This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4be3537-2874-3869-b91f-11d82490f73e.roa File: c4be3537-2874-3869-b91f-11d82490f73e.roa (raw, json) Hash identifier: O8Vjs0W80wk5J1P8B66LwF05fxpRJwJBUwd84/AlwTc= Subject key identifier: 44:3F:52:96:A8:B3:35:43:9A:5C:6D:DC:47:C4:53:A7:C7:06:46:7C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C33811F8EE6A222E174115A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4be3537-2874-3869-b91f-11d82490f73e.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.33.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:1f:8e:e6:a2:22:e1:74:11:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=1cc4f4fd-1517-4e87-beaa-d40b45084674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:f1:e8:82:fd:38:f7:09:d4:36:9a:0d:97: 7a:7c:4f:38:01:57:69:fb:36:be:9c:e3:ee:bf:ae: cc:13:12:f0:c8:99:c3:27:ac:4f:72:94:e2:0a:7f: 32:19:aa:c5:a3:09:fc:0d:66:9d:40:1a:cd:6f:ec: a6:54:ea:54:97:c3:68:1f:e9:4a:59:a3:82:66:db: 02:b1:eb:cc:fd:62:fb:60:25:b2:10:e5:0a:2b:a6: e9:a6:8b:f8:54:62:e3:74:5c:a5:99:99:96:3b:2a: 50:aa:f7:4a:6b:ad:c7:98:58:3d:17:b5:69:16:6a: eb:81:29:7f:dc:e2:a0:90:58:69:40:83:1f:eb:7f: db:b4:cc:75:d3:07:1d:b5:3a:74:e8:5e:b2:7e:46: 5d:26:15:b0:03:38:65:1d:f2:f0:ff:ad:39:77:e7: 83:a4:ba:33:d3:3d:1f:fc:2b:a3:13:95:fa:5f:cd: b3:ff:26:5c:db:8b:c2:4f:ac:8e:11:76:18:0a:eb: d8:ab:fe:5e:70:8e:53:75:15:28:42:2a:d2:d7:7b: b2:63:a0:78:d0:ba:9d:13:e8:9d:b5:7e:29:c0:a2: 81:8d:9c:f1:db:c8:95:ee:30:01:40:1d:09:f8:bc: 3e:e9:06:06:ff:56:12:e2:04:30:fe:d2:95:a7:c3: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:52:96:A8:B3:35:43:9A:5C:6D:DC:47:C4:53:A7:C7:06:46:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c4be3537-2874-3869-b91f-11d82490f73e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:55:2a:09:fe:79:3e:9c:6a:97:a4:b6:30:31:cc:da:65:c6: 14:c0:ae:fc:d0:e0:2d:ed:33:a5:e8:32:a3:e3:ab:d7:e6:82: 7a:81:c3:36:ab:04:36:1d:44:db:cf:8a:0b:88:45:fa:60:18: 3d:97:0d:40:5c:c7:17:8e:cc:ad:69:2f:3e:6d:5e:3b:92:0a: 4a:8b:f2:64:8d:ca:c3:b6:6e:0d:1b:38:7f:b5:a2:e4:58:d7: 08:e8:d1:48:1e:58:01:38:0e:08:08:77:c8:21:40:06:18:1c: 75:93:8c:b3:41:20:53:fb:eb:cc:a0:c9:90:13:02:ee:b9:87: f1:10:e3:7d:f4:a1:7f:4e:90:7c:9f:10:55:96:f1:6f:72:58: d3:2d:1d:a7:d7:3c:f8:19:7c:b6:a9:71:22:f9:7e:da:fb:8f: 77:3b:ba:b2:40:e3:bc:67:4a:f0:8d:f3:c7:74:d0:59:05:7f: 08:30:4b:4d:bd:93:96:44:b8:47:c3:9b:58:76:49:7f:4f:37: 5d:28:ea:6f:e9:7d:18:eb:8f:94:61:85:a3:86:9e:91:56:71: 2d:f5:f1:4b:74:2e:b9:b0:a2:19:93:f0:95:d4:9c:bf:28:9e: ff:27:c3:1c:a4:18:8e:db:69:b5:69:28:a7:60:e3:1d:16:e1: e3:f6:54:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgR+O5qIi4XQRWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk MWNjNGY0ZmQtMTUxNy00ZTg3LWJlYWEtZDQwYjQ1MDg0Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ3x6IL9OPcJ1DaaDZd6fE84AVdp+za+nOPu v67MExLwyJnDJ6xPcpTiCn8yGarFown8DWadQBrNb+ymVOpUl8NoH+lKWaOCZtsC sevM/WL7YCWyEOUKK6bppov4VGLjdFylmZmWOypQqvdKa63HmFg9F7VpFmrrgSl/ 3OKgkFhpQIMf63/btMx10wcdtTp06F6yfkZdJhWwAzhlHfLw/605d+eDpLoz0z0f /CujE5X6X82z/yZc24vCT6yOEXYYCuvYq/5ecI5TdRUoQirS13uyY6B40LqdE+id tX4pwKKBjZzx28iV7jABQB0J+Lw+6QYG/1YS4gQw/tKVp8M2ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ/UpaoszVDmlxt3EfEU6fHBkZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzRiZTM1MzctMjg3NC0z ODY5LWI5MWYtMTFkODI0OTBmNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRVKgn+eT6capektjAxzNplxhTArvzQ4C3tM6XoMqPjq9fmgnqBwzar BDYdRNvPiguIRfpgGD2XDUBcxxeOzK1pLz5tXjuSCkqL8mSNysO2bg0bOH+1ouRY 1wjo0UgeWAE4DggId8ghQAYYHHWTjLNBIFP768ygyZATAu65h/EQ4330oX9OkHyf EFWW8W9yWNMtHafXPPgZfLapcSL5ftr7j3c7urJA47xnSvCN88d00FkFfwgwS029 k5ZEuEfDm1h2SX9PN10o6m/pfRjrj5RhhaOGnpFWcS318Ut0LrmwohmT8JXUnL8o nv8nwxykGI7babVpKKdg4x0W4eP2VNs= -----END CERTIFICATE-----Generated at Sat Dec 20 12:09:35 2025 by rpki-client