This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa File: 5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa (raw, json) Hash identifier: rI5TdYd5mNMz6nvUk2j9ouWe4UqN6K1Fpc0S9fB7fyM= Subject key identifier: 85:9D:1B:80:C0:B5:7F:B4:86:DC:9D:4B:9A:CB:4D:13:7E:D3:10:3E Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C593145C5CB833FE0E4C1A780 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 202 IP address blocks: 20.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:45:c5:cb:83:3f:e0:e4:c1:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=21155594-b7fa-441b-a235-eb9d5e2354f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:47:c7:2b:c7:01:86:6c:20:b8:b7:04:88:68: 27:03:42:1d:ef:b1:cd:c1:d3:32:ab:c3:9d:98:73: 0b:4e:0e:ea:ea:81:e9:20:fb:57:cd:12:e0:a3:b9: 4c:49:68:0c:5b:fe:9a:f9:46:24:ef:10:98:0a:37: a1:08:88:b3:b7:67:79:86:f7:f3:4b:6c:8a:b8:e4: ed:af:fd:83:e2:4f:6c:e2:c6:e3:87:ca:f6:98:56: 79:80:79:03:11:75:9e:77:5b:11:41:2d:a6:c2:b5: 02:58:be:7d:19:b5:09:6d:e0:fd:6d:02:f8:b0:f2: a8:5a:94:bc:aa:ea:df:56:85:e4:87:f6:e1:e9:64: 17:22:ac:dd:58:75:c5:f2:ce:cc:a0:5b:60:ae:70: 2d:c8:05:78:00:5f:83:88:4e:13:ff:7d:9a:d6:5f: 84:ad:00:f7:b6:48:bd:61:4e:3d:fc:ee:6c:75:cc: cf:c1:95:f7:40:45:87:0f:75:5c:cf:b3:13:3f:30: c3:e2:da:16:29:15:97:e6:cb:6b:a6:4d:22:02:82: ea:d4:27:4d:d4:8a:ac:b6:c9:50:49:fe:27:a2:c0: 55:dc:f2:16:0a:b8:37:1b:87:0b:52:5f:78:e4:43: 5b:a6:23:ee:4e:28:d5:c7:73:22:b4:d9:25:98:08: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9D:1B:80:C0:B5:7F:B4:86:DC:9D:4B:9A:CB:4D:13:7E:D3:10:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5cea40f3-a075-3b45-bd3b-a7220cf09c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:21:b0:54:43:a2:54:2f:ff:a3:ad:57:f2:ad:77:22:dc:93: 51:84:67:93:60:ac:38:2f:d5:ff:10:b2:5c:6f:6e:f3:08:c5: e6:09:dd:15:f2:d7:61:cd:d4:f0:1c:84:56:a7:83:b5:34:37: 99:1a:d5:0d:2e:ea:49:d8:f7:ef:88:45:33:b0:ab:ab:ac:86: f0:ef:99:3f:23:e7:19:45:c3:44:7a:2c:fc:af:18:7c:4e:23: 1c:f8:1e:57:af:83:2e:50:2e:fc:eb:9a:22:8d:42:35:f4:03: ed:c0:d9:38:09:34:4c:27:bc:81:4c:17:cf:46:0d:05:9a:53: 79:9c:17:47:a2:41:ec:e1:dc:f7:a1:5c:69:ca:43:57:57:6c: 94:88:b1:f1:dd:b2:f3:c8:11:ff:2b:25:55:b5:10:54:41:04: ca:a2:26:e6:f2:7a:54:8a:be:e0:84:df:7d:98:53:dc:02:6e: a6:8a:07:2a:99:ab:04:8e:67:c3:31:18:7e:84:77:1a:8a:35: 05:10:9b:cd:2d:87:05:cf:b2:0b:44:bd:ab:6c:30:f5:9b:55: 94:68:56:7b:33:d7:85:dc:10:ef:b0:b9:72:21:fe:db:1a:87: c5:44:21:0d:10:6d:94:b9:e2:68:03:59:a4:06:a6:ec:43:f5: 9a:c4:66:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMUXFy4M/4OTBp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk MjExNTU1OTQtYjdmYS00NDFiLWEyMzUtZWI5ZDVlMjM1NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkfHK8cBhmwguLcEiGgnA0Id77HNwdMyq8Od mHMLTg7q6oHpIPtXzRLgo7lMSWgMW/6a+UYk7xCYCjehCIizt2d5hvfzS2yKuOTt r/2D4k9s4sbjh8r2mFZ5gHkDEXWed1sRQS2mwrUCWL59GbUJbeD9bQL4sPKoWpS8 qurfVoXkh/bh6WQXIqzdWHXF8s7MoFtgrnAtyAV4AF+DiE4T/32a1l+ErQD3tki9 YU49/O5sdczPwZX3QEWHD3Vcz7MTPzDD4toWKRWX5strpk0iAoLq1CdN1IqstslQ Sf4nosBV3PIWCrg3G4cLUl945ENbpiPuTijVx3MitNklmAhBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWdG4DAtX+0htydS5rLTRN+0xA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWNlYTQwZjMtYTA3NS0z YjQ1LWJkM2ItYTcyMjBjZjA5YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4hsFRDolQv/6OtV/KtdyLck1GEZ5NgrDgv1f8QslxvbvMIxeYJ3RXy 12HN1PAchFang7U0N5ka1Q0u6knY9++IRTOwq6ushvDvmT8j5xlFw0R6LPyvGHxO Ixz4Hlevgy5QLvzrmiKNQjX0A+3A2TgJNEwnvIFMF89GDQWaU3mcF0eiQezh3Peh XGnKQ1dXbJSIsfHdsvPIEf8rJVW1EFRBBMqiJubyelSKvuCE332YU9wCbqaKByqZ qwSOZ8MxGH6EdxqKNQUQm80thwXPsgtEvatsMPWbVZRoVnsz14XcEO+wuXIh/tsa h8VEIQ0QbZS54mgDWaQGpuxD9ZrEZk4= -----END CERTIFICATE-----Generated at Sun Jan 25 12:54:59 2026 by rpki-client