This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa File: ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa (raw, json) Hash identifier: lyYZ6k3JSvoYyslC5eH2jusGY/oKwubc8nDYsaaj9qU= Subject key identifier: 19:16:BB:6B:29:6A:14:CF:26:EE:2B:A1:86:F1:0E:D8:51:BA:53:88 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584C040B4DB81353DC62283AFF80 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa Signing time: Sat 29 Nov 2025 02:00:31 +0000 ROA not before: Sat 29 Nov 2025 02:00:31 +0000 ROA not after: Fri 27 Feb 2026 02:00:31 +0000 asID: 63150 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:04:0b:4d:b8:13:53:dc:62:28:3a:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Nov 29 02:00:31 2025 GMT Not After : Feb 27 02:00:31 2026 GMT Subject: CN=6aada335-00b2-48f8-ae8a-6ddb27215292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:b1:3a:f8:01:c2:03:99:f7:31:37:3e:84: a3:77:58:79:18:dd:67:1b:25:00:49:61:80:1a:59: 66:61:e0:e4:4c:6d:03:21:d9:bc:dc:58:14:46:2d: fa:73:0c:30:39:d9:b9:d0:d0:3e:5b:c2:89:0c:09: 98:a7:ac:b9:71:40:0f:87:8e:4b:9d:92:19:77:ab: 1d:35:4c:d5:fb:28:b0:21:45:84:a7:45:95:e4:da: bf:71:87:1e:a6:15:16:4c:e7:69:92:7f:e4:15:14: da:7a:93:e5:15:5c:9e:7b:f6:15:e2:4d:d6:c2:11: 9d:36:27:24:e5:4c:b0:34:49:71:cf:9d:86:61:fc: 30:ff:9a:6a:b7:cc:a3:fa:c3:23:cb:97:51:f0:36: 44:0b:f9:2f:77:9d:c7:5e:60:ec:7e:d4:7c:7e:a3: ac:6c:a1:e3:22:8e:4f:99:02:05:22:31:de:1e:b8: 14:6f:6a:e1:b4:70:ed:ce:0a:80:31:9c:b8:2a:0d: c9:a5:6e:9d:6a:68:56:c0:b4:cd:aa:ea:5b:9f:e6: 3d:0d:a0:78:af:97:8b:2e:0d:75:c8:da:d8:7c:f6: bf:a5:60:fd:8a:e6:87:8f:fa:db:30:d5:34:e3:8e: 31:1c:23:60:8a:c3:dd:05:73:5c:f4:87:91:9e:ff: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:16:BB:6B:29:6A:14:CF:26:EE:2B:A1:86:F1:0E:D8:51:BA:53:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:fb:f3:e6:46:85:8a:00:88:b7:eb:70:8b:d5:28:82:88:ae: 65:ab:be:65:59:6e:ba:cb:db:ba:ca:d1:ca:f3:38:14:ab:e4: 71:d7:99:df:87:2b:e5:94:04:ab:75:43:e1:4e:8e:d0:61:f5: 18:35:0a:57:c6:ed:46:0e:7f:d4:35:bc:4f:a6:32:07:4c:5a: 72:09:23:01:94:30:a4:87:b6:58:d9:92:41:f3:e5:6f:a8:d0: 38:3b:09:55:39:56:86:f2:32:71:8d:4d:1d:54:2e:51:9d:12: 3c:2d:65:ac:bb:70:6f:fb:15:eb:24:90:5d:02:86:85:36:0f: 22:75:76:dc:1f:cc:16:45:a6:66:cc:fd:b5:1a:8a:a3:f4:15: 9e:df:74:91:3b:6d:5b:ca:16:4a:7e:d8:cc:2e:1d:b5:fa:df: eb:f6:5e:c7:6a:21:1c:09:2b:2e:60:c9:a5:12:e3:03:f3:10: 6f:d8:05:a4:78:94:36:12:6f:93:97:4f:8f:a8:08:6d:46:b0: a1:9c:68:42:51:e2:92:08:e7:42:5a:68:6d:6f:e5:de:fe:54: 3e:80:bb:38:f2:61:5d:2e:2d:d6:3b:f6:42:27:4f:56:45:f9: 05:4b:f2:4a:1a:ff:a2:4c:21:1c:79:07:37:13:80:11:eb:61: 6c:dc:60:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwEC024E1PcYig6/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MTEyOTAyMDAzMVoXDTI2MDIyNzAyMDAzMVowLzEtMCsGA1UEAxMk NmFhZGEzMzUtMDBiMi00OGY4LWFlOGEtNmRkYjI3MjE1MjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXKxOvgBwgOZ9zE3PoSjd1h5GN1nGyUASWGA GllmYeDkTG0DIdm83FgURi36cwwwOdm50NA+W8KJDAmYp6y5cUAPh45LnZIZd6sd NUzV+yiwIUWEp0WV5Nq/cYcephUWTOdpkn/kFRTaepPlFVyee/YV4k3WwhGdNick 5UywNElxz52GYfww/5pqt8yj+sMjy5dR8DZEC/kvd53HXmDsftR8fqOsbKHjIo5P mQIFIjHeHrgUb2rhtHDtzgqAMZy4Kg3JpW6damhWwLTNqupbn+Y9DaB4r5eLLg11 yNrYfPa/pWD9iuaHj/rbMNU0444xHCNgisPdBXNc9IeRnv8zpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkWu2spahTPJu4roYbxDthRulOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvY2NhZjRlMDItOWUzMC0z ZjI5LWJmMDQtNGVlMGE1ZTllMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL78+ZGhYoAiLfrcIvVKIKIrmWrvmVZbrrL27rK0crzOBSr5HHXmd+H K+WUBKt1Q+FOjtBh9Rg1ClfG7UYOf9Q1vE+mMgdMWnIJIwGUMKSHtljZkkHz5W+o 0Dg7CVU5VobyMnGNTR1ULlGdEjwtZay7cG/7FeskkF0ChoU2DyJ1dtwfzBZFpmbM /bUaiqP0FZ7fdJE7bVvKFkp+2MwuHbX63+v2XsdqIRwJKy5gyaUS4wPzEG/YBaR4 lDYSb5OXT4+oCG1GsKGcaEJR4pII50JaaG1v5d7+VD6AuzjyYV0uLdY79kInT1ZF +QVL8koa/6JMIRx5BzcTgBHrYWzcYK8= -----END CERTIFICATE-----Generated at Sat Dec 6 01:29:38 2025 by rpki-client