This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15aab450-cc46-39b5-be1c-5166f6befaba.roa File: 15aab450-cc46-39b5-be1c-5166f6befaba.roa (raw, json) Hash identifier: dkFOc+maU8KaasEBCLxdr3uXOFisUDMlY6nrTk1fc/4= Subject key identifier: DB:55:C7:DF:56:16:64:C4:85:54:86:1D:A9:0B:50:3E:94:F7:B9:DE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BF615DA37E884BAA97F3ED100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15aab450-cc46-39b5-be1c-5166f6befaba.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 8069 IP address blocks: 20.153.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:da:37:e8:84:ba:a9:7f:3e:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=23339a9e-7602-44a7-a4ee-5987e81331ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:fc:df:08:8c:0b:e8:e4:5a:97:63:35:96: b8:32:a4:9b:54:54:27:04:b9:2d:15:55:26:dc:50: 0e:87:53:ef:c5:f7:7c:f8:f4:6d:8e:64:14:2a:3b: 7e:dd:bb:d4:81:e3:ed:67:78:99:4a:29:09:ee:e3: 31:f6:ea:84:3d:81:78:5a:d6:b9:4c:81:f6:65:4e: 74:8d:92:81:cb:6c:ee:59:55:5e:35:11:c3:0b:9a: 82:49:bf:19:19:0d:f6:94:de:f2:f5:cd:56:ae:7b: f2:4c:b8:fb:44:cf:fe:af:fb:df:75:48:07:61:37: ed:d5:be:c7:ce:1c:30:73:2e:41:ef:5c:25:85:71: 0b:1b:d9:29:5c:91:72:22:95:37:74:6a:44:af:97: ee:5c:66:6a:5a:27:15:60:4e:7e:23:ef:1e:35:47: 2e:a8:6c:63:21:eb:b7:09:df:e0:6b:bb:cd:88:6a: 38:4f:fb:55:59:37:0b:4c:0a:e8:63:6c:6a:7c:dd: 2c:21:65:d6:9c:dd:0d:07:a1:b3:cd:54:9c:b4:66: 10:2f:32:88:25:ab:90:02:b3:f0:9a:d5:0e:c4:96: 1c:b2:14:c6:26:55:e2:77:53:52:4e:73:06:2a:89: f4:65:6c:ad:f2:a2:51:ae:5f:e1:a5:13:94:bd:28: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:C7:DF:56:16:64:C4:85:54:86:1D:A9:0B:50:3E:94:F7:B9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/15aab450-cc46-39b5-be1c-5166f6befaba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:af:51:20:b5:d9:ad:55:2e:bb:80:c7:84:a0:1c:1d:cd:a2: b4:2e:2c:9e:ce:e1:0c:1c:ea:73:f2:78:21:01:da:19:58:b3: 75:f6:f7:c3:b3:15:dc:41:e9:59:7c:c8:23:4e:23:2c:fc:9e: 71:35:a7:53:85:32:88:2c:9e:ca:73:18:5a:29:e3:20:2f:a5: 83:83:5e:4b:59:71:a1:c6:0a:9d:e1:4b:c9:3d:65:0f:34:eb: d8:cd:35:0f:9f:73:4a:b0:4d:1f:d0:be:32:5c:54:d5:f1:74: 66:ef:65:a9:fa:be:39:23:42:8e:b8:72:e0:cc:84:68:30:8b: e1:a3:18:f9:25:64:d6:ca:d2:4d:09:a2:df:33:de:15:32:db: 9d:8b:18:a1:2e:32:bf:b0:27:09:58:6a:1b:89:b1:34:13:65: cf:81:b9:4e:23:7c:e2:83:17:9a:c4:79:dc:b3:77:03:cb:98: 65:bd:51:fc:b7:33:13:a2:67:3e:52:91:d8:65:d3:6d:69:30: 49:84:dd:01:ca:b5:9e:cd:bd:6b:27:f6:d5:b9:16:43:62:35: bb:21:a9:4b:e1:cc:aa:eb:67:cf:a6:1f:98:b6:9c:19:0a:7f: 51:92:ff:e8:21:7d:66:36:23:58:20:33:3c:67:c2:80:81:a9: e7:d3:fd:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2Fdo36IS6qX8+0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk MjMzMzlhOWUtNzYwMi00NGE3LWE0ZWUtNTk4N2U4MTMzMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtb83wiMC+jkWpdjNZa4MqSbVFQnBLktFVUm 3FAOh1Pvxfd8+PRtjmQUKjt+3bvUgePtZ3iZSikJ7uMx9uqEPYF4Wta5TIH2ZU50 jZKBy2zuWVVeNRHDC5qCSb8ZGQ32lN7y9c1WrnvyTLj7RM/+r/vfdUgHYTft1b7H zhwwcy5B71wlhXELG9kpXJFyIpU3dGpEr5fuXGZqWicVYE5+I+8eNUcuqGxjIeu3 Cd/ga7vNiGo4T/tVWTcLTAroY2xqfN0sIWXWnN0NB6GzzVSctGYQLzKIJauQArPw mtUOxJYcshTGJlXid1NSTnMGKon0ZWyt8qJRrl/hpROUvSidqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtVx99WFmTEhVSGHakLUD6U97neMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTVhYWI0NTAtY2M0Ni0z OWI1LWJlMWMtNTE2NmY2YmVmYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyvUSC12a1VLruAx4SgHB3NorQuLJ7O4Qwc6nPyeCEB2hlYs3X298Oz FdxB6Vl8yCNOIyz8nnE1p1OFMogsnspzGFop4yAvpYODXktZcaHGCp3hS8k9ZQ80 69jNNQ+fc0qwTR/QvjJcVNXxdGbvZan6vjkjQo64cuDMhGgwi+GjGPklZNbK0k0J ot8z3hUy252LGKEuMr+wJwlYahuJsTQTZc+BuU4jfOKDF5rEedyzdwPLmGW9Ufy3 MxOiZz5Skdhl021pMEmE3QHKtZ7NvWsn9tW5FkNiNbshqUvhzKrrZ8+mH5i2nBkK f1GS/+ghfWY2I1ggMzxnwoCBqefT/TE= -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:30 2025 by rpki-client