This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa File: 38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa (raw, json) Hash identifier: tZ+aZ6u6gbC+laKgyMfPQHY0G60ehRaQGefA2DrA/T8= Subject key identifier: B5:92:6F:8B:DE:5F:58:C8:93:88:E4:34:61:8D:AC:0E:52:49:76:2A Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584CAE572F0972F38CD9686CAE40 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 3360 IP address blocks: 20.132.0.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Feb 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2f:09:72:f3:8c:d9:68:6c:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2bff4850-e13c-4087-8f41-9d679b165055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:4a:90:ab:2c:a7:38:ab:6a:cd:43:7d:4e: d4:60:d3:e0:50:5c:70:4c:de:03:cb:66:e1:12:8a: 94:88:70:f6:71:f4:f9:4e:95:eb:f7:44:d0:c6:f3: 7f:52:95:6d:02:ec:59:63:e0:e7:8c:b6:61:fb:19: 56:61:3b:e4:1f:ef:53:39:59:44:56:5d:1d:36:38: 49:ab:7b:5c:44:e6:c3:38:6d:b5:45:22:87:06:43: 5e:f2:61:fb:5d:1c:55:f6:74:c9:ab:2c:2a:fa:88: de:c2:46:d3:48:e1:fe:1d:a8:21:18:a3:9c:38:52: 7a:64:b9:7e:6f:18:0d:81:ea:a4:96:7e:4b:f3:1d: 61:2e:62:7b:af:4f:81:99:56:33:c2:fd:1a:9e:75: 39:12:cb:8c:b5:c1:da:4b:16:0c:ce:4c:93:5d:32: 05:85:3c:37:2e:94:1b:b5:64:74:e9:3d:03:96:90: 05:f8:b9:ca:c9:91:dd:eb:2c:22:7a:27:36:82:a9: ee:44:19:13:2e:bc:b9:1c:83:ab:7f:00:6b:ad:19: dd:9b:74:b4:62:10:da:46:2c:2c:ce:a2:49:5c:ec: fe:e7:38:c9:92:f7:8f:5f:fe:08:ef:fe:f2:39:26: 83:34:46:c2:4b:13:8c:80:52:6b:86:05:3b:d6:dc: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:92:6F:8B:DE:5F:58:C8:93:88:E4:34:61:8D:AC:0E:52:49:76:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/38f5f2c4-c1b1-3be8-aa6f-2ed78713b1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.132.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7e:08:e6:99:0e:75:e3:3a:15:61:6e:0e:dc:00:80:85:a6: 03:b3:e6:ce:ac:3d:9e:2b:f8:74:10:98:e6:43:42:f1:76:76: da:e7:75:df:16:cd:1f:f3:fe:b9:ba:67:45:1f:b1:b7:07:08: 41:2d:f0:dd:3e:39:f9:a0:a6:83:4d:14:27:a3:cd:a3:01:8e: c9:eb:b7:bf:a6:3b:ba:84:41:26:f7:75:6d:57:30:60:d9:b6: 7c:94:1b:52:30:d0:98:35:b1:29:5a:ea:be:f5:18:71:61:5e: 47:44:3d:5f:f1:37:5a:3c:75:12:96:9b:fe:5d:0c:25:8f:91: e0:96:cf:4d:3c:22:55:60:b0:4c:3b:16:ab:21:cf:99:59:12: 60:65:49:d7:ac:1c:51:09:31:28:16:c0:07:46:53:3a:e0:40: df:a5:92:1f:8b:23:30:1f:20:92:b4:4d:d4:91:f9:84:17:85: 4b:dd:e7:e2:6e:08:27:15:2b:63:af:47:77:42:58:cc:00:4b: c5:fa:f3:3e:f0:51:ce:e5:d7:e4:68:16:6b:50:0f:06:45:98: d8:cc:7e:be:81:2e:21:2a:b7:59:2e:86:27:90:79:a1:60:c8: 82:4d:ab:a5:ad:7a:6d:25:15:f7:62:04:7c:a4:7e:82:91:8e: d8:5e:95:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVy8JcvOM2WhsrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmJmZjQ4NTAtZTEzYy00MDg3LThmNDEtOWQ2NzliMTY1MDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAdKkKsspziras1DfU7UYNPgUFxwTN4Dy2bh EoqUiHD2cfT5TpXr90TQxvN/UpVtAuxZY+DnjLZh+xlWYTvkH+9TOVlEVl0dNjhJ q3tcRObDOG21RSKHBkNe8mH7XRxV9nTJqywq+ojewkbTSOH+HaghGKOcOFJ6ZLl+ bxgNgeqkln5L8x1hLmJ7r0+BmVYzwv0annU5EsuMtcHaSxYMzkyTXTIFhTw3LpQb tWR06T0DlpAF+LnKyZHd6ywieic2gqnuRBkTLry5HIOrfwBrrRndm3S0YhDaRiws zqJJXOz+5zjJkvePX/4I7/7yOSaDNEbCSxOMgFJrhgU71txJzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWSb4veX1jIk4jkNGGNrA5SSXYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzhmNWYyYzQtYzFiMS0z YmU4LWFhNmYtMmVkNzg3MTNiMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR+COaZDnXjOhVhbg7cAICFpgOz5s6sPZ4r+HQQmOZDQvF2dtrndd8W zR/z/rm6Z0UfsbcHCEEt8N0+OfmgpoNNFCejzaMBjsnrt7+mO7qEQSb3dW1XMGDZ tnyUG1Iw0Jg1sSla6r71GHFhXkdEPV/xN1o8dRKWm/5dDCWPkeCWz008IlVgsEw7 Fqshz5lZEmBlSdesHFEJMSgWwAdGUzrgQN+lkh+LIzAfIJK0TdSR+YQXhUvd5+Ju CCcVK2OvR3dCWMwAS8X68z7wUc7l1+RoFmtQDwZFmNjMfr6BLiEqt1kuhieQeaFg yIJNq6Wtem0lFfdiBHykfoKRjthele4= -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:34 2026 by rpki-client