This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa File: c849a306-4c2a-3fc3-b123-c6713222f536.roa (raw, json) Hash identifier: RXvS6MTN2T1pE9tk0ftvZT9giOeRlMW919FBTrnbHSQ= Subject key identifier: D4:CA:4E:04:AB:E5:35:82:8D:3D:81:19:0E:06:9C:E0:06:26:EE:AB Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C1D2B717503856E4351563440 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:71:75:03:85:6e:43:51:56:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=a47b3ba1-0197-4a84-891f-e6ca1fed133d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5e:66:aa:78:32:9a:cd:0d:b9:22:0c:c1:a2: a9:91:a9:aa:73:3c:87:d1:c5:57:3b:90:ba:bf:f6: 3c:6b:2f:75:a2:82:34:fb:fe:13:21:4a:af:bd:93: ec:e7:c8:de:5a:4f:40:41:0a:c7:6d:54:5f:f6:76: 7e:22:88:f2:e2:c4:9a:b8:3b:5e:35:5b:38:8f:57: 81:36:20:8e:ca:b3:15:e3:80:7a:6b:04:fb:fc:c9: 89:c2:8e:f9:99:24:f2:03:c2:99:5b:70:63:dd:3c: 18:fe:34:bb:fd:ff:02:45:98:39:af:fb:07:5a:74: 65:e1:68:8d:58:bb:35:26:6a:42:75:9f:34:ab:7f: c0:64:ce:fc:05:3c:d0:dd:56:91:29:56:da:e6:57: 11:43:f6:1c:37:7e:01:cc:b0:bb:33:dd:5e:80:45: 41:fa:b8:44:87:8f:36:88:66:1e:42:04:f5:0b:b3: b6:89:84:69:30:af:77:fb:c0:d2:de:c6:15:15:6a: 34:e0:bb:3c:ba:ca:b8:84:91:ba:6a:4e:67:62:3c: d0:e9:e5:19:c8:df:d6:98:51:63:64:31:d1:99:30: fb:4e:39:a7:4e:5d:9a:74:db:b6:88:4d:bf:5d:a2: 7f:5c:f3:9f:cb:8a:e7:a9:90:c6:91:db:e9:94:c8: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CA:4E:04:AB:E5:35:82:8D:3D:81:19:0E:06:9C:E0:06:26:EE:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c849a306-4c2a-3fc3-b123-c6713222f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:82:c6:27:1e:20:87:ed:57:f4:ad:f5:9f:f0:92:d5:ab:0e: 9c:60:0e:f2:ff:56:c5:c4:71:a0:e8:3c:a5:1d:e3:41:4c:df: e3:88:86:b9:97:cc:b2:ac:ff:98:c2:95:da:74:80:5e:f0:50: a2:90:db:f3:18:34:40:b0:5f:d5:30:27:c6:2c:da:8d:68:7c: 2f:ec:d2:15:b7:9f:3d:2a:89:14:84:cc:17:0c:4a:10:4d:23: e5:5b:f3:55:1b:74:4a:82:9a:33:dc:78:02:69:f4:54:da:0d: 36:92:f1:b2:1f:f7:0d:7e:69:32:d3:5c:16:3c:38:26:03:26: 04:19:22:8a:4e:e6:ea:6e:07:f4:d9:91:24:c1:7e:1f:d2:a5: c6:06:bc:e9:f9:ef:b9:1e:c9:8b:76:c2:4d:2c:28:68:5c:7e: 69:36:25:42:0a:19:92:67:fa:7d:f2:5d:c2:9b:ad:2b:c3:94: f9:55:01:41:ea:f5:ec:59:7e:7d:69:00:5d:bf:03:3b:56:fb: 46:ed:a0:88:3a:0e:7d:57:fa:1b:32:f8:e5:09:8e:61:41:19: 9f:5c:b5:a1:3e:2a:43:90:8f:86:af:cd:64:18:58:c9:2c:a7: a2:29:7c:0e:a8:16:88:48:19:ae:3d:e8:90:f0:31:59:c1:2f: f1:fe:b2:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3F1A4VuQ1FWNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk YTQ3YjNiYTEtMDE5Ny00YTg0LTg5MWYtZTZjYTFmZWQxMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV5mqngyms0NuSIMwaKpkamqczyH0cVXO5C6 v/Y8ay91ooI0+/4TIUqvvZPs58jeWk9AQQrHbVRf9nZ+Iojy4sSauDteNVs4j1eB NiCOyrMV44B6awT7/MmJwo75mSTyA8KZW3Bj3TwY/jS7/f8CRZg5r/sHWnRl4WiN WLs1JmpCdZ80q3/AZM78BTzQ3VaRKVba5lcRQ/YcN34BzLC7M91egEVB+rhEh482 iGYeQgT1C7O2iYRpMK93+8DS3sYVFWo04Ls8usq4hJG6ak5nYjzQ6eUZyN/WmFFj ZDHRmTD7TjmnTl2adNu2iE2/XaJ/XPOfy4rnqZDGkdvplMgXiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTKTgSr5TWCjT2BGQ4GnOAGJu6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg0OWEzMDYtNGMyYS0z ZmMzLWIxMjMtYzY3MTMyMjJmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeCxiceIIftV/St9Z/wktWrDpxgDvL/VsXEcaDoPKUd40FM3+OIhrmX zLKs/5jCldp0gF7wUKKQ2/MYNECwX9UwJ8Ys2o1ofC/s0hW3nz0qiRSEzBcMShBN I+Vb81UbdEqCmjPceAJp9FTaDTaS8bIf9w1+aTLTXBY8OCYDJgQZIopO5upuB/TZ kSTBfh/SpcYGvOn577keyYt2wk0sKGhcfmk2JUIKGZJn+n3yXcKbrSvDlPlVAUHq 9exZfn1pAF2/AztW+0btoIg6Dn1X+hsy+OUJjmFBGZ9ctaE+KkOQj4avzWQYWMks p6IpfA6oFohIGa496JDwMVnBL/H+srM= -----END CERTIFICATE-----Generated at Sat Dec 20 13:45:19 2025 by rpki-client