This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa File: b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa (raw, json) Hash identifier: qBZEHEMdwOwnH7Mc5w9DjxKa5NXoYm6JioqzcR7D8GM= Subject key identifier: 1F:69:D3:68:99:73:04:4A:BB:C3:7B:1E:42:CB:F2:1B:65:C9:9A:ED Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C751C2FD09350E60B3C192340 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 3360 IP address blocks: 20.139.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Feb 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:2f:d0:93:50:e6:0b:3c:19:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=a56b39e6-cc4a-45dd-8670-bbbd655be14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:45:c5:db:51:a0:62:38:15:f6:48:b5:f8: 4f:66:3b:ea:d8:f6:d1:ed:37:00:8c:bc:db:aa:8c: 72:f2:76:8e:61:c7:8c:1f:9d:2b:42:74:b7:72:af: 92:2c:a7:d5:e2:0d:14:69:92:f9:9a:c3:80:21:fd: 2e:49:cd:ea:99:cd:35:58:e0:32:8f:1c:92:27:01: de:e1:7a:4c:96:95:e1:42:e6:6d:49:e0:1d:17:6f: 86:b1:b3:7c:1f:ef:45:48:ae:18:c9:71:2d:20:d8: c7:c3:c1:a5:00:9f:0e:fc:98:e9:07:95:7d:10:8f: 16:43:f6:0b:20:a5:b5:b8:f7:58:32:b3:0e:47:56: 2f:5a:f0:a8:75:9d:15:3f:05:a3:48:d8:56:b1:89: 23:2d:b6:07:45:90:db:5a:62:36:25:e9:29:ac:eb: 68:74:f1:66:92:e2:b0:7d:76:1d:bf:68:a5:41:71: a6:69:f1:9a:8f:23:a0:6e:5a:dd:d7:4d:a2:3e:8c: f9:71:99:75:f0:78:ff:cd:2f:3f:ee:13:ec:db:4d: b3:80:fe:5b:38:f1:41:71:5f:33:89:6d:77:b9:ec: c5:66:e9:64:7a:73:c0:b8:e1:c0:0f:2f:10:18:b7: d2:14:ab:3a:63:1e:c3:42:78:87:2e:01:f0:57:25: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:D3:68:99:73:04:4A:BB:C3:7B:1E:42:CB:F2:1B:65:C9:9A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/b9f2024c-da5c-3e5e-b215-a5aefbe2f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b7:20:27:1a:9a:87:69:1f:e3:b3:ac:5f:2e:34:ee:77:85: dc:86:1f:69:3b:75:4a:b2:9c:02:a1:07:3e:3b:85:9f:15:40: c0:ae:80:71:22:14:c4:17:e9:71:d3:d4:21:d6:5a:64:25:50: ed:6a:ff:c7:b0:9b:da:27:b3:c5:06:65:cc:55:f7:7c:32:6b: 33:cc:85:a3:d8:57:8c:ed:d9:05:e7:6d:69:02:2c:89:18:ab: 4d:5a:54:21:e6:d7:25:c2:a1:ce:41:fa:eb:d7:b8:38:66:bf: 1c:78:bc:72:02:f3:25:ad:b3:37:26:e5:21:38:b5:37:f6:5c: 11:2d:f9:ed:30:80:09:e3:58:3b:ec:96:20:d2:eb:f1:37:d6: b9:a5:cc:49:4f:a2:66:5d:1b:fd:ca:67:37:92:c2:7a:1d:1a: 7f:13:93:54:f0:f4:e1:00:db:f6:1c:82:d5:84:8a:95:f2:d7: f1:80:a8:aa:f7:98:8e:54:cb:19:92:23:e9:8e:82:e5:81:a9: ca:54:93:72:c0:3f:01:d3:77:01:3b:a9:e0:96:30:fb:c3:77: 92:d0:10:3c:0a:f8:8b:01:b3:c0:86:ae:b8:08:2e:80:e7:f9: c2:be:73:36:5b:24:c6:97:86:5a:a8:10:41:64:22:63:dd:b0: 3e:94:20:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HC/Qk1DmCzwZI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk YTU2YjM5ZTYtY2M0YS00NWRkLTg2NzAtYmJiZDY1NWJlMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ZFxdtRoGI4FfZItfhPZjvq2PbR7TcAjLzb qoxy8naOYceMH50rQnS3cq+SLKfV4g0UaZL5msOAIf0uSc3qmc01WOAyjxySJwHe 4XpMlpXhQuZtSeAdF2+GsbN8H+9FSK4YyXEtINjHw8GlAJ8O/JjpB5V9EI8WQ/YL IKW1uPdYMrMOR1YvWvCodZ0VPwWjSNhWsYkjLbYHRZDbWmI2JekprOtodPFmkuKw fXYdv2ilQXGmafGajyOgblrd102iPoz5cZl18Hj/zS8/7hPs202zgP5bOPFBcV8z iW13uezFZulkenPAuOHADy8QGLfSFKs6Yx7DQniHLgHwVyV9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9p02iZcwRKu8N7HkLL8htlyZrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYjlmMjAyNGMtZGE1Yy0z ZTVlLWIyMTUtYTVhZWZiZTJmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFIsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA23ICcamodpH+OzrF8uNO53hdyGH2k7dUqynAKhBz47hZ8VQMCugHEi FMQX6XHT1CHWWmQlUO1q/8ewm9ons8UGZcxV93wyazPMhaPYV4zt2QXnbWkCLIkY q01aVCHm1yXCoc5B+uvXuDhmvxx4vHIC8yWtszcm5SE4tTf2XBEt+e0wgAnjWDvs liDS6/E31rmlzElPomZdG/3KZzeSwnodGn8Tk1Tw9OEA2/YcgtWEipXy1/GAqKr3 mI5UyxmSI+mOguWBqcpUk3LAPwHTdwE7qeCWMPvDd5LQEDwK+IsBs8CGrrgILoDn +cK+czZbJMaXhlqoEEFkImPdsD6UIB8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:42 2026 by rpki-client