This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa File: d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa (raw, json) Hash identifier: Rri31fRaY+ExcYwGXE+Px3D+L8QntpXOYp3IFPtKBnw= Subject key identifier: 93:C9:E8:5D:E8:D4:9A:C5:E5:CB:2A:04:B0:44:27:4A:46:78:2A:CD Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C59316903FE5E62DBE498D180 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 3360 IP address blocks: 20.138.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:69:03:fe:5e:62:db:e4:98:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=3d1d6e36-297b-421a-af09-8de7cdb79b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:b2:c2:66:02:9a:ac:50:28:b7:57:19:9b: 54:eb:b5:d1:cd:23:31:2e:6d:f2:00:19:ac:04:e9: b8:94:6c:6f:a8:74:54:9a:a0:2a:9a:c5:38:e4:1d: ba:5e:69:d3:80:aa:31:bb:8f:f1:37:ab:5d:f3:f7: 6c:6d:08:f0:c3:58:9b:47:ff:a7:a4:c5:3b:5a:1c: 2c:33:21:4d:3c:a1:df:18:e9:66:70:b4:8f:c5:2d: a9:84:ad:b7:a5:28:fb:43:e2:dc:69:8f:37:df:9a: ea:a6:3b:e0:23:5c:a5:c3:88:a8:c4:ee:6c:89:2e: c8:57:71:62:0c:a0:7a:f6:99:19:94:62:c9:2f:ad: cf:5f:77:2a:4a:fa:83:b9:0f:42:10:cb:98:90:22: 10:09:52:70:45:76:ee:4c:99:25:01:cd:26:f6:23: 08:58:0a:59:8e:8b:2d:b1:ca:61:48:9e:65:95:a9: 6a:40:a7:38:ea:a2:56:1b:16:c2:87:17:d6:8c:9a: 53:b6:e8:52:05:44:87:13:6a:fb:ba:bb:a1:9b:91: db:52:19:25:d7:1b:0a:73:2f:f8:d7:93:d9:19:d6: 40:6c:77:1c:bf:ba:88:db:69:8c:ea:49:29:2d:ae: b7:59:2c:25:24:35:67:6e:75:bf:8d:ac:43:28:73: 9c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C9:E8:5D:E8:D4:9A:C5:E5:CB:2A:04:B0:44:27:4A:46:78:2A:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/d8a8894d-d034-39c7-aa71-ce39fb0d8b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:00:4f:25:db:60:17:29:4b:4e:75:27:3f:f3:4a:6c:65:d4: 9c:c6:29:20:f9:9d:31:99:52:54:48:f4:ec:b0:87:49:c0:a5: ad:78:98:ef:8d:f2:54:65:40:e9:eb:b9:7d:c0:b1:85:91:bc: b7:63:73:01:0f:e8:5e:f2:6a:cd:9a:cd:e7:46:44:ec:c2:8f: 0c:ac:1a:79:9d:ee:f4:4b:29:1a:21:0d:fb:16:10:74:2e:e3: ee:90:54:b6:2a:2a:e8:1f:81:1d:2a:76:40:20:42:7d:f3:c6: e2:d8:6f:56:6d:e2:d7:4a:04:1c:03:8c:fa:f3:f8:26:c3:e0: cd:fa:7f:18:83:7d:30:f0:55:0d:84:15:b9:f0:dc:86:da:97: 54:4d:aa:a6:df:24:de:1e:e9:1d:6b:7f:df:9a:65:e9:45:96: 45:5f:0a:7d:37:42:3d:2d:b3:bc:63:f6:c3:cb:95:a7:4c:c2: d7:1c:a2:85:d7:3a:83:f9:43:bf:e0:48:c3:c2:4a:24:50:79: e2:e1:71:c0:dd:fc:a5:0a:a2:09:62:25:3d:fe:93:58:57:dc: 0c:5f:69:84:24:93:2e:e6:e3:0e:f1:a1:0f:38:20:5b:03:33: cb:f2:d0:dd:f3:67:13:b8:43:20:8d:56:9b:07:9c:f1:26:01: ca:17:45:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMWkD/l5i2+SY0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk M2QxZDZlMzYtMjk3Yi00MjFhLWFmMDktOGRlN2NkYjc5YjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloGywmYCmqxQKLdXGZtU67XRzSMxLm3yABms BOm4lGxvqHRUmqAqmsU45B26XmnTgKoxu4/xN6td8/dsbQjww1ibR/+npMU7Whws MyFNPKHfGOlmcLSPxS2phK23pSj7Q+LcaY8335rqpjvgI1ylw4ioxO5siS7IV3Fi DKB69pkZlGLJL63PX3cqSvqDuQ9CEMuYkCIQCVJwRXbuTJklAc0m9iMIWApZjost scphSJ5llalqQKc46qJWGxbChxfWjJpTtuhSBUSHE2r7uruhm5HbUhkl1xsKcy/4 15PZGdZAbHccv7qI22mM6kkpLa63WSwlJDVnbnW/jaxDKHOcJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPJ6F3o1JrF5csqBLBEJ0pGeCrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZDhhODg5NGQtZDAzNC0z OWM3LWFhNzEtY2UzOWZiMGQ4YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkATyXbYBcpS051Jz/zSmxl1JzGKSD5nTGZUlRI9Oywh0nApa14mO+N 8lRlQOnruX3AsYWRvLdjcwEP6F7yas2azedGROzCjwysGnmd7vRLKRohDfsWEHQu 4+6QVLYqKugfgR0qdkAgQn3zxuLYb1Zt4tdKBBwDjPrz+CbD4M36fxiDfTDwVQ2E Fbnw3Ibal1RNqqbfJN4e6R1rf9+aZelFlkVfCn03Qj0ts7xj9sPLladMwtccooXX OoP5Q7/gSMPCSiRQeeLhccDd/KUKogliJT3+k1hX3AxfaYQkky7m4w7xoQ84IFsD M8vy0N3zZxO4QyCNVpsHnPEmAcoXRR0= -----END CERTIFICATE-----Generated at Sun Jan 25 12:55:06 2026 by rpki-client