This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04c2c416-9d82-3323-808e-29180cc44961.roa File: 04c2c416-9d82-3323-808e-29180cc44961.roa (raw, json) Hash identifier: yqdp81z1Je2X0aOGef82MV5dQVngL4jeWu1Rl0Efk6o= Subject key identifier: 5C:63:4F:CE:1A:ED:A7:50:6C:5D:0E:77:59:EB:8B:6D:DA:75:61:3D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C22C0FAB09964FE2C0D0E1380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04c2c416-9d82-3323-808e-29180cc44961.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:fa:b0:99:64:fe:2c:0d:0e:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=a1bd9d67-a760-4412-9db0-e985ab165071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:c4:22:ff:35:45:88:b7:cd:e2:86:98:d8: ac:46:06:46:d7:f0:27:4f:0e:e6:d6:de:09:d9:44: 85:c1:6f:69:46:f3:d9:17:53:9c:62:7a:7b:37:97: 5a:88:9f:90:fd:ff:ee:55:17:4b:5d:34:a9:a9:68: cf:36:ea:b6:9c:38:fc:79:ec:89:ad:06:b8:e7:43: ea:c8:2f:63:68:b8:28:55:b0:b3:f2:88:5c:c2:96: 82:1c:87:99:f6:cb:81:26:3a:cf:5f:cf:24:1f:0a: 4d:71:4f:29:0c:34:5b:2b:6d:96:56:a9:fe:8d:b4: 1b:af:f5:54:51:aa:33:25:2e:09:c9:82:d3:d2:dc: b0:00:b3:56:7a:f4:d0:ed:0b:32:a4:da:14:2c:c3: 01:0d:89:7b:22:65:37:81:90:46:dd:f1:20:c9:b1: 0e:f3:f0:ba:3b:72:37:d0:95:f8:8f:8a:99:c9:6e: fb:06:d9:b6:75:a3:68:b2:4e:40:a3:68:26:d4:db: fe:e3:a8:07:3e:02:6b:31:ba:1f:9e:d1:c3:12:ac: c3:5e:6c:a6:59:1b:ab:cd:14:9f:d6:b5:96:46:ff: 63:34:70:26:6f:33:51:5b:03:90:a7:96:26:9b:a2: 79:10:8e:6d:e0:29:04:f0:fc:9d:d6:15:f2:58:e1: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:4F:CE:1A:ED:A7:50:6C:5D:0E:77:59:EB:8B:6D:DA:75:61:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/04c2c416-9d82-3323-808e-29180cc44961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7e:c6:56:3b:be:c2:3c:e0:c7:9c:bf:47:ed:dd:df:77:1f: 8d:1a:29:42:13:ea:75:d8:d1:29:9d:d1:ba:43:27:1c:32:0c: f0:d8:ea:8e:78:ef:bd:11:e6:f2:bb:fd:99:00:78:ef:31:b4: 9b:f4:13:41:f6:2c:3a:d8:b3:b5:f2:e2:2e:31:f9:64:64:13: 22:89:e6:d0:bd:4c:8a:63:40:c0:d5:8d:33:d3:51:2c:35:cc: 38:bb:8f:3e:1c:cd:0d:ad:27:4d:c6:9b:e4:41:6b:1e:5e:86: 0f:71:6c:00:3e:aa:b9:16:e3:fd:79:76:85:af:b7:b9:cc:a1: 8c:8c:99:ad:63:bc:52:86:b4:f9:9e:77:32:85:4b:53:5a:b7: 49:4f:bd:6e:b0:80:9d:89:e2:c8:c1:32:7b:1b:f4:30:e4:fc: 77:4a:9e:f6:44:9d:ca:ee:9d:ee:99:2f:33:ff:3f:f2:ae:47: d1:f9:94:00:5a:56:14:f0:a1:3b:cd:3d:bb:72:ae:ff:d8:71: a4:b4:a1:72:98:25:f9:f2:16:de:26:6f:0e:6b:e1:ab:61:8d: 68:25:27:47:1b:80:b0:db:8e:b8:c2:35:56:09:d0:c7:32:b3: d3:00:81:fe:36:0d:6e:88:7e:ea:94:e7:d2:17:42:6c:a7:b1: e2:f1:01:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwPqwmWT+LA0OE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk YTFiZDlkNjctYTc2MC00NDEyLTlkYjAtZTk4NWFiMTY1MDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuzEIv81RYi3zeKGmNisRgZG1/AnTw7m1t4J 2USFwW9pRvPZF1OcYnp7N5daiJ+Q/f/uVRdLXTSpqWjPNuq2nDj8eeyJrQa450Pq yC9jaLgoVbCz8ohcwpaCHIeZ9suBJjrPX88kHwpNcU8pDDRbK22WVqn+jbQbr/VU UaozJS4JyYLT0tywALNWevTQ7QsypNoULMMBDYl7ImU3gZBG3fEgybEO8/C6O3I3 0JX4j4qZyW77Btm2daNosk5Ao2gm1Nv+46gHPgJrMbofntHDEqzDXmymWRurzRSf 1rWWRv9jNHAmbzNRWwOQp5Ymm6J5EI5t4CkE8Pyd1hXyWOHVkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxjT84a7adQbF0Od1nri23adWE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDRjMmM0MTYtOWQ4Mi0z MzIzLTgwOGUtMjkxODBjYzQ0OTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB+xlY7vsI84Mecv0ft3d93H40aKUIT6nXY0Smd0bpDJxwyDPDY6o54 770R5vK7/ZkAeO8xtJv0E0H2LDrYs7Xy4i4x+WRkEyKJ5tC9TIpjQMDVjTPTUSw1 zDi7jz4czQ2tJ03Gm+RBax5ehg9xbAA+qrkW4/15doWvt7nMoYyMma1jvFKGtPme dzKFS1Nat0lPvW6wgJ2J4sjBMnsb9DDk/HdKnvZEncrune6ZLzP/P/KuR9H5lABa VhTwoTvNPbtyrv/YcaS0oXKYJfnyFt4mbw5r4athjWglJ0cbgLDbjrjCNVYJ0Mcy s9MAgf42DW6IfuqU59IXQmynseLxAUY= -----END CERTIFICATE-----Generated at Thu Dec 25 01:25:05 2025 by rpki-client