This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/843a7108-6102-3e20-b99f-948bb99b276e.roa File: 843a7108-6102-3e20-b99f-948bb99b276e.roa (raw, json) Hash identifier: E4rvekBUbbbAp8kee7/KbgEMndxeoEhdLrSho8lz8UY= Subject key identifier: 82:25:C4:B2:91:C3:21:0B:47:29:40:48:AF:6D:1A:4D:6A:C3:D9:81 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C22C0EB4B8808EA60F801C380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/843a7108-6102-3e20-b99f-948bb99b276e.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:eb:4b:88:08:ea:60:f8:01:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=7e468a3f-0ec8-4b65-957c-ee9d63c7e470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:a1:6c:f2:44:ee:da:ec:c9:57:d2:39:87: 73:20:57:ac:68:bb:23:6c:a9:94:94:d5:19:9c:f8: 2c:26:44:25:12:03:07:78:54:45:81:1c:50:d3:e1: 3c:9f:50:ae:c0:ff:ea:cb:00:82:4f:b6:ac:ec:22: c9:95:ac:b9:23:78:a0:88:5d:69:9b:9c:30:b3:65: 46:1f:f2:d7:f8:82:1f:b9:a0:d1:35:2f:e3:c2:bf: 0d:9a:38:1f:a6:3c:21:6f:ee:3f:24:3a:64:d3:cf: 53:49:0b:1b:e2:30:c0:43:fa:61:ce:73:b2:27:9f: 6f:da:ff:13:3b:1c:68:52:97:82:01:fd:ba:97:e2: c8:a1:06:e7:fe:d3:e7:f4:f6:e5:6c:b4:0e:5c:96: 53:02:b6:ea:78:6f:0a:bb:1e:bd:00:a2:45:ed:e0: 02:91:de:fa:e0:34:32:42:1b:2a:22:37:58:46:43: 27:fa:b4:7b:49:ae:95:cf:53:29:3b:8d:39:5c:63: b2:1b:98:5f:4a:ae:af:95:f7:4d:55:99:3b:20:53: e3:3e:d2:53:8a:70:55:bd:07:f4:ca:47:c0:ec:c7: 69:2f:a7:e0:b2:f0:11:11:7f:ea:1a:2c:39:72:ce: e2:ed:b9:b6:01:26:26:83:95:78:6a:af:6d:ab:d2: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:25:C4:B2:91:C3:21:0B:47:29:40:48:AF:6D:1A:4D:6A:C3:D9:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/843a7108-6102-3e20-b99f-948bb99b276e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:48:3c:4f:0d:67:b4:3d:12:5b:3e:a1:57:f4:3f:d6:c0:39: 33:b2:87:b5:94:57:23:04:f1:f0:6e:06:fb:03:fc:78:94:58: 8f:ef:71:b0:ef:50:24:b8:c1:ca:06:97:d6:15:ca:62:90:ef: d7:21:f1:9a:3b:5d:6e:60:1f:fd:a4:8c:c4:f5:02:64:bb:7b: 99:32:45:92:e2:13:c9:45:ae:e5:13:75:e6:5c:e0:4b:07:91: 9b:82:10:0b:c5:20:4d:44:62:44:03:51:b1:47:cc:0a:a0:50: e0:19:09:fa:98:7d:83:fa:4a:59:64:0f:eb:59:43:bf:66:a2: 8e:03:a4:1e:5f:a8:00:37:8a:89:51:d4:85:dc:d8:b3:68:60: ca:50:ab:6f:da:2b:b7:d3:eb:77:48:8c:d3:47:3e:df:20:35: c9:1a:19:98:7a:af:04:db:3b:a4:e8:48:8f:d6:f9:c7:2c:dd: 4d:17:4f:59:be:73:e8:e0:af:1d:21:a5:af:42:aa:32:b1:45: ea:dc:c5:ec:ae:4f:e4:75:d6:86:b4:9b:0f:60:fc:8e:db:72: 86:5d:e3:13:1b:21:5b:b1:1d:11:1f:a9:ce:94:e1:48:ce:64: b5:df:72:85:c5:89:1c:a1:0c:8d:40:49:c3:26:46:64:21:9c: 53:49:55:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwOtLiAjqYPgBw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk N2U0NjhhM2YtMGVjOC00YjY1LTk1N2MtZWU5ZDYzYzdlNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4yhbPJE7trsyVfSOYdzIFesaLsjbKmUlNUZ nPgsJkQlEgMHeFRFgRxQ0+E8n1CuwP/qywCCT7as7CLJlay5I3igiF1pm5wws2VG H/LX+IIfuaDRNS/jwr8Nmjgfpjwhb+4/JDpk089TSQsb4jDAQ/phznOyJ59v2v8T OxxoUpeCAf26l+LIoQbn/tPn9PblbLQOXJZTArbqeG8Kux69AKJF7eACkd764DQy QhsqIjdYRkMn+rR7Sa6Vz1MpO405XGOyG5hfSq6vlfdNVZk7IFPjPtJTinBVvQf0 ykfA7MdpL6fgsvAREX/qGiw5cs7i7bm2ASYmg5V4aq9tq9KAwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIlxLKRwyELRylASK9tGk1qw9mBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODQzYTcxMDgtNjEwMi0z ZTIwLWI5OWYtOTQ4YmI5OWIyNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9IPE8NZ7Q9Els+oVf0P9bAOTOyh7WUVyME8fBuBvsD/HiUWI/vcbDv UCS4wcoGl9YVymKQ79ch8Zo7XW5gH/2kjMT1AmS7e5kyRZLiE8lFruUTdeZc4EsH kZuCEAvFIE1EYkQDUbFHzAqgUOAZCfqYfYP6SllkD+tZQ79moo4DpB5fqAA3iolR 1IXc2LNoYMpQq2/aK7fT63dIjNNHPt8gNckaGZh6rwTbO6ToSI/W+ccs3U0XT1m+ c+jgrx0hpa9CqjKxRercxeyuT+R11oa0mw9g/I7bcoZd4xMbIVuxHREfqc6U4UjO ZLXfcoXFiRyhDI1AScMmRmQhnFNJVUg= -----END CERTIFICATE-----Generated at Sat Dec 20 12:09:13 2025 by rpki-client