This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa File: 2358e127-b9cd-321b-a2ed-09882df26c20.roa (raw, json) Hash identifier: YZve5CSccF5IW+aVl/FgZ1nP2cVCrBAp1V0rMeNjZpk= Subject key identifier: 8B:CD:A8:B8:0E:82:9D:CE:27:A7:C0:65:4A:65:61:F3:08:6D:2F:5E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C1630D26B456EAB77B609D900 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 202 IP address blocks: 20.137.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:d2:6b:45:6e:ab:77:b6:09:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=3cd93092-14f4-4a37-b06a-98e1afe0a4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:27:1f:94:a5:93:67:75:af:f0:f1:a5:c7: 79:2a:42:fc:e6:0c:4b:2d:e2:02:c8:65:d9:fc:f1: a7:66:e2:68:bf:da:59:bf:55:da:46:ff:40:4e:08: 31:8d:02:4b:a0:46:ce:04:e7:74:a7:23:80:9a:b8: 7d:17:af:21:c6:b8:eb:66:e0:a1:19:bb:1f:ed:2a: 4d:cd:7b:b9:7b:3d:1c:0c:42:51:98:4b:44:d6:29: f8:dc:90:de:a3:81:00:b5:81:7e:cf:03:d1:9f:9a: ad:51:ab:08:03:50:60:48:2c:12:54:89:9f:1a:a0: ab:16:23:37:e8:b8:61:1b:90:eb:4f:c0:88:24:27: d1:59:4f:d7:14:3e:e7:7d:8f:da:e1:1b:22:ad:13: 95:b5:58:b7:31:86:7d:62:8f:76:f5:58:c5:51:77: cc:f8:e2:50:b3:0a:c0:17:b8:e7:7e:d3:a7:b3:8a: 00:df:06:22:4c:ba:a6:4f:ff:c8:ac:a5:46:a7:d0: a7:38:79:05:d1:26:e5:d1:25:b4:97:6c:46:5c:c8: 23:bb:0e:87:62:57:ba:a1:0a:2c:d6:d4:3c:fe:b1: e9:8d:6c:bf:f4:25:f0:b1:60:0a:03:28:3b:16:ad: 35:d5:cd:5c:a4:d8:9e:c4:4c:7b:6c:63:ed:22:3f: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CD:A8:B8:0E:82:9D:CE:27:A7:C0:65:4A:65:61:F3:08:6D:2F:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2358e127-b9cd-321b-a2ed-09882df26c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:28:e9:cf:1e:30:fa:9e:a5:08:9b:6a:c5:65:05:f8:c4:dc: 4b:90:79:78:0e:af:da:ca:30:89:1e:f5:56:8f:a8:4d:87:97: d0:a7:1c:a3:35:73:72:ca:7c:37:a6:74:a2:e4:22:4d:f0:18: 8f:53:95:c5:a8:86:dd:41:a8:49:83:e1:98:02:f1:17:c1:73: 6e:43:8d:4f:7f:45:11:f8:96:8b:4b:93:58:14:27:33:c8:ea: d5:d9:27:57:6c:66:d7:17:a3:e6:19:f6:b7:4e:36:cb:bd:04: 99:c5:63:ad:9a:c1:d9:32:ce:4e:3f:bd:22:4a:25:73:ca:91: 3c:13:ad:7e:86:3e:e6:23:8a:63:cd:bc:79:28:23:e0:a9:c1: 01:2a:27:7f:8e:ee:6d:d4:04:d7:bb:90:2e:f2:63:52:86:91: 0f:d4:5e:0c:2b:53:6b:1e:3f:7f:47:b4:5e:e3:10:2f:73:50: 43:67:6a:a4:aa:a5:5a:4d:09:0a:89:2d:02:1f:32:fb:db:a0: df:4d:9d:58:a5:d9:01:bd:8d:c8:69:21:c1:c4:a4:43:fb:72: b2:61:0e:9b:91:98:a2:fc:75:f9:01:d8:dc:7d:68:68:73:a3: dd:e9:e2:c2:93:3b:a8:94:82:78:b4:ff:e8:05:42:9f:83:c0: 52:c3:28:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMNJrRW6rd7YJ2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk M2NkOTMwOTItMTRmNC00YTM3LWIwNmEtOThlMWFmZTBhNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV4nH5Slk2d1r/Dxpcd5KkL85gxLLeICyGXZ /PGnZuJov9pZv1XaRv9ATggxjQJLoEbOBOd0pyOAmrh9F68hxrjrZuChGbsf7SpN zXu5ez0cDEJRmEtE1in43JDeo4EAtYF+zwPRn5qtUasIA1BgSCwSVImfGqCrFiM3 6LhhG5DrT8CIJCfRWU/XFD7nfY/a4RsirROVtVi3MYZ9Yo929VjFUXfM+OJQswrA F7jnftOns4oA3wYiTLqmT//IrKVGp9CnOHkF0Sbl0SW0l2xGXMgjuw6HYle6oQos 1tQ8/rHpjWy/9CXwsWAKAyg7Fq011c1cpNiexEx7bGPtIj/ehQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvNqLgOgp3OJ6fAZUplYfMIbS9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjM1OGUxMjctYjljZC0z MjFiLWEyZWQtMDk4ODJkZjI2YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFImwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoo6c8eMPqepQibasVlBfjE3EuQeXgOr9rKMIke9VaPqE2Hl9CnHKM1 c3LKfDemdKLkIk3wGI9TlcWoht1BqEmD4ZgC8RfBc25DjU9/RRH4lotLk1gUJzPI 6tXZJ1dsZtcXo+YZ9rdONsu9BJnFY62awdkyzk4/vSJKJXPKkTwTrX6GPuYjimPN vHkoI+CpwQEqJ3+O7m3UBNe7kC7yY1KGkQ/UXgwrU2seP39HtF7jEC9zUENnaqSq pVpNCQqJLQIfMvvboN9NnVil2QG9jchpIcHEpEP7crJhDpuRmKL8dfkB2Nx9aGhz o93p4sKTO6iUgni0/+gFQp+DwFLDKAc= -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:09 2025 by rpki-client