This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7fe65c36-0855-383c-bd31-06995badfc55.roa File: 7fe65c36-0855-383c-bd31-06995badfc55.roa (raw, json) Hash identifier: xhSj2ixnvS/S1O9Bh/vP4J+cqFMvHIBbXEz6jawR6DI= Subject key identifier: 84:90:73:28:64:96:11:19:73:AC:AA:B3:4A:4D:41:76:CE:5E:C2:73 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C33811B6A8EBE72C22B8AAD80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7fe65c36-0855-383c-bd31-06995badfc55.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 202 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:1b:6a:8e:be:72:c2:2b:8a:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=0ad6eb7e-cf4a-4dc3-8d64-e3f73e3f5e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:37:21:6b:fd:bd:88:2e:c9:22:e0:a5:30:69: 97:82:80:2e:52:13:46:3d:dd:4b:5f:cd:7f:e3:7c: 13:f4:f2:fc:12:ec:75:ae:cb:fa:2a:9a:07:22:15: 4c:97:23:c7:74:7b:a3:5d:0e:a4:98:cf:42:8a:7d: 40:31:ef:2a:69:14:7c:a8:30:f7:37:86:0d:3c:ca: b1:16:88:17:ce:0a:c8:8c:b7:93:79:a0:42:2a:e1: 3b:be:65:4a:e8:d4:28:2e:6e:80:d9:ee:10:f5:a9: b3:c5:0e:ef:be:37:46:9f:7b:67:6d:80:c9:7c:c4: b1:9f:10:7a:4a:1c:36:6b:c3:9d:f3:6c:3a:d5:0f: 0c:75:32:3e:73:60:ca:45:0f:f7:d6:b2:87:1e:af: da:06:a5:7e:d4:bc:ca:c9:73:8e:d0:c9:1c:bd:8c: 27:91:f3:a9:3e:93:c7:51:77:0c:48:55:74:74:7c: 07:5a:c5:3f:84:15:4c:5d:8c:ae:be:4b:18:41:ff: 37:4d:ae:09:52:33:08:16:b3:5d:28:96:de:49:76: ac:5e:24:37:63:0f:ce:ee:41:20:c0:fd:c3:02:fd: e3:fb:96:49:2e:b9:ce:a6:c9:99:cf:7a:2f:58:e0: c7:6e:fd:a1:21:38:cd:f0:f6:d7:37:2c:7d:82:79: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:90:73:28:64:96:11:19:73:AC:AA:B3:4A:4D:41:76:CE:5E:C2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7fe65c36-0855-383c-bd31-06995badfc55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:30:26:16:15:36:93:15:83:d1:0f:a2:9d:8c:5b:d6:a3:cd: f2:e4:27:44:f5:1d:8b:e6:22:dc:5c:d1:9f:cf:2f:b7:08:ff: 9f:48:45:6c:bd:3d:9d:55:ed:8e:a1:3d:f2:43:e5:d5:91:2b: 6a:fa:d4:b9:24:02:59:22:0d:1d:77:aa:74:cc:22:87:37:81: f9:d1:82:e3:f2:e3:f6:80:1e:a2:c2:14:6c:3c:23:c6:66:98: 07:7a:a0:86:8a:26:ad:2a:18:4a:78:a4:3e:98:09:d1:1e:01: 35:7d:5c:f9:7c:00:02:c7:18:c1:76:5a:49:fb:e0:6c:3e:3b: d4:a3:35:4e:a1:b1:36:dd:81:7c:99:28:45:56:d5:d4:1a:ea: 75:fa:ac:ea:6d:a3:c6:b5:bf:bf:e9:34:91:0a:6a:a6:67:be: 55:f6:8d:86:3c:a5:4b:39:6e:52:72:74:83:42:bf:a0:b1:c1: d8:b8:f8:1e:ec:00:71:63:07:94:cd:b4:79:ca:f4:98:bc:0c: 3d:0a:d6:f4:72:48:af:de:dc:86:2a:2d:6a:5c:55:b2:99:74: 61:49:56:88:57:c1:78:52:25:e1:e0:17:bb:61:2f:ca:5e:84: 43:9f:ee:e0:2e:51:fa:d0:2a:a3:ab:64:04:3a:75:ac:48:cd: 99:e0:a5:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgRtqjr5ywiuKrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk MGFkNmViN2UtY2Y0YS00ZGMzLThkNjQtZTNmNzNlM2Y1ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjcha/29iC7JIuClMGmXgoAuUhNGPd1LX81/ 43wT9PL8Eux1rsv6KpoHIhVMlyPHdHujXQ6kmM9Cin1AMe8qaRR8qDD3N4YNPMqx FogXzgrIjLeTeaBCKuE7vmVK6NQoLm6A2e4Q9amzxQ7vvjdGn3tnbYDJfMSxnxB6 Shw2a8Od82w61Q8MdTI+c2DKRQ/31rKHHq/aBqV+1LzKyXOO0MkcvYwnkfOpPpPH UXcMSFV0dHwHWsU/hBVMXYyuvksYQf83Ta4JUjMIFrNdKJbeSXasXiQ3Yw/O7kEg wP3DAv3j+5ZJLrnOpsmZz3ovWODHbv2hITjN8PbXNyx9gnleQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISQcyhklhEZc6yqs0pNQXbOXsJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvN2ZlNjVjMzYtMDg1NS0z ODNjLWJkMzEtMDY5OTViYWRmYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIwJhYVNpMVg9EPop2MW9ajzfLkJ0T1HYvmItxc0Z/PL7cI/59IRWy9 PZ1V7Y6hPfJD5dWRK2r61LkkAlkiDR13qnTMIoc3gfnRguPy4/aAHqLCFGw8I8Zm mAd6oIaKJq0qGEp4pD6YCdEeATV9XPl8AALHGMF2Wkn74Gw+O9SjNU6hsTbdgXyZ KEVW1dQa6nX6rOpto8a1v7/pNJEKaqZnvlX2jYY8pUs5blJydINCv6Cxwdi4+B7s AHFjB5TNtHnK9Ji8DD0K1vRySK/e3IYqLWpcVbKZdGFJVohXwXhSJeHgF7thL8pe hEOf7uAuUfrQKqOrZAQ6daxIzZngpQ8= -----END CERTIFICATE-----Generated at Sat Dec 20 03:18:37 2025 by rpki-client