This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa File: afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa (raw, json) Hash identifier: QTy75o3dd1mluv1oAjVQ3ss/BIvOcmLe8/QxdouHCZM= Subject key identifier: 0A:90:5A:A3:54:83:28:69:05:A9:56:45:30:D7:79:52:75:6B:71:93 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C29BBAA3362DBCEC01D3D9300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 8069 IP address blocks: 20.33.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:aa:33:62:db:ce:c0:1d:3d:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=5ba9c3a7-1d64-4c45-96ef-685057da34b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:60:c2:83:06:54:8b:c4:ba:d5:cc:44:7b: d5:e7:95:21:eb:30:9d:f5:8e:7c:47:5e:07:7c:a6: 27:f4:15:c1:ca:c8:3a:d6:b2:7a:a8:cc:e1:1e:ff: 99:fb:7e:9d:f4:0d:21:81:67:4f:8a:3f:4e:45:62: a4:bc:87:ff:45:b0:2e:56:40:3a:d2:27:e7:c3:60: 7e:18:1a:88:44:09:2b:78:6a:08:5a:59:c9:33:aa: 6d:5e:8d:ee:5c:ea:ed:de:64:4f:50:4e:d6:d2:0f: eb:62:21:2b:5d:5d:c8:02:c1:16:0d:15:48:11:e2: e0:e5:d7:12:43:80:0c:93:de:87:2c:5a:d9:4e:88: 28:f6:03:19:1b:b8:fa:b3:4a:5f:84:5b:fd:c4:12: bc:c8:cc:5a:31:da:c5:a3:e4:5d:77:c9:9b:46:11: d5:26:8b:4c:39:d0:a9:42:09:56:61:73:f1:e4:79: d8:0a:69:8a:1d:0c:3c:b4:42:b9:1f:f5:6e:92:6a: 3c:13:42:b8:1d:68:35:76:08:a6:7c:62:92:da:fc: 16:95:31:60:1d:6a:30:d5:77:0d:28:dd:e3:bb:13: 9b:df:54:56:d4:b5:4f:01:44:19:b7:10:21:ca:4e: a0:da:80:bf:32:bb:98:9e:6e:ce:a7:0c:69:4d:dd: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:90:5A:A3:54:83:28:69:05:A9:56:45:30:D7:79:52:75:6B:71:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/afceef4f-d98a-3a55-87af-6d0e1ed3d7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:00:90:0b:a0:d5:28:85:8e:e5:5b:7f:a0:3e:14:7c:37:99: f1:83:3c:44:a8:7a:43:46:1f:82:5f:2b:13:9c:b6:2f:4c:97: 4a:15:cd:45:73:42:6e:e9:31:43:7b:fe:7a:8b:1d:15:e1:68: 9e:ef:67:5d:d7:5c:28:97:6c:ab:6c:2d:35:a3:30:0d:d1:b6: dc:97:8b:5a:62:a6:6d:ec:78:02:58:e7:76:e7:d3:7e:1e:d1: 8c:5f:97:8d:5a:78:64:b6:77:f0:c6:f3:0f:eb:2b:cc:f0:1a: d1:b2:54:9d:46:37:58:97:f0:36:cc:3c:d9:9e:f4:9a:ff:29: 1b:95:9c:46:88:c4:52:c0:50:dc:f1:2f:e4:6b:97:8f:3a:f1: 36:8f:8c:33:5d:d0:a2:45:73:06:2d:73:3f:f2:48:e6:0e:41: 0c:f6:db:05:57:02:75:59:57:b6:9f:71:66:73:26:30:43:33: 6a:eb:44:35:51:df:59:ab:ed:2a:55:70:82:2c:c0:f2:fc:53: 7d:55:f7:26:86:dc:cf:8a:b6:de:31:ba:a4:ad:f4:40:38:d3: 86:f5:dc:2d:22:b6:48:d1:13:4d:59:ad:68:33:94:19:c4:41: b2:7b:9f:05:eb:6c:26:24:30:a4:38:ad:e8:1d:77:34:fa:f3: 55:9f:c3:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu6ozYtvOwB09kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk NWJhOWMzYTctMWQ2NC00YzQ1LTk2ZWYtNjg1MDU3ZGEzNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+9gwoMGVIvEutXMRHvV55Uh6zCd9Y58R14H fKYn9BXBysg61rJ6qMzhHv+Z+36d9A0hgWdPij9ORWKkvIf/RbAuVkA60ifnw2B+ GBqIRAkreGoIWlnJM6ptXo3uXOrt3mRPUE7W0g/rYiErXV3IAsEWDRVIEeLg5dcS Q4AMk96HLFrZTogo9gMZG7j6s0pfhFv9xBK8yMxaMdrFo+Rdd8mbRhHVJotMOdCp QglWYXPx5HnYCmmKHQw8tEK5H/Vukmo8E0K4HWg1dgimfGKS2vwWlTFgHWow1XcN KN3juxOb31RW1LVPAUQZtxAhyk6g2oC/MruYnm7OpwxpTd2SHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqQWqNUgyhpBalWRTDXeVJ1a3GTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWZjZWVmNGYtZDk4YS0z YTU1LTg3YWYtNmQwZTFlZDNkN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0AkAug1SiFjuVbf6A+FHw3mfGDPESoekNGH4JfKxOcti9Ml0oVzUVz Qm7pMUN7/nqLHRXhaJ7vZ13XXCiXbKtsLTWjMA3RttyXi1pipm3seAJY53bn034e 0Yxfl41aeGS2d/DG8w/rK8zwGtGyVJ1GN1iX8DbMPNme9Jr/KRuVnEaIxFLAUNzx L+Rrl4868TaPjDNd0KJFcwYtcz/ySOYOQQz22wVXAnVZV7afcWZzJjBDM2rrRDVR 31mr7SpVcIIswPL8U31V9yaG3M+Ktt4xuqSt9EA404b13C0itkjRE01ZrWgzlBnE QbJ7nwXrbCYkMKQ4regddzT681Wfw30= -----END CERTIFICATE-----Generated at Sat Dec 20 12:08:17 2025 by rpki-client