This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa File: 0944b58f-2c51-3787-a810-732d8f208d66.roa (raw, json) Hash identifier: dTMGv3g9Ldlk5bUir3nL7Q5dVDflH+kKoaEk5f0B328= Subject key identifier: 68:CC:8B:2F:6C:63:F4:06:33:80:E3:FB:0B:A9:41:F9:AB:7C:10:7F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BFD10C7BD8FBBFA46706A5580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:c7:bd:8f:bb:fa:46:70:6a:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=e4c72c5b-3b99-47cb-9e7c-27074d5431c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:67:d4:6c:21:d9:9d:e7:db:38:f1:63:bf:30: d4:05:fc:81:82:f7:7f:01:ea:d1:28:a3:0c:41:6c: 83:8d:6c:49:c5:92:73:25:62:da:fc:fd:04:b2:dd: 5c:bd:6d:96:cc:02:fe:91:da:2e:76:31:0c:a5:21: a0:b8:fd:f4:39:90:84:1a:3e:c4:f8:6b:d0:14:1f: 0b:18:eb:86:b0:58:ca:d6:94:f8:46:75:73:b8:e7: a9:fa:4b:2b:98:19:b9:d1:e1:05:97:bb:3f:ba:37: 8a:1b:44:69:98:ab:b8:9c:16:de:b2:3c:28:95:1f: 47:3b:bf:86:fe:03:f6:cb:40:a4:5f:01:5f:da:ea: d9:01:e5:89:bc:48:bd:9e:f9:c6:a1:8a:0d:e6:d1: 93:7c:c5:e1:3f:6f:2d:d8:c6:73:b4:be:36:c7:6b: b7:7f:2d:ff:1e:9c:4a:98:77:96:3e:75:78:90:67: fa:4d:6d:14:a3:2e:88:c5:36:02:b5:2f:59:03:f2: 3f:f9:18:56:52:de:c6:ae:f4:a6:5d:23:b9:c8:e6: 0f:28:4b:43:fc:bf:d0:eb:63:a4:e6:b5:7f:3f:80: 72:bc:b3:aa:25:fe:ee:1a:7e:5e:75:ac:34:eb:91: d3:18:f3:14:9a:82:f8:ba:ea:7b:31:3c:6c:d3:75: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CC:8B:2F:6C:63:F4:06:33:80:E3:FB:0B:A9:41:F9:AB:7C:10:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0944b58f-2c51-3787-a810-732d8f208d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:05:8e:db:f4:ec:26:b1:91:0d:c9:58:b6:3f:a9:80:b8:22: fe:20:ae:61:a6:ad:a4:aa:47:57:03:bc:f2:3e:ff:f2:95:ac: 1f:78:c1:22:02:29:fc:3a:34:9e:4b:bb:0c:02:88:14:5a:de: a3:2c:13:00:a4:51:0b:59:c9:57:20:13:c6:30:7b:8c:b6:97: 2d:07:1b:7b:5f:c9:ec:a0:a5:dc:6d:fd:36:4d:cd:21:bf:b7: a3:39:0e:ca:16:aa:47:a2:f2:0f:ad:d2:de:4f:00:e5:19:b1: 9e:20:e9:ce:63:d1:31:58:8a:66:b4:68:63:c3:e9:c6:60:39: 7c:0b:30:50:c4:d5:cc:c9:05:e9:1d:b7:cd:33:20:e6:33:26: 04:f3:02:22:3e:80:29:0e:85:ec:a0:62:5c:81:0e:22:35:c2: f3:d1:5c:1f:e8:e0:f5:64:c0:53:3d:70:e0:8f:8a:ab:13:dd: ef:12:da:2e:a9:72:d0:7f:d2:2e:8b:e2:b8:f0:01:56:b9:96: a4:20:3e:b4:d8:50:b9:1d:a3:a4:33:71:85:80:8e:90:2e:14: 3e:ed:06:77:f8:8d:0c:34:57:a9:ae:f9:42:d2:02:b0:1d:fa: 95:b2:c0:c7:6a:ab:09:ad:05:08:25:26:03:2d:24:f8:1d:69: 71:e2:1d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EMe9j7v6RnBqVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk ZTRjNzJjNWItM2I5OS00N2NiLTllN2MtMjcwNzRkNTQzMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52fUbCHZnefbOPFjvzDUBfyBgvd/AerRKKMM QWyDjWxJxZJzJWLa/P0Est1cvW2WzAL+kdoudjEMpSGguP30OZCEGj7E+GvQFB8L GOuGsFjK1pT4RnVzuOep+ksrmBm50eEFl7s/ujeKG0RpmKu4nBbesjwolR9HO7+G /gP2y0CkXwFf2urZAeWJvEi9nvnGoYoN5tGTfMXhP28t2MZztL42x2u3fy3/HpxK mHeWPnV4kGf6TW0Uoy6IxTYCtS9ZA/I/+RhWUt7GrvSmXSO5yOYPKEtD/L/Q62Ok 5rV/P4ByvLOqJf7uGn5edaw065HTGPMUmoL4uup7MTxs03UuDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjMiy9sY/QGM4Dj+wupQfmrfBB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDk0NGI1OGYtMmM1MS0z Nzg3LWE4MTAtNzMyZDhmMjA4ZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoFjtv07CaxkQ3JWLY/qYC4Iv4grmGmraSqR1cDvPI+//KVrB94wSIC Kfw6NJ5LuwwCiBRa3qMsEwCkUQtZyVcgE8Ywe4y2ly0HG3tfyeygpdxt/TZNzSG/ t6M5DsoWqkei8g+t0t5PAOUZsZ4g6c5j0TFYima0aGPD6cZgOXwLMFDE1czJBekd t80zIOYzJgTzAiI+gCkOheygYlyBDiI1wvPRXB/o4PVkwFM9cOCPiqsT3e8S2i6p ctB/0i6L4rjwAVa5lqQgPrTYULkdo6QzcYWAjpAuFD7tBnf4jQw0V6mu+ULSArAd +pWywMdqqwmtBQglJgMtJPgdaXHiHWs= -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:15 2025 by rpki-client