f4:0f:7a:17:f7:
29:75:a7:6a:cb:f1:3d:bf:ef:2d:d8:4b:56:a6:38:18:1b:69:
37:af:26:ea:6e:6f:dc:ea:e0:91:02:13:7c:ec:0e:c8:da:94:
f4:3d:a3:be:4e:d5:8b:6b:fe:56:ae:86:c9:49:33:99:6a:dd:
82:a0:3d:a1:4d:7d:cd:61:64:b3:7a:0f:fe:e0:76:38:0e:bf:
3e:18:3c:e2:78:4b:b8:2a:35:b9:f3:a1:a7:6c:f3:09:26:06:
1f:aa:16:03:d8:7c:17:1b:de:07:17:7c:d1:94:4c:19:14:37:
b2:b5:2f:9b:dc:a6:e7:a5:3b:f9:f6:26:ae:c8:1f:4d:de:97:
c0:d6:bd:dc:8c:59:92:ad:7e:a0:ec:b2:45:2a:a9:68:25:dc:
4d:a7:4f:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmx+BZZlaWzVCiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk
ODVhZGFkZjMtYjI0Yy00MDA1LTkzMWUtNGNkYTU4N2Q1N2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBgb41H/Vr9GCliY4EBtirC6hVLzlNpoWq0b
vHExllIPoBJ2AcpvS6XGowu0qqrAJkwYVXqOGtPHkE9pum0U6Ptw2y37gO7RQcRF
FGfxcPtKwsXrSD+z/cjx0ZE6nVCxKc5TMaakkTOO+59DttXzSkX/HVj7jX64nQaY
ex6gHChQydOvETMIww5+q8kx5gwO2lavSGIqNmVI6pT8tyZX/HmvuciX4JDM31rf
T4kWZVogF0KH7mvnjA78liuVqsuahTfWkK2z+FIuefabkIELVLiS8GOnnSTXD+mX
LZeGi3MKzFn2UH6iOt1EKWLkN50ctEtg4Dgdebq3fDRuyuEfkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKKgPKHRMF5lq9zFw3s1Kgr9XBNAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMGZhMWFmNTMtY2U5Yi0z
Y2I3LWFkNmEtNzZkNDlhZGQ3ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFJSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOtHg3HK6i/EIzj0wPl/a7V2ItORcbtvndS8Alvn9AD49vtfalBAD1i
yPrMLq+j9adO88SFN2czdZbCAGjXOTz4ymzeLznjoNUyol088faptsHSu1TzqIWa
vSYwVB2iOjhRXf/NveH0D3oX9yl1p2rL8T2/7y3YS1amOBgbaTevJupub9zq4JEC
E3zsDsjalPQ9o75O1Ytr/lauhslJM5lq3YKgPaFNfc1hZLN6D/7gdjgOvz4YPOJ4
S7gqNbnzoads8wkmBh+qFgPYfBcb3gcXfNGUTBkUN7K1L5vcpuelO/n2Jq7IH03e
l8DWvdyMWZKtfqDsskUqqWgl3E2nT0I=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:23:29 2025 by rpki-client