This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa File: 38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa (raw, json) Hash identifier: HAQvROEWpbYYfGBVj5rKQUTsF9fgI2Fs4Z6OCcxW3Pg= Subject key identifier: 7A:F6:1A:76:04:A2:62:52:ED:41:00:FB:57:F8:ED:BB:D0:BE:CE:B6 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C593141BB6FC39E17EBB6CB20 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 202 IP address blocks: 20.156.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:41:bb:6f:c3:9e:17:eb:b6:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=127325c5-f1b7-4728-85ff-03e0a4bb7c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:fc:a6:cd:b2:5e:e9:b9:3b:36:30:70:84: c2:b5:60:a0:16:03:62:0d:a9:39:ad:da:84:2e:d4: 97:7d:fc:e5:56:46:b4:d0:55:15:24:c5:47:41:6d: 05:f0:28:85:94:ac:55:1c:79:2e:eb:02:89:f9:f9: cb:27:1d:51:aa:cd:da:85:f3:a6:45:0e:ba:c2:ee: 5e:36:c1:f8:ec:ae:38:f2:fc:8a:02:36:56:84:c3: 9b:40:90:ca:2e:7c:87:f6:2b:f9:2a:f6:b5:09:c4: fd:0c:98:7d:be:f0:e8:65:d5:1f:85:a9:95:12:47: 89:c1:4b:9a:d7:a7:17:32:5e:68:c1:a0:23:58:23: e7:e1:ad:09:4c:f9:ac:ca:52:e3:45:56:ca:cf:7d: d2:dd:34:7a:81:de:d4:ae:d0:f9:a3:ab:1c:24:2c: ff:c8:58:cb:b7:2a:83:54:35:b0:38:e1:ae:f3:2d: bd:81:1b:b5:53:2f:d5:5e:43:57:f5:c6:4c:c9:a2: 64:f7:0c:9e:cc:e4:d0:ac:2f:22:d7:03:a8:01:64: 8e:06:63:0e:25:cd:8f:c4:88:5a:9b:ab:a6:4d:27: 7b:37:32:8b:e2:0d:64:84:c5:64:be:84:a1:3d:b0: 84:e7:db:5d:d7:ac:ed:a3:17:54:c2:58:35:72:92: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F6:1A:76:04:A2:62:52:ED:41:00:FB:57:F8:ED:BB:D0:BE:CE:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38ca5643-fe49-3108-8dbd-d4cb63e4e91b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.156.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f7:84:6a:a1:52:de:36:33:73:50:c3:38:6d:d3:a4:01:f6: 29:cf:a9:4b:86:3b:e5:0d:08:32:e0:79:0a:22:c6:cd:7d:7d: 07:66:5c:4f:14:15:db:18:c0:3c:03:f7:42:b3:65:97:31:84: 04:91:61:21:3e:00:ad:d2:bc:e7:b2:cb:c6:d3:fb:a3:36:5c: 13:1b:a7:26:ee:8b:76:5d:83:c6:ad:35:c9:74:47:24:d6:3f: 4f:9f:33:61:ae:b6:35:30:4e:6e:a7:9a:8b:8c:0c:41:ac:dc: 0c:ff:7d:00:52:18:59:a4:d6:22:00:61:6a:cf:01:2b:ca:1a: a7:46:30:17:24:4d:36:61:02:3c:93:9b:cb:6b:eb:6b:b6:2b: 4e:5a:6c:d9:62:cf:76:b5:bd:d1:15:71:5c:ee:9b:8b:fa:de: f1:ba:44:df:8d:a5:9d:8e:ae:df:d2:c3:29:64:1c:e2:8e:eb: 80:25:b0:f1:fd:4f:56:1c:15:cb:b5:1e:f2:ba:bc:90:44:f7: c5:0f:97:36:cc:5a:11:a8:32:13:6d:b1:7d:2d:cd:15:f4:99: a5:78:47:e6:c2:68:23:54:f3:81:b9:a2:51:c4:45:d6:57:44: 8a:fe:50:8b:6e:eb:40:08:98:3e:8c:39:a2:3e:e4:2e:25:6c: fc:ec:2c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMUG7b8OeF+u2yyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk MTI3MzI1YzUtZjFiNy00NzI4LTg1ZmYtMDNlMGE0YmI3YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJn8ps2yXum5OzYwcITCtWCgFgNiDak5rdqE LtSXffzlVka00FUVJMVHQW0F8CiFlKxVHHku6wKJ+fnLJx1Rqs3ahfOmRQ66wu5e NsH47K448vyKAjZWhMObQJDKLnyH9iv5Kva1CcT9DJh9vvDoZdUfhamVEkeJwUua 16cXMl5owaAjWCPn4a0JTPmsylLjRVbKz33S3TR6gd7UrtD5o6scJCz/yFjLtyqD VDWwOOGu8y29gRu1Uy/VXkNX9cZMyaJk9wyezOTQrC8i1wOoAWSOBmMOJc2PxIha m6umTSd7NzKL4g1khMVkvoShPbCE59td16ztoxdUwlg1cpInKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr2GnYEomJS7UEA+1f47bvQvs62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhjYTU2NDMtZmU0OS0z MTA4LThkYmQtZDRjYjYzZTRlOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJypMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP3hGqhUt42M3NQwzht06QB9inPqUuGO+UNCDLgeQoixs19fQdmXE8U FdsYwDwD90KzZZcxhASRYSE+AK3SvOeyy8bT+6M2XBMbpybui3Zdg8atNcl0RyTW P0+fM2GutjUwTm6nmouMDEGs3Az/fQBSGFmk1iIAYWrPASvKGqdGMBckTTZhAjyT m8tr62u2K05abNliz3a1vdEVcVzum4v63vG6RN+NpZ2Ort/SwylkHOKO64AlsPH9 T1YcFcu1HvK6vJBE98UPlzbMWhGoMhNtsX0tzRX0maV4R+bCaCNU84G5olHERdZX RIr+UItu60AImD6MOaI+5C4lbPzsLMA= -----END CERTIFICATE-----Generated at Sun Jan 25 17:31:49 2026 by rpki-client