This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa File: b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa (raw, json) Hash identifier: a/mLXYvxyuFR3zmkTa6vA3vbzIJnHJnfCjrqNHCQXrs= Subject key identifier: 76:AC:EC:4D:BB:0A:1B:3C:14:FF:6F:11:A6:A2:4C:BD:3F:8A:05:64 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584BCD9B1E9E3FE932B8FCD3D180 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 202 IP address blocks: 20.132.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:1e:9e:3f:e9:32:b8:fc:d3:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=4fe88796-34d6-4870-bb42-6e5ab493634e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:11:01:08:94:b8:37:67:dd:57:28:31:1f: 07:cf:59:45:af:c3:36:ce:88:4d:53:6e:87:eb:d1: 98:73:ba:56:01:1d:6b:04:fe:3d:f6:e5:1d:12:b8: 23:e6:09:e8:68:cd:e0:3f:cf:70:ab:49:48:95:bf: 95:5b:3f:ea:9c:5c:8a:6b:48:04:a3:b4:7a:e3:d3: a5:10:01:0d:10:4b:c4:d4:e6:1d:c0:6d:2a:3c:c7: 22:93:75:59:50:fb:32:45:45:26:99:b6:96:c3:00: 87:41:06:d9:00:07:7c:54:e5:dd:b3:d3:a5:9b:01: cf:9f:97:bf:09:ac:7f:3e:70:34:4a:08:60:92:fe: 1d:dc:44:58:77:03:b8:11:29:14:31:4c:e7:1c:14: 10:4c:4a:c0:06:c1:5d:02:35:1b:53:e2:9f:7b:ba: e1:15:55:8d:fe:a6:1e:64:9b:5e:83:55:fc:f6:51: f3:33:05:ff:3e:70:cb:9c:59:db:65:a2:72:1d:2f: 96:92:4b:ed:d1:b5:6e:54:c7:e7:fc:fe:f5:4a:3a: 9e:82:85:a7:ac:2f:29:3c:ac:95:04:09:da:f8:60: e4:56:19:f0:72:16:10:ce:88:c4:27:1c:09:22:e6: 74:37:f9:c8:2d:c0:78:3d:05:25:57:4e:b7:d2:c6: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AC:EC:4D:BB:0A:1B:3C:14:FF:6F:11:A6:A2:4C:BD:3F:8A:05:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9c1f01c-f483-3a6c-b436-d6ffb3cd7c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1a:99:2d:99:77:b6:e2:41:a9:15:2f:a7:db:7d:1a:a6:99: 37:8c:12:0e:19:9c:50:ec:ae:6f:32:4b:e5:ac:9e:70:ec:21: c6:b2:df:c8:5b:98:14:5b:45:01:65:0f:b3:14:78:81:16:bd: 06:e5:37:1c:07:f0:b1:76:a3:54:dd:f0:89:ce:30:d5:11:bd: 39:28:3a:50:80:9b:39:62:fe:4f:75:e8:90:9e:5b:bb:7a:f4: 73:81:d6:60:bb:b7:be:a8:54:49:16:e2:2e:b3:99:12:5d:1c: d9:c0:3f:08:c8:63:d4:28:6b:7d:b2:60:ad:a3:8c:a6:e0:2e: f2:58:ec:f3:24:d1:53:28:e5:ac:fb:27:dd:50:e9:aa:9a:30: ca:7d:4e:0b:b9:5d:86:d2:cb:37:91:d4:a4:65:4e:36:8d:9b: 97:98:98:de:cb:f7:a6:11:6d:0a:6c:7f:07:72:87:1c:30:13: 36:8a:13:4f:96:71:07:21:a9:cc:ab:63:d4:7f:89:e9:43:40: 84:b0:e8:31:8b:9b:ed:32:bd:99:16:52:c2:92:07:70:b1:35: 7e:87:52:ac:0d:77:ac:07:45:2b:db:51:d8:ea:9f:72:cf:15: c2:05:bb:20:32:fe:e6:2b:ec:c6:d4:72:07:18:e4:09:59:c8: fd:ac:41:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmx6eP+kyuPzT0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGZlODg3OTYtMzRkNi00ODcwLWJiNDItNmU1YWI0OTM2MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc0RAQiUuDdn3VcoMR8Hz1lFr8M2zohNU26H 69GYc7pWAR1rBP499uUdErgj5gnoaM3gP89wq0lIlb+VWz/qnFyKa0gEo7R649Ol EAENEEvE1OYdwG0qPMcik3VZUPsyRUUmmbaWwwCHQQbZAAd8VOXds9OlmwHPn5e/ Cax/PnA0Sghgkv4d3ERYdwO4ESkUMUznHBQQTErABsFdAjUbU+Kfe7rhFVWN/qYe ZJteg1X89lHzMwX/PnDLnFnbZaJyHS+Wkkvt0bVuVMfn/P71SjqegoWnrC8pPKyV BAna+GDkVhnwchYQzojEJxwJIuZ0N/nILcB4PQUlV0630sZHmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHas7E27Chs8FP9vEaaiTL0/igVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjljMWYwMWMtZjQ4My0z YTZjLWI0MzYtZDZmZmIzY2Q3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFITmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQamS2Zd7biQakVL6fbfRqmmTeMEg4ZnFDsrm8yS+WsnnDsIcay38hb mBRbRQFlD7MUeIEWvQblNxwH8LF2o1Td8InOMNURvTkoOlCAmzli/k916JCeW7t6 9HOB1mC7t76oVEkW4i6zmRJdHNnAPwjIY9Qoa32yYK2jjKbgLvJY7PMk0VMo5az7 J91Q6aqaMMp9Tgu5XYbSyzeR1KRlTjaNm5eYmN7L96YRbQpsfwdyhxwwEzaKE0+W cQchqcyrY9R/ielDQISw6DGLm+0yvZkWUsKSB3CxNX6HUqwNd6wHRSvbUdjqn3LP FcIFuyAy/uYr7MbUcgcY5AlZyP2sQUQ= -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:37 2025 by rpki-client