This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa File: 20b86aff-f738-359b-bf7f-a923168ca468.roa (raw, json) Hash identifier: 2Evj16LbiC3+XPERK0qGPy0jsQsBvAv7r9k+QAJSFEg= Subject key identifier: 3F:D0:C0:89:52:5D:76:83:39:10:7C:1A:D3:C7:19:0C:A3:37:2B:DB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C1630D25AFDA4B18400B50400 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 3356 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:d2:5a:fd:a4:b1:84:00:b5:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=140339b2-e693-4674-9a55-f04f97f7e89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:47:c8:73:6f:d5:af:2b:7e:03:13:0e:7b: cb:50:43:b4:33:6d:f2:b2:4e:92:3b:e4:0b:ee:42: 8a:b2:1f:6e:d4:c0:df:99:12:44:bb:00:95:22:d2: f3:64:aa:33:60:64:2a:e1:11:ef:c8:84:8c:0e:c7: 41:7d:bb:e4:c8:2f:43:ef:de:dd:3c:c4:c1:a2:15: 77:d2:ed:fe:6e:9a:5d:4d:da:01:7e:eb:5d:59:53: df:4e:ed:37:02:db:50:f6:97:01:59:cd:34:5a:05: 5a:b2:2c:1a:00:ec:29:b7:78:cb:de:c1:0f:6c:64: 00:bc:e6:00:bb:70:61:a8:7e:5b:79:49:26:e6:69: f4:12:13:3a:77:e1:6a:9f:6f:77:7d:a0:94:8d:76: ed:94:5e:f0:5e:1a:37:ff:9f:05:f8:95:25:1c:4a: 7a:30:06:27:2c:b4:1a:ec:2d:8e:51:dd:45:ab:80: 21:3b:1d:b3:65:41:a6:56:c7:43:8a:f9:49:df:62: 1e:ed:42:03:f4:9d:9e:6f:e2:c0:87:be:b6:ba:2e: 59:0d:1e:cd:8c:66:56:4e:1e:d8:50:38:3d:1e:d4: ac:2f:2f:88:b9:45:3a:9a:5e:35:4c:8c:ce:68:99: 6d:05:51:92:dd:ab:00:20:47:d9:88:fa:b1:b8:60: cb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D0:C0:89:52:5D:76:83:39:10:7C:1A:D3:C7:19:0C:A3:37:2B:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/20b86aff-f738-359b-bf7f-a923168ca468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:57:ae:db:04:89:bf:53:3b:12:18:92:29:88:3b:b3:95:5a: 25:dc:8c:64:0b:2c:3f:69:ed:9e:8a:ba:6f:e7:3d:a2:64:30: 30:0c:83:d7:fe:1a:9d:9e:34:f6:0f:f6:ee:92:11:34:ca:2a: d1:50:cf:65:3b:ee:c4:d0:cc:cb:69:90:6c:2e:8e:e8:73:d0: 87:d5:f5:0b:77:ca:7e:e6:93:b0:9a:c4:be:4d:e4:a4:ea:2c: c4:96:2a:21:2c:50:82:26:ae:c1:20:50:3b:86:ef:4d:cb:36: 36:6b:9b:e5:34:79:65:1a:ba:1e:8f:a4:9e:9a:2b:79:3e:b7: 8d:1a:93:c3:86:e6:81:3c:af:d3:a6:f4:b6:ec:16:9f:47:bb: 52:39:65:1b:2c:38:4e:4a:62:7b:2a:4d:d6:67:b6:27:75:4f: a3:5e:cd:ef:ae:31:21:8a:35:2d:66:ac:3d:74:4e:77:5b:38: 0b:6b:fe:64:1a:80:d1:c4:85:83:59:62:b2:a5:c6:82:00:6d: 32:e4:a1:bd:8c:30:87:0e:ba:13:be:6e:57:8f:73:96:b0:03: 0a:8e:b8:71:8d:a8:51:7a:73:88:66:14:e5:ea:bf:b8:96:b4: 1a:a0:3c:91:da:b9:13:55:8d:c3:8a:46:60:91:d0:24:30:0b: be:a7:2d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMNJa/aSxhAC1BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk MTQwMzM5YjItZTY5My00Njc0LTlhNTUtZjA0Zjk3ZjdlODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAFHyHNv1a8rfgMTDnvLUEO0M23ysk6SO+QL 7kKKsh9u1MDfmRJEuwCVItLzZKozYGQq4RHvyISMDsdBfbvkyC9D797dPMTBohV3 0u3+bppdTdoBfutdWVPfTu03AttQ9pcBWc00WgVasiwaAOwpt3jL3sEPbGQAvOYA u3BhqH5beUkm5mn0EhM6d+Fqn293faCUjXbtlF7wXho3/58F+JUlHEp6MAYnLLQa 7C2OUd1Fq4AhOx2zZUGmVsdDivlJ32Ie7UID9J2eb+LAh762ui5ZDR7NjGZWTh7Y UDg9HtSsLy+IuUU6ml41TIzOaJltBVGS3asAIEfZiPqxuGDLSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/QwIlSXXaDORB8GtPHGQyjNyvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjBiODZhZmYtZjczOC0z NTliLWJmN2YtYTkyMzE2OGNhNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1XrtsEib9TOxIYkimIO7OVWiXcjGQLLD9p7Z6Kum/nPaJkMDAMg9f+ Gp2eNPYP9u6SETTKKtFQz2U77sTQzMtpkGwujuhz0IfV9Qt3yn7mk7CaxL5N5KTq LMSWKiEsUIImrsEgUDuG703LNjZrm+U0eWUauh6PpJ6aK3k+t40ak8OG5oE8r9Om 9LbsFp9Hu1I5ZRssOE5KYnsqTdZntid1T6Neze+uMSGKNS1mrD10TndbOAtr/mQa gNHEhYNZYrKlxoIAbTLkob2MMIcOuhO+blePc5awAwqOuHGNqFF6c4hmFOXqv7iW tBqgPJHauRNVjcOKRmCR0CQwC76nLcI= -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:52 2025 by rpki-client