This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa File: 5f031e31-67c0-3135-9681-d0bb711aa7d1.roa (raw, json) Hash identifier: bxAE1/kcCp7GWU942h8mliwj0owKxPxq4O88U127lT8= Subject key identifier: 52:D1:90:4E:A1:75:29:A9:F2:E0:25:DC:95:06:AE:3D:3F:14:8B:CB Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C59316C064A8EE5731B603240 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 202 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:6c:06:4a:8e:e5:73:1b:60:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=937c3978-793d-4ac6-b7eb-79a0c2fcd189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:79:aa:40:94:55:f3:6c:d9:49:5f:af:d6:ea: b3:2b:fd:89:13:a7:c6:8b:3a:99:94:cb:45:92:5f: 3e:95:c4:54:e1:d2:41:e1:75:80:9a:42:70:f1:f3: 74:fd:4b:63:39:27:ec:58:52:cb:c3:1a:c8:65:13: c1:f3:69:cb:a7:00:0a:f3:1c:de:25:5a:49:7a:4d: c2:9a:a4:9c:16:ac:7d:f0:c7:f6:93:96:9a:95:17: 0b:ba:a1:31:73:b8:12:b0:de:17:18:15:fe:3e:f6: 36:e1:96:d1:3d:7b:81:a4:ef:7b:78:82:8b:57:15: 91:0f:e8:cc:ec:5f:72:9b:20:8e:62:2a:89:8c:5c: 1d:ce:e8:9e:11:a7:9b:e3:dd:de:19:f3:57:cc:04: 2f:ce:29:90:2e:2c:e2:29:9c:85:47:b2:35:cc:d4: d5:1c:23:56:48:61:77:66:83:68:bd:91:fd:62:a8: 4b:f7:f6:e0:13:75:e3:89:d0:07:0f:18:4e:87:07: 99:50:3d:f2:a5:ac:c3:5e:e9:4f:ea:e7:bf:9e:0f: 9c:7f:f6:db:83:50:e6:ca:1c:70:18:99:35:1c:2f: ec:9a:48:7a:fa:f1:86:59:77:96:2d:a1:47:4e:5a: 64:55:88:44:ca:63:73:33:2d:19:f7:91:9b:30:65: 98:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D1:90:4E:A1:75:29:A9:F2:E0:25:DC:95:06:AE:3D:3F:14:8B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5f031e31-67c0-3135-9681-d0bb711aa7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:18:56:29:29:5d:46:21:b3:d2:9e:84:a8:65:2c:a3:a9:e5: ee:4e:56:74:98:52:68:58:99:20:34:99:99:15:c4:13:ee:20: 23:90:3e:37:60:39:04:42:41:f7:57:48:43:85:90:83:7c:33: 29:1f:37:53:84:17:21:75:67:1c:9c:4c:b8:9a:6e:48:e1:6c: 34:e9:7f:0f:12:8f:17:44:04:a5:8d:8e:27:86:3b:a4:cf:2a: f6:af:73:ec:48:1d:69:6a:19:dd:98:73:1a:21:e3:d3:dc:8d: 22:72:b4:a7:ea:86:fc:68:92:27:ad:59:44:a0:ef:be:91:c2: 8e:ce:cc:1a:93:2d:3b:e3:08:01:f2:05:c9:85:72:4e:be:49: 60:2d:c0:a9:4d:76:50:62:1a:92:bc:07:ad:36:2f:3e:76:f6: 32:24:8e:1f:96:12:00:0d:46:d2:03:28:ed:1b:dd:90:91:04: 96:d6:79:e8:5c:2d:01:f3:dd:4c:de:52:5f:ac:45:12:99:d8: d7:ad:a0:c4:b2:05:0e:0e:34:94:3f:e4:26:78:ea:16:c0:1d: 0c:c1:07:b6:d7:28:97:5e:6f:9a:22:85:d5:55:65:c9:da:c9: 35:25:7e:fd:38:af:f5:a3:b9:5e:9d:23:95:93:b8:68:a9:a7: 3d:4c:bb:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMWwGSo7lcxtgMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk OTM3YzM5NzgtNzkzZC00YWM2LWI3ZWItNzlhMGMyZmNkMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XmqQJRV82zZSV+v1uqzK/2JE6fGizqZlMtF kl8+lcRU4dJB4XWAmkJw8fN0/UtjOSfsWFLLwxrIZRPB82nLpwAK8xzeJVpJek3C mqScFqx98Mf2k5aalRcLuqExc7gSsN4XGBX+PvY24ZbRPXuBpO97eIKLVxWRD+jM 7F9ymyCOYiqJjFwdzuieEaeb493eGfNXzAQvzimQLiziKZyFR7I1zNTVHCNWSGF3 ZoNovZH9YqhL9/bgE3XjidAHDxhOhweZUD3ypazDXulP6ue/ng+cf/bbg1Dmyhxw GJk1HC/smkh6+vGGWXeWLaFHTlpkVYhEymNzMy0Z95GbMGWY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLRkE6hdSmp8uAl3JUGrj0/FIvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWYwMzFlMzEtNjdjMC0z MTM1LTk2ODEtZDBiYjcxMWFhN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIYVikpXUYhs9KehKhlLKOp5e5OVnSYUmhYmSA0mZkVxBPuICOQPjdg OQRCQfdXSEOFkIN8MykfN1OEFyF1ZxycTLiabkjhbDTpfw8SjxdEBKWNjieGO6TP Kvavc+xIHWlqGd2Ycxoh49PcjSJytKfqhvxokietWUSg776Rwo7OzBqTLTvjCAHy BcmFck6+SWAtwKlNdlBiGpK8B602Lz529jIkjh+WEgANRtIDKO0b3ZCRBJbWeehc LQHz3UzeUl+sRRKZ2NetoMSyBQ4ONJQ/5CZ46hbAHQzBB7bXKJdeb5oihdVVZcna yTUlfv04r/WjuV6dI5WTuGippz1MuwM= -----END CERTIFICATE-----Generated at Sun Jan 25 09:59:27 2026 by rpki-client