This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa File: f68ba57f-5e4d-33d2-960d-57b417d05011.roa (raw, json) Hash identifier: rnbp3CgqofxdV3r+MUniDv3lgP+4+AjWg13CO/00O/E= Subject key identifier: B6:67:9B:62:4B:42:AD:74:BE:72:82:A7:D2:EF:9C:31:46:0B:F6:DA Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C5931418F9182C48CFCC2CE00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 3356 IP address blocks: 20.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:41:8f:91:82:c4:8c:fc:c2:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=a7041dba-d78e-49e3-b9f7-354b352b98ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:78:20:7a:0e:41:94:9b:ee:35:e4:1c:75: 6c:61:71:17:35:1f:5c:76:70:bf:eb:c8:27:ec:19: a0:66:12:12:32:24:75:97:eb:98:9d:3f:69:a2:34: a5:5c:c7:c1:33:b6:05:9c:57:ac:d7:14:44:64:60: 97:d0:d7:9f:24:9d:7e:0e:68:6c:23:97:a7:f5:38: 07:1e:c6:7a:69:da:54:e5:d5:92:62:81:88:70:cf: ae:dc:ff:17:03:6a:f6:04:7c:c0:b6:2b:e0:ab:07: d8:ae:29:b5:24:e7:2c:db:82:f1:8e:1f:78:4b:59: a8:da:4e:a0:ab:c7:d8:de:42:67:64:ff:bc:6b:28: 9a:d9:eb:7a:90:ff:25:78:99:1a:cd:58:0a:ec:a0: ec:e6:7a:b3:61:1c:de:46:46:65:38:91:20:c9:21: 03:1d:ac:95:35:64:d1:3b:9c:99:b2:7d:73:05:bb: 8a:65:9e:d5:c1:49:9f:cb:40:eb:19:57:3f:0d:a2: 9a:0b:2d:36:ee:1d:00:dd:80:b0:6c:38:34:d0:fc: b9:6d:21:e8:84:48:3c:fe:df:5f:48:a6:84:6b:9a: e5:5b:c2:83:a7:d8:8d:91:44:a9:ad:b9:82:d2:b2: 65:d7:ec:c8:8c:46:77:ff:50:18:2c:1d:e1:b0:ff: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:67:9B:62:4B:42:AD:74:BE:72:82:A7:D2:EF:9C:31:46:0B:F6:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/f68ba57f-5e4d-33d2-960d-57b417d05011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:24:62:74:4b:e3:4f:e3:ce:a3:4c:71:b8:9a:58:0a:74:80: 6e:76:a4:bd:92:16:94:33:7c:1c:23:8a:16:11:6a:d9:dd:36: cc:e3:e4:b3:9b:79:b2:fe:46:1e:cc:64:35:4d:34:e8:6e:f9: 04:56:06:13:67:1e:94:17:f6:9e:db:94:22:ae:f0:5f:3e:f5: ab:42:30:57:09:3e:12:f0:78:73:fa:12:f5:1f:d1:ec:a3:95: c2:35:8c:ff:74:8d:89:0e:6d:75:1d:b9:6a:af:25:42:24:b9: 75:e7:4f:1b:f8:21:9a:53:6b:cf:85:88:21:ea:4b:8a:cc:ac: a2:0b:d1:c0:25:e0:bb:a1:b4:88:72:fa:b8:66:69:0c:4f:d9: df:c3:89:f0:b6:97:49:6f:5e:4d:54:98:79:17:07:b2:ee:5e: 70:14:c4:cf:b4:06:1d:85:f8:ca:f0:4a:a9:62:90:a8:ca:2c: 8e:87:54:41:cb:a4:d2:0f:5e:26:1a:50:71:10:06:9b:34:64: 98:1b:01:c7:cc:90:27:1d:fc:ce:04:5a:fc:7e:d1:f4:93:41: d6:72:02:41:e3:3b:64:cf:10:53:c6:ce:a1:81:f7:4f:66:31: 51:e4:08:a8:08:10:cb:c2:ea:b4:07:3a:b8:dd:14:44:41:31: fd:7c:db:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMUGPkYLEjPzCzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk YTcwNDFkYmEtZDc4ZS00OWUzLWI5ZjctMzU0YjM1MmI5OGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngN4IHoOQZSb7jXkHHVsYXEXNR9cdnC/68gn 7BmgZhISMiR1l+uYnT9pojSlXMfBM7YFnFes1xREZGCX0NefJJ1+DmhsI5en9TgH HsZ6adpU5dWSYoGIcM+u3P8XA2r2BHzAtivgqwfYrim1JOcs24Lxjh94S1mo2k6g q8fY3kJnZP+8ayia2et6kP8leJkazVgK7KDs5nqzYRzeRkZlOJEgySEDHayVNWTR O5yZsn1zBbuKZZ7VwUmfy0DrGVc/DaKaCy027h0A3YCwbDg00Py5bSHohEg8/t9f SKaEa5rlW8KDp9iNkUSprbmC0rJl1+zIjEZ3/1AYLB3hsP/rVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZnm2JLQq10vnKCp9LvnDFGC/baMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZjY4YmE1N2YtNWU0ZC0z M2QyLTk2MGQtNTdiNDE3ZDA1MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUkYnRL40/jzqNMcbiaWAp0gG52pL2SFpQzfBwjihYRatndNszj5LOb ebL+Rh7MZDVNNOhu+QRWBhNnHpQX9p7blCKu8F8+9atCMFcJPhLweHP6EvUf0eyj lcI1jP90jYkObXUduWqvJUIkuXXnTxv4IZpTa8+FiCHqS4rMrKIL0cAl4LuhtIhy +rhmaQxP2d/DifC2l0lvXk1UmHkXB7LuXnAUxM+0Bh2F+MrwSqlikKjKLI6HVEHL pNIPXiYaUHEQBps0ZJgbAcfMkCcd/M4EWvx+0fSTQdZyAkHjO2TPEFPGzqGB909m MVHkCKgIEMvC6rQHOrjdFERBMf18290= -----END CERTIFICATE-----Generated at Thu Jan 1 12:33:22 2026 by rpki-client