This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa File: 8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa (raw, json) Hash identifier: 6qL/9WE47ahv3DqS39b0OjnvLUdGZsDQADjsbRJ/6Pk= Subject key identifier: AF:A9:74:EF:15:08:6B:D4:EB:43:2D:E2:B2:FD:C6:19:BC:7B:B6:DC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C22C0ED174557B2C5B72BB100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:ed:17:45:57:b2:c5:b7:2b:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=12e53d9a-4218-41c7-b2f0-f35984f25da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f1:5d:64:9b:54:57:db:4c:3d:81:19:a6:28: 78:b7:1d:a0:d5:80:f4:c9:eb:ca:61:6a:5a:51:43: 31:de:bf:7f:7d:52:28:68:ee:81:35:0e:f3:1d:83: 27:1c:f1:3d:ce:44:6d:48:57:6b:fc:ce:e9:d3:5c: 54:34:02:52:92:83:92:0f:4c:12:2a:53:3e:88:26: 98:89:23:e1:b1:9c:27:11:15:6b:3a:48:b5:e2:59: 1c:74:78:0f:63:b2:6b:93:83:84:75:cd:0a:be:89: c8:f3:ba:79:74:55:0b:6a:b0:af:96:76:b6:1b:3b: 71:a2:c3:c5:aa:57:51:82:50:6c:de:a6:17:87:e1: 4a:eb:2f:bb:c9:73:b2:13:42:d8:e1:9b:d1:dc:e1: 27:90:dc:b8:00:37:fb:2f:e3:57:fc:d5:ed:dc:ee: 07:73:92:e8:8c:a9:b3:b5:01:7e:60:e4:35:05:7c: 50:4a:7e:56:6e:55:7f:f1:9e:5f:c8:f7:fa:84:55: 12:50:ac:4f:42:03:63:28:38:d6:bd:31:16:a5:67: 16:cd:79:77:54:0c:d8:9d:90:72:1f:da:f6:dd:cc: 9a:eb:c1:c5:c6:56:b0:25:ac:aa:c9:68:b1:62:1b: 0d:e0:16:1c:d8:ff:d9:eb:9e:58:12:06:fa:df:ff: 83:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A9:74:EF:15:08:6B:D4:EB:43:2D:E2:B2:FD:C6:19:BC:7B:B6:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8c384cf8-f47e-36b8-ad6e-dad7669a56ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:4b:84:77:b8:5a:dd:e9:16:54:4b:e0:77:94:2b:10:ec:c6: 40:83:1c:43:cb:5f:be:ca:fe:57:33:03:87:e8:11:f0:cf:b5: cc:64:f9:27:01:10:06:a7:23:54:f5:ec:3f:47:c2:03:d2:14: a4:50:f5:b1:f1:9a:66:31:cc:d1:24:7a:11:c8:39:00:f6:0a: 89:67:64:ce:4d:5e:e9:02:29:3c:6f:c6:96:04:2e:ea:95:da: 57:75:21:d4:08:df:ce:e3:21:f9:35:f4:d4:c0:13:24:95:7f: 74:bb:ca:87:98:76:e2:f9:08:a9:35:6c:65:d7:7d:7c:ca:9a: 00:e9:96:2a:a8:61:8d:2c:e4:ff:73:09:45:b8:5b:ae:fe:4e: f9:49:ce:af:f0:b4:39:c9:f1:d6:e9:03:e7:8f:ea:58:ee:09: 76:5b:0d:d2:7d:10:29:64:6e:fd:8d:ae:8d:a5:9c:91:c0:f1: 67:39:6d:92:4f:7a:da:4b:ea:51:cf:f0:12:12:99:54:ba:f2: 61:56:0b:b1:5a:81:bb:1b:e6:0f:03:47:c1:72:08:55:3a:48: 2d:03:99:80:94:f0:cf:92:71:a3:ed:4e:eb:5f:af:0d:9a:bf: bc:3a:74:83:53:36:65:ad:6a:bd:e8:00:6c:72:9a:31:de:d1: 75:0e:24:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwO0XRVeyxbcrsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk MTJlNTNkOWEtNDIxOC00MWM3LWIyZjAtZjM1OTg0ZjI1ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvFdZJtUV9tMPYEZpih4tx2g1YD0yevKYWpa UUMx3r9/fVIoaO6BNQ7zHYMnHPE9zkRtSFdr/M7p01xUNAJSkoOSD0wSKlM+iCaY iSPhsZwnERVrOki14lkcdHgPY7Jrk4OEdc0KvonI87p5dFULarCvlna2GztxosPF qldRglBs3qYXh+FK6y+7yXOyE0LY4ZvR3OEnkNy4ADf7L+NX/NXt3O4Hc5LojKmz tQF+YOQ1BXxQSn5WblV/8Z5fyPf6hFUSUKxPQgNjKDjWvTEWpWcWzXl3VAzYnZBy H9r23cya68HFxlawJayqyWixYhsN4BYc2P/Z655YEgb63/+D7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+pdO8VCGvU60Mt4rL9xhm8e7bcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGMzODRjZjgtZjQ3ZS0z NmI4LWFkNmUtZGFkNzY2OWE1NmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINLhHe4Wt3pFlRL4HeUKxDsxkCDHEPLX77K/lczA4foEfDPtcxk+ScB EAanI1T17D9HwgPSFKRQ9bHxmmYxzNEkehHIOQD2ColnZM5NXukCKTxvxpYELuqV 2ld1IdQI387jIfk19NTAEySVf3S7yoeYduL5CKk1bGXXfXzKmgDpliqoYY0s5P9z CUW4W67+TvlJzq/wtDnJ8dbpA+eP6ljuCXZbDdJ9EClkbv2Nro2lnJHA8Wc5bZJP etpL6lHP8BISmVS68mFWC7Fagbsb5g8DR8FyCFU6SC0DmYCU8M+ScaPtTutfrw2a v7w6dINTNmWtar3oAGxymjHe0XUOJFQ= -----END CERTIFICATE-----Generated at Sat Dec 20 12:06:07 2025 by rpki-client