This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa File: ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa (raw, json) Hash identifier: /6Lvv6mhdJEN5D2ugkyYN4PGVoXwmOJpwa/R0/tCsEE= Subject key identifier: 5A:76:85:85:F7:81:3A:7E:EA:86:B0:04:8A:5F:BF:47:9E:21:79:63 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C33811ABB705F398DB0C71FC0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 202 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:1a:bb:70:5f:39:8d:b0:c7:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=1c49cbf1-fd6f-49ef-87c5-cedc1f4a1700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:97:50:c6:85:42:83:eb:58:5b:98:5b:00: 2e:0e:01:53:e6:02:09:a7:4c:a6:49:a9:8e:05:e3: ae:56:80:d8:f0:6d:6a:6d:d9:5a:0f:f0:46:3a:cb: 21:2a:72:15:fe:91:95:eb:66:6b:55:e8:19:5b:79: 86:af:f6:d5:12:a7:0e:02:76:2a:ba:0d:e5:58:94: 47:4e:83:21:6e:63:67:75:d7:34:23:46:66:53:6f: b9:db:d6:6b:da:9e:af:54:36:5d:5a:8c:73:fc:20: 56:2c:93:f6:73:3e:b5:54:40:1a:5c:ec:e2:bd:b5: 4e:73:ff:34:0b:9c:d7:7a:e9:30:37:95:1a:65:c0: c9:fb:fe:f6:92:67:ea:1b:86:c4:07:cf:a9:6d:01: d2:95:bc:04:45:da:92:5a:1c:ca:5a:e1:1d:1f:05: d6:24:02:42:44:53:0c:bd:55:9a:65:f5:af:86:8d: 56:35:ca:f5:d2:61:eb:d2:bc:a8:2b:3c:87:d2:9f: 82:f1:2d:12:8f:6a:e2:1d:6f:71:93:31:4a:0d:ae: 61:1f:f3:57:a7:a6:b7:df:09:e7:ec:46:37:ae:59: 80:ea:da:a6:b9:ff:5e:a4:89:ad:df:69:0e:6f:71: c7:22:2d:d6:be:0b:e4:ea:84:cb:c5:7c:07:00:3b: 3c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:76:85:85:F7:81:3A:7E:EA:86:B0:04:8A:5F:BF:47:9E:21:79:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/ab0c58d2-a2e3-3c49-b6d3-23cc6f2a524c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:76:c5:c3:ca:63:08:da:ac:c6:8c:9a:3c:a5:f2:40:11:48: 4e:a8:8b:70:ca:cb:01:b2:53:4d:07:c2:0f:c9:2d:ca:ca:f6: 26:f3:b6:5f:59:eb:0f:be:10:4e:6a:e6:df:81:6e:0f:29:4c: 07:75:5f:5e:e4:34:7c:c2:20:e0:4e:53:dc:55:56:36:e8:a4: 8c:e7:7f:89:e4:60:1a:cc:98:02:60:51:58:22:1d:57:3c:a9: eb:3c:8a:a3:40:d7:ac:9d:e3:f2:c8:49:5f:c2:16:17:c9:91: ad:cb:d2:67:aa:7e:31:b1:b1:79:70:00:7b:86:18:5f:e8:bf: db:93:76:20:70:6f:f6:b6:cb:6c:7f:45:f2:82:ef:44:17:6e: 07:dc:c9:fd:00:9f:56:fe:55:a8:aa:b8:c3:6b:2c:02:04:6c: fd:ff:d9:8e:8b:68:7b:17:21:03:f7:29:3d:06:8e:c1:b6:d5: d0:d9:dc:2b:ed:95:ed:cb:84:4b:97:4c:c7:52:cf:f6:c8:b1: 3b:37:5f:53:3b:84:c6:6e:8b:43:d9:6e:38:c8:4e:b4:29:e9: 4a:e5:b2:21:85:e2:98:00:03:75:0c:3b:bb:27:92:de:8c:fc: 3f:51:78:3c:da:29:ec:4e:80:e2:26:d9:cd:c1:bd:af:8f:9b: 20:93:00:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgRq7cF85jbDHH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk MWM0OWNiZjEtZmQ2Zi00OWVmLTg3YzUtY2VkYzFmNGExNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL2XUMaFQoPrWFuYWwAuDgFT5gIJp0ymSamO BeOuVoDY8G1qbdlaD/BGOsshKnIV/pGV62ZrVegZW3mGr/bVEqcOAnYqug3lWJRH ToMhbmNnddc0I0ZmU2+529Zr2p6vVDZdWoxz/CBWLJP2cz61VEAaXOzivbVOc/80 C5zXeukwN5UaZcDJ+/72kmfqG4bEB8+pbQHSlbwERdqSWhzKWuEdHwXWJAJCRFMM vVWaZfWvho1WNcr10mHr0ryoKzyH0p+C8S0Sj2riHW9xkzFKDa5hH/NXp6a33wnn 7EY3rlmA6tqmuf9epImt32kOb3HHIi3Wvgvk6oTLxXwHADs8xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp2hYX3gTp+6oawBIpfv0eeIXljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWIwYzU4ZDItYTJlMy0z YzQ5LWI2ZDMtMjNjYzZmMmE1MjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx2xcPKYwjarMaMmjyl8kARSE6oi3DKywGyU00Hwg/JLcrK9ibztl9Z 6w++EE5q5t+Bbg8pTAd1X17kNHzCIOBOU9xVVjbopIznf4nkYBrMmAJgUVgiHVc8 qes8iqNA16yd4/LISV/CFhfJka3L0meqfjGxsXlwAHuGGF/ov9uTdiBwb/a2y2x/ RfKC70QXbgfcyf0An1b+VaiquMNrLAIEbP3/2Y6LaHsXIQP3KT0GjsG21dDZ3Cvt le3LhEuXTMdSz/bIsTs3X1M7hMZui0PZbjjITrQp6UrlsiGF4pgAA3UMO7snkt6M /D9ReDzaKexOgOIm2c3Bva+PmyCTABI= -----END CERTIFICATE-----Generated at Sat Dec 20 02:57:07 2025 by rpki-client