This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa
File: 5237c2a4-4861-320a-8193-cd92a08fc31f.roa (raw, json)
Hash identifier: Mq912l/+6+dGyycohbn4iW39gSjcEX2BPvLOtuUvfKU=
Subject key identifier: 5B:6A:DC:C0:F1:E1:60:13:5A:7E:72:BB:43:BB:BB:A4:51:2E:CB:C3
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584C33811B32B5E35BB15A5C9700
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa
Signing time: Tue 16 Dec 2025 02:00:31 +0000
ROA not before: Tue 16 Dec 2025 02:00:31 +0000
ROA not after: Mon 16 Mar 2026 01:00:31 +0000
asID: 3360
IP address blocks: 20.133.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:33:81:1b:32:b5:e3:5b:b1:5a:5c:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 16 02:00:31 2025 GMT
Not After : Mar 16 01:00:31 2026 GMT
Subject: CN=49c6ae5e-c680-40af-8bbe-f0b37b80a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:75:15:e3:55:a5:89:0d:83:6b:d1:19:07:47:
24:b8:88:9b:3c:41:30:91:27:29:da:2f:6b:80:b4:
03:d6:68:7a:12:5c:3d:a2:00:43:25:f5:da:24:18:
ed:75:b4:fe:d1:7c:ee:54:24:a5:73:bd:d4:89:30:
df:0c:7f:40:34:0f:27:78:3d:35:bf:e7:45:5a:c2:
8c:1a:c0:93:04:d1:9b:49:d3:05:de:db:33:b8:bc:
d3:88:59:01:73:54:f4:8d:21:02:b2:83:17:bc:a4:
e2:5c:96:c4:b1:13:91:af:cb:a2:22:14:03:cd:07:
8e:c3:ae:54:48:a6:73:87:4f:90:9f:f3:10:53:2b:
17:3b:d8:f9:52:bc:3b:cc:8e:15:68:31:c0:0e:08:
49:c5:22:e4:03:60:60:a9:2f:16:09:78:fa:73:f7:
0a:65:6e:2c:73:98:08:d2:d3:56:55:fc:e7:e8:02:
17:58:24:3f:98:51:f3:66:7e:94:7a:89:bb:ce:b2:
fe:d3:ed:27:3f:be:eb:4a:ae:86:5d:0b:c8:28:22:
94:69:c1:35:aa:31:61:90:3c:50:03:ec:f4:6e:53:
6e:30:4c:82:00:8b:b3:47:36:cd:a8:f1:d9:f8:f1:
59:a9:75:9d:55:51:c7:82:da:05:f1:74:0f:c0:8c:
4a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6A:DC:C0:F1:E1:60:13:5A:7E:72:BB:43:BB:BB:A4:51:2E:CB:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5237c2a4-4861-320a-8193-cd92a08fc31f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:3b:3b:9b:72:6a:dd:95:d2:51:1f:1b:e2:ec:2e:c0:21:87:
ae:01:b2:29:ab:b1:2b:55:59:4c:4e:3b:6c:9f:d1:d1:3a:d1:
5a:11:34:40:cd:2e:49:9c:16:6f:76:a2:f7:32:ec:59:d8:98:
70:db:d2:40:b9:8a:87:04:f0:fb:bc:66:5e:01:ee:a9:94:a6:
5d:0b:3b:c9:cd:ac:0d:0b:10:77:ec:95:8a:34:0c:d4:39:ea:
2a:08:62:3d:61:18:0a:f7:fe:61:a4:73:36:99:c1:7c:03:10:
3c:f8:bd:09:6b:c3:55:ec:0e:48:e3:22:4f:10:ba:50:b5:92:
38:fa:b2:33:0d:a2:ca:bf:07:03:96:f6:fe:2e:43:75:34:c3:
62:d2:ad:f6:ea:77:ae:92:9d:21:2f:54:28:93:d6:c7:d9:73:
74:f7:ba:70:cc:c8:6d:e0:88:a7:4b:9d:49:7d:53:a9:3f:6d:
29:93:13:48:94:d3:3b:3c:07:5d:4a:18:dd:b9:20:19:6b:58:
e7:2a:47:2d:c9:83:ac:d9:52:e5:41:c7:e4:af:c2:d4:8f:c3:
ba:0f:ce:d3:ff:ff:d2:92:8a:46:1c:d5:25:0e:73:21:f3:3a:
fc:28:51:8e:59:25:d1:bb:1a:55:7d:f8:82:a1:0b:28:0d:29:
d0:0e:47:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:39:59 2025 by rpki-client