This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa File: 257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa (raw, json) Hash identifier: T+iSy1VR3Fa+wPOg/nxuR5b4XT09yHYE3DmQKnI6kn0= Subject key identifier: 03:E5:4F:81:ED:C5:32:E7:C2:B0:35:06:DC:52:DD:30:53:A5:2F:AE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C33811F82FE4C5B1893C24400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:1f:82:fe:4c:5b:18:93:c2:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=a07c3550-6827-4c98-b927-71122582deeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:7b:d1:16:c7:1c:70:4e:af:33:2d:a6:de: 39:20:8f:69:69:3b:7d:94:09:27:72:8e:10:64:3e: f9:17:20:d1:e6:0e:e2:66:fd:82:97:b2:b2:c7:94: 8e:71:b6:3d:ed:9b:a6:04:18:75:39:18:1f:c5:1e: 62:b4:c2:ec:32:b1:d6:cb:66:a3:12:f8:17:54:56: a3:27:7b:fe:f0:47:03:62:c2:0a:95:de:04:e8:6f: a7:34:21:6c:a7:f5:03:04:f1:ae:b1:e1:ad:5f:e7: 62:dc:11:cf:0c:6c:ca:0b:ce:89:ed:d5:4e:20:df: d2:0b:8c:ca:69:2a:88:0e:3a:48:88:54:7f:4d:eb: 44:a5:34:bb:51:5a:c5:14:ce:e7:9a:0f:d4:13:d0: 09:9b:71:5d:4a:80:4d:a0:e3:ed:74:f4:aa:cf:0e: bd:4e:ea:7e:b6:52:a8:e2:ee:0c:8d:24:b4:7b:bb: ef:d3:e0:7e:d6:56:c8:ad:7b:a7:40:86:66:bd:47: 5d:f5:2a:e9:a0:ca:7f:f1:d9:4d:16:96:ac:e0:f8: 89:52:a9:be:02:58:08:5a:41:3d:52:70:55:68:77: 00:04:a0:77:84:c3:49:dc:2a:d7:ce:48:65:b1:1a: a3:5a:dd:4a:4d:85:6c:6f:f2:e6:6e:67:fc:e9:ed: 48:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E5:4F:81:ED:C5:32:E7:C2:B0:35:06:DC:52:DD:30:53:A5:2F:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/257673b6-c9c1-3a5b-b86e-987bf59a6f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d7:91:e9:0c:f9:45:7c:88:77:f7:01:83:09:92:b2:91:a0: 91:74:55:a3:a2:fc:df:05:a1:a5:3c:11:7f:1b:40:e7:b7:0b: 41:4e:8b:88:6c:72:b8:b6:2b:7c:c1:0f:61:d5:db:ec:0f:c1: ce:8f:a9:59:11:3a:48:cb:c8:10:0e:c6:ff:2f:3d:17:0a:68: 62:ac:dc:a2:e9:3a:36:3f:2d:1e:df:c9:ec:eb:00:8e:e1:73: e1:88:21:a0:40:38:09:db:d4:f6:6d:55:13:ec:a3:36:f8:fc: 76:d0:66:5c:9c:ea:9c:05:4b:fa:c9:e1:03:b3:af:12:4d:c6: 81:15:f4:9b:8a:da:79:eb:d7:c9:50:75:69:d4:14:d2:c2:1f: 3d:77:dd:13:13:0c:64:38:3f:71:48:d3:85:28:aa:62:71:81: 63:6e:e0:52:e5:8c:e1:56:20:bc:ad:2e:f1:7a:b1:07:52:2e: 4d:36:46:b7:03:fe:78:2a:be:85:c4:41:60:6c:28:6a:02:45: 60:c0:22:fc:ce:55:31:c8:ea:0e:b9:6d:ba:08:0d:e0:51:0b: 31:ee:ae:5d:94:49:51:26:a8:3b:c6:c4:7f:7d:c7:7f:d0:5a: 99:75:42:39:e4:78:69:03:67:9e:3f:1f:82:cd:df:53:2d:a0: d8:b2:0b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgR+C/kxbGJPCRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk YTA3YzM1NTAtNjgyNy00Yzk4LWI5MjctNzExMjI1ODJkZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeJ70RbHHHBOrzMtpt45II9paTt9lAknco4Q ZD75FyDR5g7iZv2Cl7Kyx5SOcbY97ZumBBh1ORgfxR5itMLsMrHWy2ajEvgXVFaj J3v+8EcDYsIKld4E6G+nNCFsp/UDBPGuseGtX+di3BHPDGzKC86J7dVOIN/SC4zK aSqIDjpIiFR/TetEpTS7UVrFFM7nmg/UE9AJm3FdSoBNoOPtdPSqzw69Tup+tlKo 4u4MjSS0e7vv0+B+1lbIrXunQIZmvUdd9SrpoMp/8dlNFpas4PiJUqm+AlgIWkE9 UnBVaHcABKB3hMNJ3CrXzkhlsRqjWt1KTYVsb/Lmbmf86e1IYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPlT4HtxTLnwrA1BtxS3TBTpS+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjU3NjczYjYtYzljMS0z YTViLWI4NmUtOTg3YmY1OWE2ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnXkekM+UV8iHf3AYMJkrKRoJF0VaOi/N8FoaU8EX8bQOe3C0FOi4hs cri2K3zBD2HV2+wPwc6PqVkROkjLyBAOxv8vPRcKaGKs3KLpOjY/LR7fyezrAI7h c+GIIaBAOAnb1PZtVRPsozb4/HbQZlyc6pwFS/rJ4QOzrxJNxoEV9JuK2nnr18lQ dWnUFNLCHz133RMTDGQ4P3FI04UoqmJxgWNu4FLljOFWILytLvF6sQdSLk02RrcD /ngqvoXEQWBsKGoCRWDAIvzOVTHI6g65bboIDeBRCzHurl2USVEmqDvGxH99x3/Q Wpl1QjnkeGkDZ54/H4LN31MtoNiyC4w= -----END CERTIFICATE-----Generated at Sat Dec 20 15:45:09 2025 by rpki-client