This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa File: 5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa (raw, json) Hash identifier: 0Rp3aPxpa6AzlKUx5XH8wR8LkQPNTe7G0GCidq3FfOI= Subject key identifier: 33:1C:28:63:6F:61:D2:D3:9B:65:59:DB:A3:FD:31:B9:5C:DF:22:94 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C33811B9F1E2A334860A712C0 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 203 IP address blocks: 20.138.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:1b:9f:1e:2a:33:48:60:a7:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=0d7be7bb-f14e-429b-9d2d-5f7896e28dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:b1:32:05:81:13:c9:5c:b2:4f:99:8d:18: c7:40:b4:e0:b0:76:85:b9:6f:4e:53:d3:73:88:2c: f3:76:c6:b3:b9:d5:36:88:0b:1b:dc:9a:ef:ab:0f: 85:94:d7:01:34:e8:cf:b3:cf:f5:53:43:5e:dc:0f: 99:c4:0e:92:a1:67:b9:20:b3:24:e9:21:04:c6:f4: 67:7d:79:b8:5c:8d:54:8b:34:ee:cb:5b:b2:04:74: 37:fb:48:e2:74:40:88:c3:fd:b5:e8:54:79:fc:d3: 6e:83:8a:5d:d1:d9:da:80:ae:30:dd:19:a0:32:2b: 82:95:77:f8:67:72:ed:b3:1a:5b:a0:28:e1:80:c0: 49:68:08:8f:27:8f:05:ed:0b:57:01:05:07:10:ff: 2f:f5:c4:17:cd:0c:9d:ac:13:49:84:06:55:14:fc: 0a:c5:f8:35:cd:e8:12:ad:1c:8c:f8:7e:ed:d2:fd: f3:b7:cb:b3:c7:e1:33:60:fc:60:43:03:1d:a8:84: 2f:98:83:72:2f:a8:ce:44:1b:34:dd:9f:0d:73:84: 6c:76:55:3e:7a:a0:dc:26:57:6a:d4:4d:ce:4a:87: a1:b8:ea:72:ec:71:93:82:84:5e:54:3c:0b:6e:1d: 75:15:3d:7a:31:33:f3:51:d6:d7:ec:90:2e:c0:7a: fe:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1C:28:63:6F:61:D2:D3:9B:65:59:DB:A3:FD:31:B9:5C:DF:22:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5b3be7c7-2da8-32b2-9ba3-a75ade6d62ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:70:1e:db:a9:e7:d7:5c:d2:08:57:8d:20:14:4f:83:f6:1b: e6:d7:1d:14:1f:75:c5:b4:43:98:57:47:b0:e8:ac:1a:e2:db: c0:f9:77:b6:74:e6:fd:77:54:6f:f9:30:69:65:b5:6c:e1:86: b7:5c:c5:4c:12:f9:5a:cb:8f:14:cb:8c:f1:da:06:71:50:33: 6a:4a:21:ff:3c:1b:6b:b2:b6:25:13:5b:47:15:a2:4e:75:10: 2b:86:1c:3a:50:e7:8a:b5:6e:d0:23:3a:5a:86:84:4e:bb:33: a0:a6:5b:00:0a:b6:45:26:5c:8f:28:d4:65:7d:3e:b2:c4:a2: 70:a6:a8:b2:e9:fc:ba:ab:3b:86:57:aa:fa:5e:52:71:ca:4d: d9:a3:4a:5f:f9:7c:1c:fc:6c:ca:f6:5d:d6:b9:02:5d:bc:7e: 09:93:83:5c:96:b7:b1:79:11:45:5f:10:26:c7:63:2d:ff:b6: ec:eb:98:70:62:f6:d8:44:82:06:ad:df:52:69:13:f3:78:60: 55:d1:60:57:0f:d3:f7:44:a2:65:58:8f:26:aa:72:bd:cd:34: 9f:46:b0:0d:89:c2:d9:f8:f6:cd:7e:6e:3f:3f:54:c8:f0:c4: 88:ba:b5:73:f8:cf:dd:41:d3:9a:50:3d:cc:d5:a0:28:94:c2: 1b:58:a8:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgRufHiozSGCnEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk MGQ3YmU3YmItZjE0ZS00MjliLTlkMmQtNWY3ODk2ZTI4ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9uxMgWBE8lcsk+ZjRjHQLTgsHaFuW9OU9Nz iCzzdsazudU2iAsb3Jrvqw+FlNcBNOjPs8/1U0Ne3A+ZxA6SoWe5ILMk6SEExvRn fXm4XI1UizTuy1uyBHQ3+0jidECIw/216FR5/NNug4pd0dnagK4w3RmgMiuClXf4 Z3LtsxpboCjhgMBJaAiPJ48F7QtXAQUHEP8v9cQXzQydrBNJhAZVFPwKxfg1zegS rRyM+H7t0v3zt8uzx+EzYPxgQwMdqIQvmINyL6jORBs03Z8Nc4RsdlU+eqDcJldq 1E3OSoehuOpy7HGTgoReVDwLbh11FT16MTPzUdbX7JAuwHr+lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMcKGNvYdLTm2VZ26P9Mblc3yKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNWIzYmU3YzctMmRhOC0z MmIyLTliYTMtYTc1YWRlNmQ2MmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdwHtup59dc0ghXjSAUT4P2G+bXHRQfdcW0Q5hXR7DorBri28D5d7Z0 5v13VG/5MGlltWzhhrdcxUwS+VrLjxTLjPHaBnFQM2pKIf88G2uytiUTW0cVok51 ECuGHDpQ54q1btAjOlqGhE67M6CmWwAKtkUmXI8o1GV9PrLEonCmqLLp/LqrO4ZX qvpeUnHKTdmjSl/5fBz8bMr2Xda5Al28fgmTg1yWt7F5EUVfECbHYy3/tuzrmHBi 9thEggat31JpE/N4YFXRYFcP0/dEomVYjyaqcr3NNJ9GsA2Jwtn49s1+bj8/VMjw xIi6tXP4z91B05pQPczVoCiUwhtYqH4= -----END CERTIFICATE-----Generated at Thu Jan 22 09:54:03 2026 by rpki-client