This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa File: 21be8a54-9d15-3bcf-b328-06e1c263d460.roa (raw, json) Hash identifier: ZjXu3qa3nqfyDm7GSnkdnWwozEsg6AN7SNkOtYM7FCQ= Subject key identifier: F4:26:F8:49:56:9B:AA:34:39:62:1F:92:5E:E8:69:70:8B:41:32:CC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C33811AEE6E2428AC5BC17500 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 3356 IP address blocks: 20.133.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:1a:ee:6e:24:28:ac:5b:c1:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=87e4359f-cd77-41ef-a2a1-f304f4ccceaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:fb:13:35:cd:96:38:71:ea:cd:33:df:21: e9:6f:86:5a:da:91:75:1f:6f:3e:31:f5:e6:b2:ad: f5:7c:df:55:83:c5:d6:64:3f:81:9e:20:58:a9:d9: af:91:5b:eb:b7:40:5e:59:50:b0:d5:e4:fd:a0:56: 3d:1d:80:30:07:22:33:65:4e:b5:3b:b0:7e:d0:e3: 08:a3:03:4f:fd:ad:29:50:be:bd:bf:46:39:97:5f: 09:dd:f6:74:22:e8:82:d9:43:54:a6:30:09:aa:78: bd:93:7e:39:51:d9:86:51:9d:1c:06:c2:5f:77:4c: 99:97:26:12:68:23:bb:73:3a:9a:fd:bd:24:e0:f3: 28:dc:72:8d:1c:08:b1:b1:4e:f7:50:0a:d2:63:a7: 8a:dc:de:82:f6:4b:b5:b0:52:b2:97:ec:26:ee:4c: 55:81:d3:e3:c0:1a:ee:85:16:78:fc:e6:ee:7b:c9: 4a:69:3a:99:55:75:ca:d9:09:79:fe:1c:37:02:32: 69:a2:65:e7:24:41:97:4d:69:4f:82:00:ed:6a:7c: c3:7a:79:7e:33:20:8f:fb:44:c7:20:04:18:b4:ce: 4e:6b:3c:9e:d7:b9:b2:c4:38:d5:77:f3:5d:d0:e6: 25:15:86:74:b8:d8:a9:c4:4e:35:b8:b7:a7:94:9e: b9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:26:F8:49:56:9B:AA:34:39:62:1F:92:5E:E8:69:70:8B:41:32:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.133.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a7:65:c5:0a:3b:fc:8f:68:30:46:a2:8c:d1:6d:24:82:3c: 09:40:51:31:16:53:ca:7a:27:e2:ee:3a:33:54:5c:38:44:2b: 70:19:a3:15:33:de:c3:e2:4f:11:c3:bf:6a:57:98:2e:08:3e: c4:7d:95:89:1c:a6:62:01:36:eb:c7:81:13:b4:3a:1b:7c:dc: b3:b3:9b:aa:35:a5:b1:8a:ce:10:51:fe:ff:6d:fa:29:9b:7e: 82:22:aa:06:a1:90:f6:43:ea:e5:c8:e7:3c:10:7d:a3:a7:14: 7e:f8:8b:56:c8:18:c9:69:6f:33:85:27:97:4b:44:6b:14:ef: 59:be:cc:04:0f:0e:75:85:c5:a3:47:c4:33:b4:9f:a5:65:7a: 83:d4:85:33:2d:60:b6:f4:d7:b3:d2:e8:cb:6c:22:c3:86:c0: f7:5b:a3:33:36:54:9e:6a:7c:40:69:0b:90:51:2e:71:6d:cb: 28:7d:66:60:c3:a7:1c:2e:28:35:50:a8:35:df:84:11:0c:ea: 04:d0:d3:f6:0a:1d:95:22:ab:15:84:44:a8:a2:6e:b0:4e:02: 93:c3:8e:b7:32:32:99:e7:15:57:51:3b:a3:9a:d5:fc:ed:cd: 86:8e:c1:55:3e:98:74:d1:48:b0:2b:7c:97:f5:3e:fa:e8:f7: 93:c1:7a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgRrubiQorFvBdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk ODdlNDM1OWYtY2Q3Ny00MWVmLWEyYTEtZjMwNGY0Y2NjZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHf7EzXNljhx6s0z3yHpb4Za2pF1H28+MfXm sq31fN9Vg8XWZD+BniBYqdmvkVvrt0BeWVCw1eT9oFY9HYAwByIzZU61O7B+0OMI owNP/a0pUL69v0Y5l18J3fZ0IuiC2UNUpjAJqni9k345UdmGUZ0cBsJfd0yZlyYS aCO7czqa/b0k4PMo3HKNHAixsU73UArSY6eK3N6C9ku1sFKyl+wm7kxVgdPjwBru hRZ4/Obue8lKaTqZVXXK2Ql5/hw3AjJpomXnJEGXTWlPggDtanzDenl+MyCP+0TH IAQYtM5Oazye17myxDjVd/Nd0OYlFYZ0uNipxE41uLenlJ65AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQm+ElWm6o0OWIfkl7oaXCLQTLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjFiZThhNTQtOWQxNS0z YmNmLWIzMjgtMDZlMWMyNjNkNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6nZcUKO/yPaDBGoozRbSSCPAlAUTEWU8p6J+LuOjNUXDhEK3AZoxUz 3sPiTxHDv2pXmC4IPsR9lYkcpmIBNuvHgRO0Oht83LOzm6o1pbGKzhBR/v9t+imb foIiqgahkPZD6uXI5zwQfaOnFH74i1bIGMlpbzOFJ5dLRGsU71m+zAQPDnWFxaNH xDO0n6VleoPUhTMtYLb017PS6MtsIsOGwPdbozM2VJ5qfEBpC5BRLnFtyyh9ZmDD pxwuKDVQqDXfhBEM6gTQ0/YKHZUiqxWERKiibrBOApPDjrcyMpnnFVdRO6Oa1fzt zYaOwVU+mHTRSLArfJf1Pvro95PBego= -----END CERTIFICATE-----Generated at Thu Jan 1 12:33:23 2026 by rpki-client