This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa File: e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa (raw, json) Hash identifier: +PU0UKVfpw4Y+CJ2HodKFObHcMikvbsyn1K5aBNjcWg= Subject key identifier: CB:62:2A:CB:07:83:3B:4A:1E:CF:E6:96:F5:99:A2:50:44:6E:A1:12 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C33811AAB369D8DB87A779F00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 3356 IP address blocks: 20.133.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:1a:ab:36:9d:8d:b8:7a:77:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=eec9e612-416b-4769-81dd-befe12cad002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:6c:61:04:72:c0:e4:67:b2:2b:c5:6e:82: 8f:96:b8:46:9a:cd:15:7e:b0:36:79:4d:b4:46:2d: 80:96:0c:8c:3f:ba:6b:ae:5d:1d:fc:3a:6b:66:b9: 78:13:84:02:62:77:af:4c:65:cb:0a:6b:dd:dc:89: d1:b7:e7:71:22:eb:5b:4f:a8:81:2d:01:0f:1a:b0: 47:32:0b:93:ed:a6:81:c5:33:85:48:78:ff:26:60: 1f:ff:d5:6c:b9:9e:ba:fd:cb:bd:37:26:b6:ec:35: da:1a:bb:62:a3:74:50:ea:a6:af:ec:e5:8c:ce:bb: fc:bf:92:29:e1:9c:0e:46:99:5b:3e:06:22:bc:7c: 50:71:0d:39:5d:c7:b7:91:d4:90:f1:f3:16:d1:0f: 87:1b:3d:d9:61:e8:43:13:f9:02:ee:d9:57:ab:73: c1:c8:fb:3d:b1:e1:a3:50:44:77:79:12:5f:ba:9e: d0:69:3a:8c:1a:85:05:2f:78:20:c9:96:67:df:14: 84:17:ff:2a:e8:96:f5:f0:41:90:f4:d6:26:e9:47: 39:14:c9:14:41:9c:68:64:50:3d:15:d6:e1:49:e9: ff:ca:ce:14:fe:54:71:22:d9:5b:a2:bd:7a:76:4d: 75:ed:cb:ad:6b:3c:c0:dc:77:16:72:e0:62:40:ff: 63:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:62:2A:CB:07:83:3B:4A:1E:CF:E6:96:F5:99:A2:50:44:6E:A1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e2d17d71-f6f8-3be5-ad2d-8838171609f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ef:b0:4e:8f:74:70:bd:33:d1:a7:ad:5d:1d:20:e4:24:82: 43:5c:f4:fd:2c:43:92:08:29:a4:14:71:ce:b7:78:cc:04:31: f8:fe:a4:a0:ec:7d:9f:bc:9b:c5:35:c2:7b:30:13:f5:79:fa: e1:6b:26:3a:ec:3f:9e:64:1d:bf:63:eb:b2:d6:36:98:5c:26: 40:9d:33:6f:12:fa:bf:11:02:27:eb:87:2a:15:38:a6:c8:c2: 61:0d:5c:1f:33:f0:89:76:41:43:94:3d:e7:dd:39:e2:41:d6: 5b:78:42:80:6e:59:6e:b7:b8:87:5f:d4:3d:81:9b:59:d7:ff: b9:d6:46:4a:8e:d2:9f:55:b6:0e:9c:b9:80:a1:0d:30:95:df: 8c:8e:e7:3b:d6:77:4e:09:c7:e9:5a:36:08:db:95:b8:8d:ed: 73:32:ce:83:01:4a:a7:d1:5c:1f:9c:2f:62:82:ec:52:63:3a: 4c:f5:ee:34:b6:e1:b0:f1:21:3f:82:e9:42:63:3c:15:6d:b6: b0:d2:71:b7:77:b4:23:96:ac:04:a1:3e:27:76:65:6f:52:df: 6c:4c:3d:32:08:40:c3:07:38:7a:cd:71:8b:66:e2:14:bf:de: 71:54:6c:78:86:f2:47:1f:0f:21:30:87:05:cd:9c:eb:f6:b4: 75:76:82:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgRqrNp2NuHp3nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk ZWVjOWU2MTItNDE2Yi00NzY5LTgxZGQtYmVmZTEyY2FkMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB1sYQRywORnsivFboKPlrhGms0VfrA2eU20 Ri2AlgyMP7prrl0d/DprZrl4E4QCYnevTGXLCmvd3InRt+dxIutbT6iBLQEPGrBH MguT7aaBxTOFSHj/JmAf/9VsuZ66/cu9Nya27DXaGrtio3RQ6qav7OWMzrv8v5Ip 4ZwORplbPgYivHxQcQ05Xce3kdSQ8fMW0Q+HGz3ZYehDE/kC7tlXq3PByPs9seGj UER3eRJfup7QaTqMGoUFL3ggyZZn3xSEF/8q6Jb18EGQ9NYm6Uc5FMkUQZxoZFA9 FdbhSen/ys4U/lRxItlbor16dk117cutazzA3HcWcuBiQP9jAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtiKssHgztKHs/mlvWZolBEbqESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTJkMTdkNzEtZjZmOC0z YmU1LWFkMmQtODgzODE3MTYwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILvsE6PdHC9M9GnrV0dIOQkgkNc9P0sQ5IIKaQUcc63eMwEMfj+pKDs fZ+8m8U1wnswE/V5+uFrJjrsP55kHb9j67LWNphcJkCdM28S+r8RAifrhyoVOKbI wmENXB8z8Il2QUOUPefdOeJB1lt4QoBuWW63uIdf1D2Bm1nX/7nWRkqO0p9Vtg6c uYChDTCV34yO5zvWd04Jx+laNgjblbiN7XMyzoMBSqfRXB+cL2KC7FJjOkz17jS2 4bDxIT+C6UJjPBVttrDScbd3tCOWrAShPid2ZW9S32xMPTIIQMMHOHrNcYtm4hS/ 3nFUbHiG8kcfDyEwhwXNnOv2tHV2gvI= -----END CERTIFICATE-----Generated at Fri Dec 19 23:25:15 2025 by rpki-client