This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa File: 333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa (raw, json) Hash identifier: gtWfGTQiq2bGd2gVL+Sof8bjl5Qt6TOQ8aXqR+gZH50= Subject key identifier: 3A:95:D8:0E:46:47:80:44:AE:B6:E3:50:4A:F4:C1:BC:9A:C5:3F:B5 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C040B4A2B8157DA1B0F715100 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa Signing time: Sat 29 Nov 2025 02:00:31 +0000 ROA not before: Sat 29 Nov 2025 02:00:31 +0000 ROA not after: Fri 27 Feb 2026 02:00:31 +0000 asID: 202 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:04:0b:4a:2b:81:57:da:1b:0f:71:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 29 02:00:31 2025 GMT Not After : Feb 27 02:00:31 2026 GMT Subject: CN=ed86ccd0-09bb-49df-8021-6bb92feffdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:28:50:8d:6f:9d:b0:5e:4d:c8:3c:d5:cb:a5: b4:0f:ee:31:c8:50:7d:fe:8a:87:59:c7:2c:16:17: 8d:05:8a:3f:6a:b8:4f:62:1c:99:23:ca:c7:bd:1e: f1:99:14:a6:a8:67:d8:3d:37:6f:86:3a:a6:92:3a: cb:14:92:3f:ca:3d:34:6c:03:d4:da:ca:b1:02:b5: 2b:f3:ee:c3:15:f5:b6:61:e9:d7:4f:64:c4:76:dd: 3c:f6:7c:05:47:39:df:b2:af:ab:7d:70:35:ea:fb: 10:7e:16:f0:66:38:27:38:ad:cf:a2:5a:d8:bb:ef: dd:01:f8:88:ef:4c:bf:a6:e3:4a:1a:ae:67:0f:b5: cb:98:07:20:27:21:f6:ef:18:97:b5:f0:bf:f7:38: fc:35:85:85:3d:b1:eb:27:20:f1:f4:06:19:44:68: 01:35:db:2b:5f:28:c8:55:e0:32:6f:0f:e7:04:b2: 4a:86:3b:83:3c:75:09:4f:77:e2:bb:13:3b:71:96: 16:5e:b8:83:0d:01:bc:e2:81:15:c0:4a:55:7f:40: 67:c7:b2:c8:f8:c1:b3:fe:62:c5:17:b5:95:61:28: 10:e5:11:40:ab:d6:26:c1:98:17:e0:a9:f8:ef:4c: 54:0b:3e:34:f2:bb:a8:1f:90:98:93:8a:b1:07:e5: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:95:D8:0E:46:47:80:44:AE:B6:E3:50:4A:F4:C1:BC:9A:C5:3F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:03:98:89:cf:3a:a8:99:1a:1f:7e:07:12:ef:65:84:41:47: 86:5a:56:71:a8:dd:68:bd:0b:d7:a3:57:f1:df:9e:ca:99:db: 60:d5:99:b2:91:38:14:4c:74:0e:35:95:6b:f3:ec:06:8b:ff: 7a:ac:3e:92:28:7b:c0:a1:cf:6c:0b:c3:9c:0e:7c:1a:b6:93: 02:64:f2:ee:92:a9:00:db:a2:d6:63:bc:22:1a:7e:56:c5:c8: 3d:1e:d8:53:33:19:f4:e7:5f:08:c8:44:18:52:4f:db:8c:0e: f9:e8:23:d2:9f:80:d5:62:d2:63:bd:75:dc:da:4f:34:82:1a: 13:86:2f:43:2f:64:fb:0d:49:9f:5a:4b:04:e7:99:c1:3b:7a: d9:9e:93:6b:2b:a9:8f:74:d0:36:f5:23:82:fc:f4:72:4d:d2: 8f:fc:41:3d:d5:e9:aa:83:8e:bc:6c:3d:77:72:7a:66:18:fe: 41:0e:70:f0:11:8f:49:14:a8:22:04:47:55:1e:1b:1f:fe:f8: de:c4:e5:ba:f0:a5:f0:d1:ec:c1:46:13:f6:73:37:5b:2c:66: f5:37:85:ce:85:51:c5:2c:ff:60:aa:2d:03:a2:ec:90:5f:09: 85:f6:d4:af:a5:d5:77:0d:60:0f:8e:a5:12:a6:cb:33:a7:8f: 22:d5:6c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwEC0orgVfaGw9xUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTEyOTAyMDAzMVoXDTI2MDIyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZWQ4NmNjZDAtMDliYi00OWRmLTgwMjEtNmJiOTJmZWZmZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyhQjW+dsF5NyDzVy6W0D+4xyFB9/oqHWccs FheNBYo/arhPYhyZI8rHvR7xmRSmqGfYPTdvhjqmkjrLFJI/yj00bAPU2sqxArUr 8+7DFfW2YenXT2TEdt089nwFRznfsq+rfXA16vsQfhbwZjgnOK3PolrYu+/dAfiI 70y/puNKGq5nD7XLmAcgJyH27xiXtfC/9zj8NYWFPbHrJyDx9AYZRGgBNdsrXyjI VeAybw/nBLJKhjuDPHUJT3fiuxM7cZYWXriDDQG84oEVwEpVf0Bnx7LI+MGz/mLF F7WVYSgQ5RFAq9YmwZgX4Kn470xUCz408ruoH5CYk4qxB+Xz8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqV2A5GR4BErrbjUEr0wbyaxT+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzMzMTc0YTUtOWQ0ZS0z ZWRlLWE2NDAtMGFlNzFmNTNlN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsDmInPOqiZGh9+BxLvZYRBR4ZaVnGo3Wi9C9ejV/HfnsqZ22DVmbKR OBRMdA41lWvz7AaL/3qsPpIoe8Chz2wLw5wOfBq2kwJk8u6SqQDbotZjvCIaflbF yD0e2FMzGfTnXwjIRBhST9uMDvnoI9KfgNVi0mO9ddzaTzSCGhOGL0MvZPsNSZ9a SwTnmcE7etmek2srqY900Db1I4L89HJN0o/8QT3V6aqDjrxsPXdyemYY/kEOcPAR j0kUqCIER1UeGx/++N7E5brwpfDR7MFGE/ZzN1ssZvU3hc6FUcUs/2CqLQOi7JBf CYX21K+l1XcNYA+OpRKmyzOnjyLVbAo= -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:47 2025 by rpki-client