This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa File: 219ed1da-c95c-3af6-9248-3707f5300999.roa (raw, json) Hash identifier: sh/6Ca5nrDkygw6b7JguYFOPquRv52tNK5fTX3m71GE= Subject key identifier: 0A:D3:F0:C8:42:C5:27:DD:C9:B6:C9:5D:FE:0F:F5:4A:F0:B3:E2:A9 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C1630D1E9B8443D9227DFA180 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 203 IP address blocks: 20.137.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:d1:e9:b8:44:3d:92:27:df:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=229bea3d-1c03-445d-beeb-0062d7e2d3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:fa:c2:5b:e2:f3:59:92:38:5d:7d:18:c2: f3:5d:5c:3f:40:7c:9b:e1:17:b3:e6:0f:22:30:7b: 47:6a:79:00:ff:2f:10:29:99:da:de:ee:44:1c:c8: ca:52:c6:c7:55:da:86:74:a5:da:2d:03:f7:b0:3e: 2f:d9:ca:13:71:6c:33:4e:d6:76:6c:85:90:e2:56: 66:cf:5a:c5:49:53:69:0b:00:0f:c0:5f:05:c4:d6: 69:3c:e5:36:ab:23:fa:3d:01:6f:84:35:51:7f:23: 34:9b:12:1a:a4:a7:f0:88:75:3a:5f:5a:cb:dc:2c: 8d:59:4c:b8:10:29:b2:0c:3e:67:9d:96:c7:41:d9: 15:37:13:a7:7d:fe:31:a5:dd:53:62:e2:ff:a5:90: ec:ce:bc:39:20:f7:d5:cc:a3:bb:4e:24:ab:6b:24: ab:a3:b9:e6:31:26:19:43:ec:f9:8f:69:87:33:88: 82:32:bc:b2:c2:96:d1:6c:d2:70:ee:76:73:51:19: ca:55:0a:36:44:3f:fb:aa:69:ce:3e:73:37:c5:d1: 45:cb:21:6a:c8:50:d6:40:ad:cc:28:13:49:d7:4d: 3d:b6:74:09:79:c4:c3:00:f3:4c:86:e4:34:83:de: 47:3b:6a:01:6d:06:39:5e:45:c2:f1:00:56:df:8e: 9a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:F0:C8:42:C5:27:DD:C9:B6:C9:5D:FE:0F:F5:4A:F0:B3:E2:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/219ed1da-c95c-3af6-9248-3707f5300999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:67:ba:ce:b8:cc:a9:ac:b8:6a:5a:8c:5d:56:bc:88:2f:75: 12:93:d3:20:9c:31:a6:0f:3e:f7:44:79:ee:2e:54:3c:14:ed: bb:56:96:64:95:31:2e:ad:be:39:5f:bc:62:b9:4a:2e:49:a0: 6a:3d:5a:2a:9e:95:f4:73:ae:42:75:1c:30:58:8a:93:89:08: 7b:93:e6:1c:8c:22:e7:c4:97:66:68:c1:63:e7:aa:1f:8e:60: 8a:6e:14:a5:76:81:f2:28:ae:86:54:f7:18:a9:c8:15:82:f1: 41:8f:cc:9b:36:86:11:9e:b9:e8:0d:93:6c:5f:e6:7e:2f:5c: b1:0c:db:b1:07:99:c3:1c:b8:4f:78:37:27:8b:dc:bf:4c:e8: 3c:29:ca:6e:df:51:80:ec:d7:1a:34:cb:0b:e4:d8:e4:e8:2f: 01:0f:b9:4e:20:30:74:89:a3:ac:22:a1:05:0d:05:e3:73:95: ae:47:68:16:53:d0:db:2d:c7:a3:f5:ca:e4:26:d9:2e:d8:55: c0:b0:4a:59:6f:fe:da:f0:2c:9f:bb:f3:6e:31:e4:21:72:c3: cc:62:0e:7b:bd:41:90:9c:23:69:85:67:09:01:54:70:c5:3b: f5:ac:6e:64:dd:e5:3d:f4:2d:7b:2b:8b:eb:fa:82:c6:04:aa: 8a:94:cd:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMNHpuEQ9kiffoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk MjI5YmVhM2QtMWMwMy00NDVkLWJlZWItMDA2MmQ3ZTJkM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzH6wlvi81mSOF19GMLzXVw/QHyb4Rez5g8i MHtHankA/y8QKZna3u5EHMjKUsbHVdqGdKXaLQP3sD4v2coTcWwzTtZ2bIWQ4lZm z1rFSVNpCwAPwF8FxNZpPOU2qyP6PQFvhDVRfyM0mxIapKfwiHU6X1rL3CyNWUy4 ECmyDD5nnZbHQdkVNxOnff4xpd1TYuL/pZDszrw5IPfVzKO7TiSraySro7nmMSYZ Q+z5j2mHM4iCMryywpbRbNJw7nZzURnKVQo2RD/7qmnOPnM3xdFFyyFqyFDWQK3M KBNJ1009tnQJecTDAPNMhuQ0g95HO2oBbQY5XkXC8QBW346asQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArT8MhCxSfdybbJXf4P9Urws+KpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjE5ZWQxZGEtYzk1Yy0z YWY2LTkyNDgtMzcwN2Y1MzAwOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABnus64zKmsuGpajF1WvIgvdRKT0yCcMaYPPvdEee4uVDwU7btWlmSV MS6tvjlfvGK5Si5JoGo9WiqelfRzrkJ1HDBYipOJCHuT5hyMIufEl2ZowWPnqh+O YIpuFKV2gfIoroZU9xipyBWC8UGPzJs2hhGeuegNk2xf5n4vXLEM27EHmcMcuE94 NyeL3L9M6Dwpym7fUYDs1xo0ywvk2OToLwEPuU4gMHSJo6wioQUNBeNzla5HaBZT 0Nstx6P1yuQm2S7YVcCwSllv/trwLJ+7824x5CFyw8xiDnu9QZCcI2mFZwkBVHDF O/WsbmTd5T30LXsri+v6gsYEqoqUzYI= -----END CERTIFICATE-----Generated at Sat Dec 6 17:20:50 2025 by rpki-client