This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa
File: a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa (raw, json)
Hash identifier: yibwYyQ6BmLFE6pF20Eay2QrtgXjbW4dvsfJDnwEruk=
Subject key identifier: 3A:0C:6C:CC:2C:1B:AF:0B:BC:17:DB:DC:37:8E:BF:A7:2A:81:7F:E4
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584C1D2B6A26380E9A2EC87A6940
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa
Signing time: Mon 08 Dec 2025 02:00:31 +0000
ROA not before: Mon 08 Dec 2025 02:00:31 +0000
ROA not after: Sun 08 Mar 2026 02:00:31 +0000
asID: 17916
IP address blocks: 20.133.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1d:2b:6a:26:38:0e:9a:2e:c8:7a:69:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 8 02:00:31 2025 GMT
Not After : Mar 8 02:00:31 2026 GMT
Subject: CN=1bbc2196-a246-4eca-aaf8-a474495ca325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:b0:3f:34:47:a1:6d:84:a8:35:07:28:07:
29:7a:cf:e2:62:72:d9:e9:2a:0c:0d:5f:c3:f4:03:
eb:ae:db:c4:92:50:3d:d6:d6:dc:41:70:4a:21:dd:
5f:e3:a8:2b:ce:64:66:29:88:f3:71:e8:43:bd:2a:
75:e2:55:9f:50:54:17:cd:a8:64:cc:34:d8:11:3d:
ab:0f:df:40:ad:eb:b3:f0:2f:81:60:8c:8b:dc:d5:
57:ca:54:27:6b:4b:b5:ff:00:d0:22:92:34:a6:92:
d4:71:2e:59:31:00:f7:a6:06:e5:9e:6e:79:0a:7d:
3c:ae:c6:b4:81:b3:8b:df:39:4b:2c:c3:ce:4e:f0:
fc:87:6a:37:89:41:35:b9:d4:cf:0c:46:55:32:b5:
28:7c:0a:7b:b7:7e:69:4f:6e:6b:f4:98:1e:63:b2:
d7:58:76:35:c4:4e:d1:65:a0:96:7f:90:bc:df:9c:
36:b8:96:48:12:da:40:c5:bd:c0:f5:27:63:89:8c:
4f:04:1d:47:a1:97:76:70:e6:d4:3a:57:42:f5:cb:
26:08:0f:d2:71:c6:3e:5b:d5:46:de:55:3c:15:01:
cb:cf:2b:7a:bd:c3:05:30:6c:36:f8:eb:57:23:47:
19:10:dd:d7:52:79:d0:37:af:aa:72:be:9f:7e:87:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0C:6C:CC:2C:1B:AF:0B:BC:17:DB:DC:37:8E:BF:A7:2A:81:7F:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a2c49ee5-fbe0-3d59-9fd3-9aa788908b28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:20:76:d6:0b:90:a9:34:f1:7a:ca:a3:9f:be:7e:17:3a:e5:
26:d7:ee:4e:25:ae:19:a3:bb:02:69:a8:4b:4c:0f:fa:fb:f6:
24:18:d4:e2:8d:d8:2f:df:91:90:ab:a6:15:a7:3c:b0:c3:05:
a3:48:51:1f:ff:81:87:15:88:ed:e7:d2:f9:da:ec:98:9a:ce:
ef:61:02:cc:e2:a1:ee:3e:8d:cb:4c:77:ce:26:57:15:1b:1f:
36:b2:7b:e4:35:b0:0d:74:82:85:9a:92:e2:8c:32:fa:a4:5d:
61:01:ba:60:14:b3:0f:42:ef:77:f7:c7:ff:81:60:af:74:4b:
ce:af:e8:20:d6:ee:db:0f:c8:e2:4f:ce:37:36:6b:99:20:72:
0f:65:4c:87:4a:5b:98:54:94:ab:65:c2:78:b8:d9:66:18:62:
c6:1d:45:ad:b2:55:e9:68:94:84:bc:b7:46:e3:74:14:2e:c6:
4a:6b:ca:b3:e7:ec:82:16:65:57:16:9e:df:39:ff:4b:48:19:
01:65:36:0e:10:74:c5:d3:b9:98:98:e3:ff:e2:e9:5d:5a:4e:
bc:70:fa:dc:18:9c:3b:6d:60:f2:11:84:23:7b:ae:33:93:d4:
7b:7c:a2:47:f4:e5:1b:df:8d:7c:08:b7:5e:11:70:70:d3:70:
fd:61:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 19:39:43 2025 by rpki-client