This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa File: f8da539f-a988-3038-8316-0c63126db070.roa (raw, json) Hash identifier: AktK+dnCq3ZY9mqu7nVF+onarJ5Tf+YsDcT498veKpA= Subject key identifier: 8C:42:29:B0:4A:2F:3F:BF:B7:C2:87:05:09:DC:27:D3:5B:C7:81:13 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C593143601E76E15F52F71600 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 203 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:43:60:1e:76:e1:5f:52:f7:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=b7cc3bae-a176-4ff7-aabc-2e4566ec85a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:55:57:15:04:ab:89:c4:f4:af:2e:be:ea: 96:8d:ea:0f:fb:7c:1d:ef:11:61:6b:43:aa:c4:6f: 58:d3:75:c2:03:9a:6a:6f:76:e3:8d:bf:8c:77:fa: fc:47:cc:25:2c:c7:9f:f3:b8:5d:87:af:85:7e:7f: 33:2e:4d:01:ce:e7:c1:2a:c5:d6:eb:24:de:13:53: 92:c5:4b:a8:02:02:9d:a1:67:40:88:b5:12:01:96: 36:e1:c1:c2:cc:56:a9:23:c1:2f:e0:9d:1f:ac:88: 1c:ba:33:3d:8c:52:52:72:d9:d8:03:8a:ff:e5:b5: d2:2a:98:9d:88:a2:a7:06:e7:81:42:1f:45:0a:7b: 42:1a:a6:48:58:75:78:99:e1:8a:07:ac:e8:03:36: be:de:d7:3f:87:bd:70:a7:11:70:cd:0b:82:6c:2a: cb:d9:e0:b5:41:ae:8d:78:96:de:c5:b0:4f:93:d4: 27:2d:ad:ee:15:96:5c:35:a6:97:5d:5a:da:a1:d6: 98:7a:fe:ac:0c:ae:d4:3b:e2:15:db:24:b5:a8:09: b1:23:cd:76:3d:21:36:19:52:50:2c:2f:34:c5:2f: af:ee:79:3e:5d:db:98:df:b2:c0:ee:5d:00:d7:15: ce:77:6c:49:74:99:4e:a4:d2:4b:79:0c:d4:c7:fe: c9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:42:29:B0:4A:2F:3F:BF:B7:C2:87:05:09:DC:27:D3:5B:C7:81:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f8da539f-a988-3038-8316-0c63126db070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b9:84:8d:30:93:c9:ec:3d:50:85:7e:07:2e:d0:0d:62:0d: 7b:2e:49:1c:79:e2:5d:e0:c7:69:2d:be:f6:2a:df:d9:67:67: 24:03:04:6a:40:9e:42:20:fc:1f:99:e6:35:a7:7f:e5:fb:17: e1:09:da:9b:da:34:f0:b3:b0:76:43:ee:9b:53:b0:23:6b:8c: 36:29:4e:e5:1d:61:f0:47:70:ed:46:5f:94:c9:74:ca:49:8f: 7f:4d:fb:5f:69:bf:83:f8:9e:c6:8d:cb:2a:81:cc:1a:57:84: 1e:08:42:6b:ec:03:14:22:d3:f0:95:68:0a:ae:9e:a1:80:8b: 52:20:1e:0e:b6:79:7b:54:83:43:35:16:fb:07:d7:72:7a:d1: 4e:54:39:cc:79:30:7c:fb:ab:47:6d:41:67:6f:c3:78:34:7c: 30:a5:09:5b:5b:f8:0d:87:38:a0:55:1c:83:79:5e:52:0e:41: f0:a1:fb:32:dd:95:38:6c:dd:a8:4a:e1:b0:02:6f:1d:bd:e9: 1f:a1:22:c8:39:a0:61:22:98:06:31:3f:10:4e:70:2a:33:18: 8c:7e:1f:c9:c7:6a:90:2b:d1:ef:59:2c:4d:2e:e9:0f:ea:f9: 62:ee:67:96:cc:98:b7:79:94:ff:6d:f9:c3:f9:fb:4b:6e:01: da:e6:71:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMUNgHnbhX1L3FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk YjdjYzNiYWUtYTE3Ni00ZmY3LWFhYmMtMmU0NTY2ZWM4NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFBVVxUEq4nE9K8uvuqWjeoP+3wd7xFha0Oq xG9Y03XCA5pqb3bjjb+Md/r8R8wlLMef87hdh6+Ffn8zLk0BzufBKsXW6yTeE1OS xUuoAgKdoWdAiLUSAZY24cHCzFapI8Ev4J0frIgcujM9jFJSctnYA4r/5bXSKpid iKKnBueBQh9FCntCGqZIWHV4meGKB6zoAza+3tc/h71wpxFwzQuCbCrL2eC1Qa6N eJbexbBPk9QnLa3uFZZcNaaXXVraodaYev6sDK7UO+IV2yS1qAmxI812PSE2GVJQ LC80xS+v7nk+XduY37LA7l0A1xXOd2xJdJlOpNJLeQzUx/7JdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxCKbBKLz+/t8KHBQncJ9Nbx4ETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjhkYTUzOWYtYTk4OC0z MDM4LTgzMTYtMGM2MzEyNmRiMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG25hI0wk8nsPVCFfgcu0A1iDXsuSRx54l3gx2ktvvYq39lnZyQDBGpA nkIg/B+Z5jWnf+X7F+EJ2pvaNPCzsHZD7ptTsCNrjDYpTuUdYfBHcO1GX5TJdMpJ j39N+19pv4P4nsaNyyqBzBpXhB4IQmvsAxQi0/CVaAqunqGAi1IgHg62eXtUg0M1 FvsH13J60U5UOcx5MHz7q0dtQWdvw3g0fDClCVtb+A2HOKBVHIN5XlIOQfCh+zLd lThs3ahK4bACbx296R+hIsg5oGEimAYxPxBOcCozGIx+H8nHapAr0e9ZLE0u6Q/q +WLuZ5bMmLd5lP9t+cP5+0tuAdrmcew= -----END CERTIFICATE-----Generated at Tue Dec 30 06:40:30 2025 by rpki-client