This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1e84049c-02fb-383f-a24f-fe85ca0d74ae.roa File: 1e84049c-02fb-383f-a24f-fe85ca0d74ae.roa (raw, json) Hash identifier: eTVHiIcUA97J3mv9ixsWa14b3xCyug5dxegEAIf0F1w= Subject key identifier: 50:EC:E9:F3:C6:52:CE:64:1F:73:E1:AC:16:2C:EC:A8:90:AD:7C:F0 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584BC53B0D9D87475694A48EFBB8 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1e84049c-02fb-383f-a24f-fe85ca0d74ae.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 203 IP address blocks: 20.148.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:0d:9d:87:47:56:94:a4:8e:fb:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=151de559-ddbc-46be-a368-8c2a69afe058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:66:c3:5d:f1:9d:85:96:f3:f9:a7:af:d9:99: 0f:01:4b:5c:19:7e:88:f5:28:f1:9c:4c:0b:b1:51: 14:f9:b2:9b:e1:1d:57:37:d6:5a:50:ea:e4:57:5e: e2:09:01:b7:d3:b2:26:6f:a4:14:aa:67:be:8f:af: d0:ad:72:49:d5:10:b3:39:f8:dc:67:8e:3e:ef:ce: e3:72:3a:26:9f:d7:b8:93:ac:5d:96:82:94:63:de: 61:83:5b:c9:68:55:db:74:0d:7e:63:2c:c9:00:55: d3:f1:66:a5:09:c5:91:19:83:00:cf:a6:3b:0c:27: bf:db:e4:53:23:7b:82:56:11:ec:a1:cd:12:85:71: c9:2c:0e:f9:32:f2:da:5d:42:49:5b:3a:33:a5:d9: 2b:1b:3a:93:83:c9:98:87:b2:2f:e8:3a:91:d2:53: 17:85:82:75:52:c7:05:ab:ef:55:07:b3:b8:54:4a: 43:19:bc:75:87:9b:9a:fe:22:3d:df:90:12:83:e6: b3:10:46:53:7c:ed:c3:1d:6f:a5:8d:1a:0d:74:b2: 88:fa:9e:cf:ff:29:e2:e7:54:e8:9b:08:53:14:d2: 37:d3:b9:7b:9b:04:5e:39:17:01:a9:6e:4e:40:41: 28:40:df:98:69:3d:bd:af:07:c3:33:c6:66:0a:c4: dd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EC:E9:F3:C6:52:CE:64:1F:73:E1:AC:16:2C:EC:A8:90:AD:7C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1e84049c-02fb-383f-a24f-fe85ca0d74ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.148.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4d:60:09:62:85:a9:6f:91:af:4d:77:41:86:83:33:25:5b: 4a:81:b7:2c:cb:0b:5b:c4:02:6f:27:20:1c:e4:63:77:aa:ac: 79:ed:18:bd:a4:10:f5:ff:3c:a4:90:7f:b5:88:18:ae:a7:c0: d3:dc:ef:1f:f0:27:0f:1b:73:e3:02:d3:9f:99:cd:f6:75:a3: c6:6f:a5:22:a7:d8:90:20:cf:7e:89:ae:70:82:59:7f:fd:8f: a3:68:1a:8f:50:b2:3a:df:3b:c8:1c:2c:f1:26:e8:62:a1:e1: aa:74:63:e5:42:2e:58:f7:26:51:7e:91:30:2a:a0:52:34:1a: f7:c1:34:73:4f:36:c0:d0:b2:ae:58:b4:dc:e2:95:e5:46:b9: e4:4d:bf:95:1f:bb:08:1b:37:23:cf:a9:6e:49:24:02:d2:08: 94:3c:3e:6c:5a:70:28:08:82:05:3b:61:0c:a0:02:b1:09:af: 44:5b:e1:df:3c:7a:26:a0:21:09:09:55:bc:a3:2f:b9:20:ca: ab:14:05:b1:a8:ac:1d:a9:ac:1f:00:f7:22:72:75:9b:2d:8c: 08:31:2c:63:e6:0a:e9:1f:e2:42:69:32:89:63:fd:c8:0c:ba: c0:0d:b9:c8:ec:c7:6d:76:08:5a:11:34:fe:da:9f:36:c6:41: 29:11:75:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOw2dh0dWlKSO+7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MTUxZGU1NTktZGRiYy00NmJlLWEzNjgtOGMyYTY5YWZlMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimbDXfGdhZbz+aev2ZkPAUtcGX6I9SjxnEwL sVEU+bKb4R1XN9ZaUOrkV17iCQG307Imb6QUqme+j6/QrXJJ1RCzOfjcZ44+787j cjomn9e4k6xdloKUY95hg1vJaFXbdA1+YyzJAFXT8WalCcWRGYMAz6Y7DCe/2+RT I3uCVhHsoc0ShXHJLA75MvLaXUJJWzozpdkrGzqTg8mYh7Iv6DqR0lMXhYJ1UscF q+9VB7O4VEpDGbx1h5ua/iI935ASg+azEEZTfO3DHW+ljRoNdLKI+p7P/yni51To mwhTFNI307l7mwReORcBqW5OQEEoQN+YaT29rwfDM8ZmCsTd9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDs6fPGUs5kH3PhrBYs7KiQrXzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMWU4NDA0OWMtMDJmYi0z ODNmLWEyNGYtZmU4NWNhMGQ3NGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClNYAlihalvka9Nd0GGgzMlW0qBtyzLC1vEAm8nIBzkY3eqrHntGL2k EPX/PKSQf7WIGK6nwNPc7x/wJw8bc+MC05+ZzfZ1o8ZvpSKn2JAgz36JrnCCWX/9 j6NoGo9QsjrfO8gcLPEm6GKh4ap0Y+VCLlj3JlF+kTAqoFI0GvfBNHNPNsDQsq5Y tNzileVGueRNv5UfuwgbNyPPqW5JJALSCJQ8PmxacCgIggU7YQygArEJr0Rb4d88 eiagIQkJVbyjL7kgyqsUBbGorB2prB8A9yJydZstjAgxLGPmCukf4kJpMolj/cgM usANucjsx212CFoRNP7anzbGQSkRdVg= -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:50 2025 by rpki-client