This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa File: 0967e81b-028b-34cd-bdc0-bbf4748131ac.roa (raw, json) Hash identifier: vVuB7rgZIeF0una5HnhThveI4GFyCoaoLXmXg8hkOcs= Subject key identifier: 89:56:A2:69:F3:F4:70:61:5E:BA:1E:A0:A2:37:C8:81:AD:A0:CF:EF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C1D2B71102AAFDD0FF5A807C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:71:10:2a:af:dd:0f:f5:a8:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=2c7741de-226e-4462-a919-345c18237a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:ee:28:21:fe:b2:c4:20:d3:3f:61:a8:e6: 84:f5:e3:c8:3b:d0:c9:c8:8e:00:3d:8f:e8:90:08: 60:e3:c2:3b:33:16:a4:53:8e:a1:f2:40:b8:e1:2d: 93:f1:f4:04:df:86:99:23:df:2f:0c:93:15:3d:b5: 17:ef:28:0a:ae:36:6c:73:0e:1b:f4:f5:ee:f1:14: c8:ea:d7:d4:64:73:d6:b1:72:c7:50:52:0d:23:29: 15:fc:b9:9f:62:78:df:1a:dd:e6:21:70:0e:e8:16: e1:65:71:f7:aa:80:f3:48:59:71:64:12:85:aa:3c: ea:7f:3b:bd:1e:f0:61:f8:35:60:95:75:a3:44:86: 59:04:84:c4:ed:4b:34:a5:98:83:5e:c4:9a:7d:f5: f4:8c:9d:51:39:6d:99:90:43:3a:83:21:5d:4e:7c: c0:c5:54:8f:73:da:ce:cc:c5:1f:56:88:7a:cc:65: ce:05:41:96:c4:e9:1c:f6:9c:61:5f:e7:f5:b5:71: 74:93:45:e2:14:fa:98:38:e8:88:5c:58:2b:4a:26: 87:15:a7:62:c5:1a:e5:d2:e9:10:8a:24:7f:75:ed: 90:17:77:25:f1:fb:24:90:e8:15:eb:aa:08:fc:f1: 02:01:59:0c:6d:93:7a:2f:62:ec:93:ab:c5:a8:29: a8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:56:A2:69:F3:F4:70:61:5E:BA:1E:A0:A2:37:C8:81:AD:A0:CF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0967e81b-028b-34cd-bdc0-bbf4748131ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b4:1e:e7:84:be:a7:44:b7:1b:d8:c3:38:03:34:0b:3a:3b: 94:31:33:d6:fd:33:e5:8c:06:22:96:27:06:36:62:7d:9c:da: d4:9b:ff:36:96:0c:be:9f:6d:99:68:a6:aa:e9:63:6f:6b:b1: 65:02:ee:34:2f:5f:c4:3e:14:38:ca:6b:71:bd:35:a8:4c:68: cb:7c:13:62:e3:39:3f:7c:a1:b1:c9:bd:ae:10:e7:c9:e4:c1: 99:ad:94:63:62:8a:33:18:22:e0:16:2e:5a:07:ea:22:ef:55: 79:1f:ca:19:ea:ba:1b:02:ea:fc:18:68:5b:89:2d:8d:31:e5: e0:8a:9b:16:fd:4b:1b:b0:7b:63:42:b7:f1:36:a4:4e:a1:48: 0f:f3:88:ac:0e:4f:de:ed:1e:30:e6:86:1e:d0:68:84:87:6b: ae:b5:52:2c:ed:41:fe:63:ce:57:26:86:c9:18:29:83:e3:70: 8d:7e:c9:11:04:14:3d:f8:bc:66:f7:2b:8f:97:7d:2f:dc:ec: 8e:ca:69:a4:27:ed:4d:a4:b8:56:1f:2d:f0:b9:11:88:73:8e: 48:5b:b2:85:d4:65:70:da:9a:d4:cc:8a:a6:2a:20:76:c9:ba: 5e:4f:43:b6:33:2f:9a:b7:d3:a7:63:8f:a8:61:27:b5:9b:eb: ad:77:21:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3EQKq/dD/WoB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk MmM3NzQxZGUtMjI2ZS00NDYyLWE5MTktMzQ1YzE4MjM3YTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1buKCH+ssQg0z9hqOaE9ePIO9DJyI4APY/o kAhg48I7MxakU46h8kC44S2T8fQE34aZI98vDJMVPbUX7ygKrjZscw4b9PXu8RTI 6tfUZHPWsXLHUFINIykV/LmfYnjfGt3mIXAO6BbhZXH3qoDzSFlxZBKFqjzqfzu9 HvBh+DVglXWjRIZZBITE7Us0pZiDXsSaffX0jJ1ROW2ZkEM6gyFdTnzAxVSPc9rO zMUfVoh6zGXOBUGWxOkc9pxhX+f1tXF0k0XiFPqYOOiIXFgrSiaHFadixRrl0ukQ iiR/de2QF3cl8fskkOgV66oI/PECAVkMbZN6L2Lsk6vFqCmoOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlWomnz9HBhXroeoKI3yIGtoM/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDk2N2U4MWItMDI4Yi0z NGNkLWJkYzAtYmJmNDc0ODEzMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC0HueEvqdEtxvYwzgDNAs6O5QxM9b9M+WMBiKWJwY2Yn2c2tSb/zaW DL6fbZlopqrpY29rsWUC7jQvX8Q+FDjKa3G9NahMaMt8E2LjOT98obHJva4Q58nk wZmtlGNiijMYIuAWLloH6iLvVXkfyhnquhsC6vwYaFuJLY0x5eCKmxb9Sxuwe2NC t/E2pE6hSA/ziKwOT97tHjDmhh7QaISHa661UiztQf5jzlcmhskYKYPjcI1+yREE FD34vGb3K4+XfS/c7I7KaaQn7U2kuFYfLfC5EYhzjkhbsoXUZXDamtTMiqYqIHbJ ul5PQ7YzL5q306djj6hhJ7Wb6613Ias= -----END CERTIFICATE-----Generated at Sat Dec 20 13:45:59 2025 by rpki-client