This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/872d53e0-8eaf-3b1e-8930-5bf65609e87b.roa File: 872d53e0-8eaf-3b1e-8930-5bf65609e87b.roa (raw, json) Hash identifier: gaH6ysBcwD1OFMFY7LBvhYDzdhp1gEUM6R4v0S3pms8= Subject key identifier: EF:06:A4:DB:16:F1:AE:F2:27:F6:6F:C6:5C:E2:9F:DF:08:E2:7A:9A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C1D2B72368C706B9428007800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/872d53e0-8eaf-3b1e-8930-5bf65609e87b.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:72:36:8c:70:6b:94:28:00:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=444d1634-7dd8-47fd-ae61-e84ffb5f4413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:58:ba:99:d8:39:02:4d:32:6b:24:1e:13:33: 5c:87:82:e7:48:7f:c6:26:3a:17:8b:a9:26:79:88: 5a:9a:aa:88:25:3d:c4:11:17:7c:a6:5f:fb:ee:8c: cf:33:b3:e2:b2:14:ef:8e:4d:fe:54:f3:db:5a:45: 81:2d:15:e6:e0:41:97:2e:5c:59:72:e5:27:e8:5d: 53:f3:0f:01:07:0d:ab:2d:b3:96:af:74:97:df:40: cb:3d:e3:54:16:b9:f6:5a:66:48:c4:0e:fd:65:9a: a9:16:c4:81:b1:30:f0:5a:b9:67:7c:37:11:c6:4c: 28:a9:0e:6c:5e:4e:1d:fe:d6:9f:4a:db:06:d1:13: a8:00:b7:a8:b6:d2:3b:cd:e9:8d:67:7d:db:72:2e: e3:be:90:30:ee:c6:dd:bb:72:84:f1:5c:35:6d:65: 88:35:99:75:b3:ca:04:18:ff:87:cc:f2:30:86:f0: 87:d3:d3:84:ca:90:3a:27:25:bb:28:13:49:4f:ab: de:5a:17:7a:30:88:6a:be:77:16:2f:92:85:35:ab: 63:a3:8c:15:28:01:bf:ae:f9:91:d6:26:fa:23:3f: e1:c6:9d:3a:ac:08:47:ed:1f:a4:a0:f2:d6:0f:04: 3a:f1:85:46:02:26:1f:59:88:3f:0e:9f:58:c3:f6: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:06:A4:DB:16:F1:AE:F2:27:F6:6F:C6:5C:E2:9F:DF:08:E2:7A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/872d53e0-8eaf-3b1e-8930-5bf65609e87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:cb:fa:87:d7:f1:dc:69:06:cc:0c:6d:d1:50:92:2c:26:2d: e9:96:96:de:b8:81:53:c6:ba:98:47:24:ad:8a:ef:c3:75:69: 50:f8:d6:96:d1:d1:b6:36:c7:9b:f0:9e:65:e2:82:37:6b:a8: 59:f2:09:1f:f3:9b:cb:ff:9b:60:82:63:8f:c1:5a:2f:80:43: 30:7b:ca:d8:4b:62:c2:2c:c2:73:98:4b:5a:6c:a1:25:62:34: 77:ee:08:e0:05:29:dc:d9:19:d3:a1:6d:f6:08:c6:ca:40:62: 29:f0:51:09:70:04:b3:d5:0c:ae:59:eb:3e:da:1b:f8:ef:d3: 02:73:e2:53:8f:d1:bc:7b:74:cb:cd:f3:70:89:cc:64:74:1f: 0f:56:bf:4f:b8:f5:64:22:31:b6:7e:e9:35:5d:ae:02:b3:7e: 1c:af:07:a8:26:3d:cf:bb:30:5a:c6:f8:00:23:5d:aa:78:e0: b8:51:cb:9e:8e:ce:30:6d:fe:55:21:27:5a:95:a5:31:22:29: a4:1b:04:f5:ff:e8:60:df:ed:5d:9e:98:c1:b2:f8:d8:11:2a: be:80:86:39:d8:cc:82:c4:1d:71:49:4e:28:dc:69:36:1d:be: 82:ad:3e:ad:43:0a:e8:51:3e:97:16:70:e4:9f:76:9d:df:60: b7:92:2d:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3I2jHBrlCgAeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk NDQ0ZDE2MzQtN2RkOC00N2ZkLWFlNjEtZTg0ZmZiNWY0NDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFi6mdg5Ak0yayQeEzNch4LnSH/GJjoXi6km eYhamqqIJT3EERd8pl/77ozPM7PishTvjk3+VPPbWkWBLRXm4EGXLlxZcuUn6F1T 8w8BBw2rLbOWr3SX30DLPeNUFrn2WmZIxA79ZZqpFsSBsTDwWrlnfDcRxkwoqQ5s Xk4d/tafStsG0ROoALeottI7zemNZ33bci7jvpAw7sbdu3KE8Vw1bWWINZl1s8oE GP+HzPIwhvCH09OEypA6JyW7KBNJT6veWhd6MIhqvncWL5KFNatjo4wVKAG/rvmR 1ib6Iz/hxp06rAhH7R+koPLWDwQ68YVGAiYfWYg/Dp9Yw/ZMxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8GpNsW8a7yJ/Zvxlzin98I4nqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODcyZDUzZTAtOGVhZi0z YjFlLTg5MzAtNWJmNjU2MDllODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrL+ofX8dxpBswMbdFQkiwmLemWlt64gVPGuphHJK2K78N1aVD41pbR 0bY2x5vwnmXigjdrqFnyCR/zm8v/m2CCY4/BWi+AQzB7ythLYsIswnOYS1psoSVi NHfuCOAFKdzZGdOhbfYIxspAYinwUQlwBLPVDK5Z6z7aG/jv0wJz4lOP0bx7dMvN 83CJzGR0Hw9Wv0+49WQiMbZ+6TVdrgKzfhyvB6gmPc+7MFrG+AAjXap44LhRy56O zjBt/lUhJ1qVpTEiKaQbBPX/6GDf7V2emMGy+NgRKr6AhjnYzILEHXFJTijcaTYd voKtPq1DCuhRPpcWcOSfdp3fYLeSLd0= -----END CERTIFICATE-----Generated at Sat Dec 20 13:47:55 2025 by rpki-client