This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa File: 3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa (raw, json) Hash identifier: 1QGXvnO+8bcq+YCxts62IRh71XAyNdwuTzMvAYnijmg= Subject key identifier: 57:AF:99:67:2E:AF:49:A6:C6:0C:81:FF:CA:DB:19:7F:A2:F9:CA:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C1D2B725EA95787EB62518C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:72:5e:a9:57:87:eb:62:51:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=bc03d7fd-4076-47a6-bf25-9aa55e357e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:97:0a:75:5d:81:b1:95:44:bb:9a:f7:73: 80:9d:1f:72:df:48:46:32:9b:8f:24:74:b8:92:b6: fd:6d:0d:a7:de:fd:81:c2:94:dd:1e:77:ff:d0:1b: 35:2b:d7:2d:1e:c0:6f:26:1c:49:99:35:8f:a8:5e: 3f:e8:cf:88:f9:b4:24:31:7a:7a:46:10:53:f9:00: 1f:b9:79:86:9e:99:93:de:c5:9d:2c:ce:14:80:63: de:8e:96:f7:b5:5f:fd:51:a7:20:1d:50:c2:7b:9d: e2:f7:fd:1e:97:f6:6e:29:a0:ec:53:6a:89:5a:de: 84:f9:4e:b8:9d:74:8f:84:c3:bb:63:55:f1:3a:af: a9:ab:7e:1b:fc:0b:5e:79:63:b2:0b:37:c4:25:36: 3b:7f:88:06:21:d4:07:f6:42:73:cc:ff:65:91:73: c0:2b:02:5a:49:f2:19:a6:79:8c:e5:06:e0:41:ce: 21:6e:56:27:a6:cb:e2:71:66:f0:a3:ec:f5:26:c5: 32:ce:ab:c4:06:aa:43:36:4e:8d:50:da:83:b0:8e: 7e:ab:93:7a:1e:98:33:f3:9e:5a:2a:a5:9d:9f:9e: 88:bd:4c:43:f8:a5:f7:24:bf:02:fc:99:d5:0c:cb: 94:0c:7b:b2:95:00:82:aa:3a:9a:7c:3d:d2:49:20: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AF:99:67:2E:AF:49:A6:C6:0C:81:FF:CA:DB:19:7F:A2:F9:CA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3dc0fad7-7fb6-3ddd-9a11-e7aeaf916437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:97:67:b0:51:5f:68:9f:52:d8:d2:10:3b:de:17:a4:8e:ac: f2:2a:4b:c1:ff:65:d8:54:21:fe:cd:da:12:a1:0d:c2:87:f4: 0a:69:f6:53:1f:6c:35:8b:9e:e0:2c:fd:6b:05:33:1e:5f:fc: 82:eb:26:1e:f0:a6:cf:f3:c1:7d:c4:26:d7:1f:fd:35:39:6f: 92:20:44:b1:87:e3:40:f7:6b:3c:56:9c:ec:ba:9e:42:b5:66: 1b:c9:ea:7f:75:c6:b0:b1:cc:69:1f:8d:19:c0:c9:b8:9f:b3: c1:1f:4f:d2:ee:97:9f:4b:99:b6:b5:3b:38:d0:9d:42:43:1a: 59:c4:91:13:2f:b3:48:42:f6:30:5c:01:d2:a2:e4:d9:52:e3: eb:de:c4:13:a6:eb:ad:fa:5f:f2:36:27:5b:ce:7d:62:db:02: d3:28:3d:f4:f9:13:79:21:01:f3:5d:c1:00:0e:1c:92:a4:45: 29:01:7e:23:85:4e:b4:97:5e:31:56:2c:28:69:5a:db:76:c9: 77:ee:5a:9b:d2:54:a2:cb:42:bc:ad:7a:ea:b1:70:2b:b3:51: 73:be:a4:f1:ee:f7:4e:9d:d2:0f:53:01:4e:bd:c9:56:ce:18: 28:2c:7b:bd:2f:f2:0e:77:bf:b0:e2:65:ec:4e:8a:51:a5:f2: 8e:8b:1e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3JeqVeH62JRjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk YmMwM2Q3ZmQtNDA3Ni00N2E2LWJmMjUtOWFhNTVlMzU3ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszyXCnVdgbGVRLua93OAnR9y30hGMpuPJHS4 krb9bQ2n3v2BwpTdHnf/0Bs1K9ctHsBvJhxJmTWPqF4/6M+I+bQkMXp6RhBT+QAf uXmGnpmT3sWdLM4UgGPejpb3tV/9UacgHVDCe53i9/0el/ZuKaDsU2qJWt6E+U64 nXSPhMO7Y1XxOq+pq34b/AteeWOyCzfEJTY7f4gGIdQH9kJzzP9lkXPAKwJaSfIZ pnmM5QbgQc4hblYnpsvicWbwo+z1JsUyzqvEBqpDNk6NUNqDsI5+q5N6Hpgz855a KqWdn56IvUxD+KX3JL8C/JnVDMuUDHuylQCCqjqafD3SSSAIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFevmWcur0mmxgyB/8rbGX+i+co8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2RjMGZhZDctN2ZiNi0z ZGRkLTlhMTEtZTdhZWFmOTE2NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6XZ7BRX2ifUtjSEDveF6SOrPIqS8H/ZdhUIf7N2hKhDcKH9App9lMf bDWLnuAs/WsFMx5f/ILrJh7wps/zwX3EJtcf/TU5b5IgRLGH40D3azxWnOy6nkK1 ZhvJ6n91xrCxzGkfjRnAybifs8EfT9Lul59Lmba1OzjQnUJDGlnEkRMvs0hC9jBc AdKi5NlS4+vexBOm6636X/I2J1vOfWLbAtMoPfT5E3khAfNdwQAOHJKkRSkBfiOF TrSXXjFWLChpWtt2yXfuWpvSVKLLQryteuqxcCuzUXO+pPHu906d0g9TAU69yVbO GCgse70v8g53v7DiZexOilGl8o6LHoM= -----END CERTIFICATE-----Generated at Sat Dec 20 15:37:16 2025 by rpki-client