This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa File: 3b274f1e-b389-388a-a8fd-f2216056bc4e.roa (raw, json) Hash identifier: y2yP7wXLgDtA65tBpZnm9v2qI/TjWRONlvsBUmR1Zww= Subject key identifier: E4:F4:2F:DF:9E:50:0A:F6:3C:F5:32:DF:23:04:44:D9:55:0A:9B:A8 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C794C0B9D6BBED4BD7B193E60 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa Signing time: Sat 10 Jan 2026 02:00:31 +0000 ROA not before: Sat 10 Jan 2026 02:00:31 +0000 ROA not after: Fri 10 Apr 2026 01:00:31 +0000 asID: 203 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4c:0b:9d:6b:be:d4:bd:7b:19:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 10 02:00:31 2026 GMT Not After : Apr 10 01:00:31 2026 GMT Subject: CN=d88e4845-eb6f-444c-beec-b37086172540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:fb:01:0e:b1:48:b7:41:fb:81:c3:e7:f1: eb:b8:1a:b3:db:27:a5:bb:a7:76:6c:8e:20:70:6b: 98:6a:85:a4:ff:d9:da:10:71:38:60:fa:9c:14:2d: a8:9f:94:28:86:da:39:61:d1:67:d8:7d:86:f1:08: 2e:f1:04:fc:fa:b8:43:cf:64:11:5b:98:26:31:ed: 0f:b3:08:5f:ab:eb:ff:81:27:d6:47:c1:27:c1:58: cc:1a:06:30:8d:90:03:b8:87:5d:64:a7:99:ba:c4: af:a8:04:98:99:77:d4:da:ad:d7:1c:7b:ae:e0:69: 62:9d:06:4e:dc:75:7c:27:62:e3:33:3b:3f:89:63: 86:27:7d:3b:01:e3:04:52:b9:bb:bc:1b:3e:18:23: 4b:3f:1d:82:a6:84:66:24:28:9b:67:f5:bc:b8:14: 47:3a:3c:02:61:04:9c:7b:ae:00:08:db:3b:5b:a8: 5b:c7:42:8f:fb:58:a0:6c:3e:f6:16:e7:fc:29:55: fb:ce:63:e2:6b:8e:8a:18:be:ae:a0:f2:41:b3:28: 37:84:ad:b9:3a:ad:e3:6a:94:92:68:d6:ce:19:5d: b6:97:71:d7:1c:e4:87:a6:4e:04:b3:0d:4a:fd:1c: 1c:76:10:01:f8:a5:78:a3:50:56:e0:bb:9d:24:87: dd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F4:2F:DF:9E:50:0A:F6:3C:F5:32:DF:23:04:44:D9:55:0A:9B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3b274f1e-b389-388a-a8fd-f2216056bc4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:df:cd:c8:3a:a8:6d:3a:58:b8:35:b6:47:b9:98:6b:be:dc: 8d:36:21:73:a8:df:a3:84:da:78:83:1d:e1:70:2f:1b:12:c4: c2:13:b8:50:8d:76:0b:3c:23:9e:a3:d4:9b:84:6d:a8:dd:2c: a6:58:a6:b1:dc:24:5e:8b:24:d9:d6:7d:b7:db:74:9c:6b:24: 9d:14:d6:d9:e4:8e:22:3d:4c:7a:88:49:88:5c:7a:8c:10:61: 54:98:75:17:6b:10:76:bf:59:c0:45:01:e8:14:5e:06:4f:c2: 78:d5:12:50:a6:77:99:a1:a2:70:ef:e9:da:de:be:72:23:87: 43:dc:06:f9:51:48:a0:ec:f1:f7:53:4f:3b:dd:e8:20:cd:97: 54:80:cf:36:a2:31:75:54:9d:c8:6b:37:f5:b4:ba:0e:76:05: e7:db:b9:64:03:bd:d6:f8:33:77:5e:54:a5:40:9b:89:de:c0: c0:4b:dd:17:14:52:15:d1:27:fa:cc:f9:58:c9:c3:f1:fd:b5: c9:a9:07:78:13:20:29:34:37:74:84:e3:28:36:25:72:e1:b1: 78:8a:60:a9:fa:d7:28:4a:ff:59:9f:cf:53:1f:1f:5c:6f:3c: 36:ce:66:32:53:12:3d:a4:52:b9:67:54:dc:6f:36:cb:76:5b: f0:74:e9:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx5TAuda77UvXsZPmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDg4ZTQ4NDUtZWI2Zi00NDRjLWJlZWMtYjM3MDg2MTcyNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbv7AQ6xSLdB+4HD5/HruBqz2yelu6d2bI4g cGuYaoWk/9naEHE4YPqcFC2on5Qohto5YdFn2H2G8Qgu8QT8+rhDz2QRW5gmMe0P swhfq+v/gSfWR8EnwVjMGgYwjZADuIddZKeZusSvqASYmXfU2q3XHHuu4GlinQZO 3HV8J2LjMzs/iWOGJ307AeMEUrm7vBs+GCNLPx2CpoRmJCibZ/W8uBRHOjwCYQSc e64ACNs7W6hbx0KP+1igbD72Fuf8KVX7zmPia46KGL6uoPJBsyg3hK25Oq3japSS aNbOGV22l3HXHOSHpk4Esw1K/RwcdhAB+KV4o1BW4LudJIfdzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT0L9+eUAr2PPUy3yMERNlVCpuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvM2IyNzRmMWUtYjM4OS0z ODhhLWE4ZmQtZjIyMTYwNTZiYzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnfzcg6qG06WLg1tke5mGu+3I02IXOo36OE2niDHeFwLxsSxMITuFCN dgs8I56j1JuEbajdLKZYprHcJF6LJNnWfbfbdJxrJJ0U1tnkjiI9THqISYhceowQ YVSYdRdrEHa/WcBFAegUXgZPwnjVElCmd5mhonDv6drevnIjh0PcBvlRSKDs8fdT Tzvd6CDNl1SAzzaiMXVUnchrN/W0ug52BefbuWQDvdb4M3deVKVAm4newMBL3RcU UhXRJ/rM+VjJw/H9tcmpB3gTICk0N3SE4yg2JXLhsXiKYKn61yhK/1mfz1MfH1xv PDbOZjJTEj2kUrlnVNxvNst2W/B06Tk= -----END CERTIFICATE-----Generated at Thu Jan 22 09:55:57 2026 by rpki-client