This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa File: 895b35f2-676a-36ad-9bd6-7860fc097fbf.roa (raw, json) Hash identifier: X/MLMhCt7IiNOC6RoBdeVUg66GFeWh76H8tJ/W7xTPc= Subject key identifier: D5:3A:28:EF:37:AD:5D:EE:C7:7E:32:9F:F0:C4:7F:7F:28:11:7D:1A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584BFBAB59DF9999172BB94D3080 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 203 IP address blocks: 20.133.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:59:df:99:99:17:2b:b9:4d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=2be43d55-6d72-4a8c-9bf4-6df84808f877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:e3:1d:a3:4d:61:53:00:10:8d:1d:31:b0: 00:a1:9d:9f:55:c4:66:09:bb:e2:5b:32:cf:02:f0: c4:fb:c2:30:6e:89:70:71:07:a4:a3:da:d0:b4:06: 9e:57:33:d9:32:a3:81:cb:73:d6:d5:5c:1e:6c:79: ba:f5:a5:72:0f:3f:16:50:e0:98:81:e5:c4:c6:0f: cf:6e:d9:40:85:f5:9c:0e:c5:d9:44:4f:c1:68:c6: fb:10:a2:3e:32:3d:f2:c3:b5:b6:b0:03:b5:ee:e4: 67:ab:f7:d5:22:9e:f3:fc:90:c3:95:af:a9:99:63: b4:7a:58:99:58:a1:d8:02:cd:e0:36:13:4d:17:e9: e6:71:c4:cf:82:63:31:13:6a:cf:97:09:fd:ad:f8: 27:69:ef:9a:a3:30:8d:d6:05:24:7a:03:39:67:6e: 76:ed:91:95:a1:da:b0:ac:47:6e:d5:8b:8b:15:2b: 44:93:71:4b:02:f8:64:5f:3d:a6:59:22:25:ab:9c: 28:16:07:56:a8:2f:52:6b:df:b8:e9:22:d4:85:44: f4:6b:0a:cc:da:1f:f4:6c:60:01:74:d2:33:56:b0: 20:00:cf:de:e6:73:f8:0e:3a:38:be:68:35:f6:b8: 14:f2:7d:a3:23:6e:bb:72:84:2f:b5:24:1b:70:13: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3A:28:EF:37:AD:5D:EE:C7:7E:32:9F:F0:C4:7F:7F:28:11:7D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/895b35f2-676a-36ad-9bd6-7860fc097fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:46:87:07:1c:1b:42:1d:95:bf:d6:a4:4b:8a:8f:0e:56:5f: 8b:28:b6:31:72:da:b9:2a:86:fa:5d:2c:4f:00:b9:c8:2e:c3: c2:8f:dc:5c:ec:3d:4d:84:83:d1:1e:97:b2:60:56:c0:39:4c: de:26:ad:64:f3:05:e5:28:c1:1a:e7:a4:d6:a7:4b:0c:93:e8: e6:c5:f9:55:5b:33:43:fe:f5:00:d3:2f:f5:43:c1:fb:2f:1e: cc:32:a7:32:e5:35:13:6a:56:03:8a:06:52:1c:7e:06:87:a0: 7d:f4:a1:f0:fe:f9:94:39:88:af:f7:6a:cd:62:d1:6c:33:74: 87:e5:a4:69:4c:25:fc:84:3d:6b:71:22:c9:cb:00:53:c1:e0: 16:95:e7:ff:e0:fb:78:84:9b:c7:05:00:32:64:a1:26:19:dd: 28:f6:f3:a7:c8:e6:24:69:a9:b7:6b:85:5c:73:34:a3:5f:53: c9:27:62:53:c4:96:95:fd:93:7f:b2:11:8c:84:ac:6a:e9:7f: b0:cb:90:5c:ae:59:7c:b3:4e:ac:fa:15:92:d2:c2:9d:d5:20: bd:e1:2d:d1:5a:84:7b:08:cc:6a:2d:5b:46:d4:2f:5b:ff:49: 5c:a8:97:55:0e:36:64:4b:d9:b6:e2:68:57:11:b3:51:f8:40: fc:75:f5:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q1nfmZkXK7lNMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk MmJlNDNkNTUtNmQ3Mi00YThjLTliZjQtNmRmODQ4MDhmODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBzjHaNNYVMAEI0dMbAAoZ2fVcRmCbviWzLP AvDE+8IwbolwcQeko9rQtAaeVzPZMqOBy3PW1VwebHm69aVyDz8WUOCYgeXExg/P btlAhfWcDsXZRE/BaMb7EKI+Mj3yw7W2sAO17uRnq/fVIp7z/JDDla+pmWO0eliZ WKHYAs3gNhNNF+nmccTPgmMxE2rPlwn9rfgnae+aozCN1gUkegM5Z2527ZGVodqw rEdu1YuLFStEk3FLAvhkXz2mWSIlq5woFgdWqC9Sa9+46SLUhUT0awrM2h/0bGAB dNIzVrAgAM/e5nP4Djo4vmg19rgU8n2jI267coQvtSQbcBPgnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU6KO83rV3ux34yn/DEf38oEX0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvODk1YjM1ZjItNjc2YS0z NmFkLTliZDYtNzg2MGZjMDk3ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9GhwccG0Idlb/WpEuKjw5WX4sotjFy2rkqhvpdLE8Aucguw8KP3Fzs PU2Eg9Eel7JgVsA5TN4mrWTzBeUowRrnpNanSwyT6ObF+VVbM0P+9QDTL/VDwfsv HswypzLlNRNqVgOKBlIcfgaHoH30ofD++ZQ5iK/3as1i0WwzdIflpGlMJfyEPWtx IsnLAFPB4BaV5//g+3iEm8cFADJkoSYZ3Sj286fI5iRpqbdrhVxzNKNfU8knYlPE lpX9k3+yEYyErGrpf7DLkFyuWXyzTqz6FZLSwp3VIL3hLdFahHsIzGotW0bUL1v/ SVyol1UONmRL2bbiaFcRs1H4QPx19Rk= -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:51 2025 by rpki-client