This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa File: 16646b1c-7273-3e1a-9ca3-efedf58284e9.roa (raw, json) Hash identifier: b/4rE0PiWRz56vLE1LrtFwdGlyLZiQqh7gbhf1SGm7c= Subject key identifier: 02:20:34:9B:4D:99:19:E1:45:4F:2E:D6:D9:16:2D:9B:DB:2D:A8:B9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD7605C1B837C32682823CF00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:5c:1b:83:7c:32:68:28:23:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=d9d68f95-ccda-4a2d-a305-62fbae629e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:1c:18:10:02:8f:6b:e8:f4:95:b5:c3:8c:40: d9:30:14:ab:a0:ef:75:57:ca:3c:ab:a0:9a:87:f8: c2:26:3e:6d:c5:9b:3d:e0:33:c8:53:72:3b:3c:11: ed:6c:d4:f1:38:e2:cb:59:d4:ae:c8:35:3d:1d:d4: 08:86:4d:6b:98:9f:e5:93:71:e5:32:5b:49:09:5a: f4:7d:66:9a:e2:4e:c8:5c:38:e7:ff:a2:dd:6a:57: 3c:1f:2f:e4:a4:df:1a:d6:03:6e:9b:4f:1b:cd:81: c2:23:ec:51:82:fc:59:40:bc:dd:19:98:d9:13:9b: a1:15:a1:e7:f9:e8:b4:71:a0:3b:1a:b8:13:a5:29: 7e:95:7c:f5:6f:a7:88:09:01:af:63:f7:26:82:c7: 2e:a3:68:0f:45:1b:58:64:08:75:3a:f3:e6:83:ab: bb:66:0c:9c:17:04:f1:6c:f9:5d:d2:09:72:8a:77: 93:72:45:ed:57:e5:f5:b2:e1:aa:de:f7:26:4f:58: e2:80:6f:9f:fb:e6:2b:92:65:cf:27:3f:93:7f:4b: 9f:c3:04:df:08:ed:13:a9:64:43:87:5a:53:bf:7d: f0:fd:87:88:15:d6:98:46:78:cf:e5:18:31:d5:ee: 06:ae:f4:41:a5:e5:3a:c8:97:f6:b6:a3:62:b4:0d: f9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:34:9B:4D:99:19:E1:45:4F:2E:D6:D9:16:2D:9B:DB:2D:A8:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/16646b1c-7273-3e1a-9ca3-efedf58284e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fd:84:55:f9:f1:3a:c5:dc:79:10:77:56:ed:98:cd:47:e3: 65:d6:69:27:21:f2:8b:4a:3e:4b:d7:6a:d1:b8:b9:a5:66:e4: 29:dc:b9:25:66:8a:fb:de:85:1a:ab:66:7a:f9:fe:4d:95:51: 8c:05:89:38:b3:32:c4:c2:5e:63:9f:e1:61:18:cd:57:df:27: 1a:14:e3:db:df:58:16:b8:60:9b:9f:51:5f:47:95:94:87:e6: 82:09:39:a4:76:28:72:03:d4:b9:63:e3:30:87:fc:d0:8e:02: af:b7:2b:66:c2:19:fd:cf:d9:a3:bb:40:f5:a3:75:3b:97:ae: 1d:cd:7e:87:4a:c8:2c:19:be:5d:98:23:a6:f1:93:4c:17:42: 50:99:2d:13:18:6d:d5:dd:97:68:0f:99:ef:c0:c1:f2:e4:1c: bb:be:15:cd:c9:fb:52:af:22:20:0d:37:f5:96:82:df:79:73: 7e:cc:0d:b2:83:ad:af:94:60:70:d1:39:fb:97:08:d3:68:d5: 8d:aa:7e:f9:43:f0:20:cd:41:98:9a:60:5c:e3:55:90:cb:6a: 14:f0:a0:bd:8f:f7:54:65:31:5a:ba:e8:70:8d:7d:14:85:59: ae:d2:67:55:81:e1:fe:37:67:55:79:09:99:fd:f6:73:58:35: 7e:5c:74:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvXYFwbg3wyaCgjzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDlkNjhmOTUtY2NkYS00YTJkLWEzMDUtNjJmYmFlNjI5ZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BwYEAKPa+j0lbXDjEDZMBSroO91V8o8q6Ca h/jCJj5txZs94DPIU3I7PBHtbNTxOOLLWdSuyDU9HdQIhk1rmJ/lk3HlMltJCVr0 fWaa4k7IXDjn/6Ldalc8Hy/kpN8a1gNum08bzYHCI+xRgvxZQLzdGZjZE5uhFaHn +ei0caA7GrgTpSl+lXz1b6eICQGvY/cmgscuo2gPRRtYZAh1OvPmg6u7ZgycFwTx bPld0glyineTckXtV+X1suGq3vcmT1jigG+f++YrkmXPJz+Tf0ufwwTfCO0TqWRD h1pTv33w/YeIFdaYRnjP5Rgx1e4GrvRBpeU6yJf2tqNitA35HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIgNJtNmRnhRU8u1tkWLZvbLai5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTY2NDZiMWMtNzI3My0z ZTFhLTljYTMtZWZlZGY1ODI4NGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL9hFX58TrF3HkQd1btmM1H42XWaSch8otKPkvXatG4uaVm5CncuSVm ivvehRqrZnr5/k2VUYwFiTizMsTCXmOf4WEYzVffJxoU49vfWBa4YJufUV9HlZSH 5oIJOaR2KHID1Llj4zCH/NCOAq+3K2bCGf3P2aO7QPWjdTuXrh3NfodKyCwZvl2Y I6bxk0wXQlCZLRMYbdXdl2gPme/AwfLkHLu+Fc3J+1KvIiANN/WWgt95c37MDbKD ra+UYHDROfuXCNNo1Y2qfvlD8CDNQZiaYFzjVZDLahTwoL2P91RlMVq66HCNfRSF Wa7SZ1WB4f43Z1V5CZn99nNYNX5cdLo= -----END CERTIFICATE-----Generated at Sat Dec 6 17:04:06 2025 by rpki-client