This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17d6099c-dbc5-32ae-a245-ba59f86e44e0.roa File: 17d6099c-dbc5-32ae-a245-ba59f86e44e0.roa (raw, json) Hash identifier: LQroDMRyC+IPT+m7DvEsTDmLZDSoUg1419kqdvXiBa8= Subject key identifier: 3A:87:E2:D0:61:58:D3:EA:7D:F4:8B:4B:F6:69:B5:73:BC:48:ED:65 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C338146ED19CB455E73DF78C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17d6099c-dbc5-32ae-a245-ba59f86e44e0.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:46:ed:19:cb:45:5e:73:df:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=d7f7a484-3ec3-48de-9788-1fd917cfbf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:20:7b:b4:55:e3:c1:db:cf:3d:ad:30:87:48: 3f:8f:5e:bd:89:63:e5:e2:41:96:c8:e2:d7:06:67: 2a:3d:69:09:9e:a5:54:12:38:b4:79:f0:31:af:98: 40:13:a0:a3:17:36:18:de:97:1f:b7:aa:29:7f:3b: 98:65:fa:8e:3c:e3:8f:04:61:58:6d:ac:36:84:ce: 2b:23:c0:92:26:6a:26:00:1b:77:c4:0d:22:37:7c: 8a:11:e9:f8:a4:cf:b0:dd:57:b1:85:6f:c2:30:65: de:fb:5c:52:a1:f1:e7:1b:e0:db:23:e9:be:a4:5a: 71:c9:bd:ff:9d:0a:ee:11:f2:7b:47:95:47:c6:8e: 18:64:e0:be:f6:cc:99:44:df:f3:db:0f:1c:4b:d1: 57:e9:86:cc:94:41:39:37:95:91:35:8b:5d:b1:4a: 84:c9:68:6a:88:c5:c4:b0:f8:a6:0f:47:f2:b3:fd: 87:99:f7:b5:57:b6:e0:6a:a6:e9:a4:18:81:57:4b: 91:83:87:86:b6:af:af:59:fc:62:fb:ac:05:ae:08: 25:e9:2f:b0:c7:1a:3e:7e:70:da:3b:08:72:86:7a: 5a:95:4e:35:28:5f:f8:6f:62:b5:a7:69:2d:7c:bd: 81:b0:a3:00:40:15:2d:e0:eb:f8:f7:06:ba:44:1e: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:87:E2:D0:61:58:D3:EA:7D:F4:8B:4B:F6:69:B5:73:BC:48:ED:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/17d6099c-dbc5-32ae-a245-ba59f86e44e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:da:24:16:76:1e:d0:f0:d6:ce:a0:5b:ba:27:01:5d:4d:18: 0a:54:9c:f9:80:5d:15:10:d6:d0:fc:17:76:21:97:10:1c:12: 9e:b3:a4:30:53:27:66:bd:01:25:15:d6:74:7b:96:58:ec:ba: 32:f1:f1:de:0e:50:cf:5c:9e:1e:c3:b9:78:ce:e0:d7:a3:6e: 3c:fb:ab:f7:e1:ee:2e:97:38:4b:21:ba:22:55:c2:d5:8a:da: f1:70:57:17:83:f4:3a:2e:cd:94:9f:3d:90:d1:d1:df:b1:18: 34:d6:c0:d6:60:3b:e1:c0:98:09:f8:18:32:de:b2:22:bb:13: b3:df:62:5a:5f:46:28:74:94:9f:ed:a7:b6:18:20:13:47:cf: 71:24:df:cd:9b:a7:c3:44:15:0b:cb:ca:a8:e8:4c:da:57:5b: de:d3:42:bc:64:29:4b:bd:e0:f7:ad:34:94:ab:d8:26:e6:15: bf:2e:8c:15:b4:a0:84:97:51:59:f2:ae:5a:c0:a0:ca:f7:e0: 14:3a:9c:e0:90:4d:70:02:c2:bd:42:2a:72:1f:e8:39:bb:4b: ce:8d:f7:61:05:8e:78:8e:d5:87:d0:04:07:21:6e:ea:94:95: 54:b0:ed:f1:92:c4:cc:42:41:57:b1:fd:79:6e:e0:b5:59:f7: 56:79:88:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgUbtGctFXnPfeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk ZDdmN2E0ODQtM2VjMy00OGRlLTk3ODgtMWZkOTE3Y2ZiZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CB7tFXjwdvPPa0wh0g/j169iWPl4kGWyOLX BmcqPWkJnqVUEji0efAxr5hAE6CjFzYY3pcft6opfzuYZfqOPOOPBGFYbaw2hM4r I8CSJmomABt3xA0iN3yKEen4pM+w3VexhW/CMGXe+1xSofHnG+DbI+m+pFpxyb3/ nQruEfJ7R5VHxo4YZOC+9syZRN/z2w8cS9FX6YbMlEE5N5WRNYtdsUqEyWhqiMXE sPimD0fys/2Hmfe1V7bgaqbppBiBV0uRg4eGtq+vWfxi+6wFrggl6S+wxxo+fnDa OwhyhnpalU41KF/4b2K1p2ktfL2BsKMAQBUt4Ov49wa6RB5TtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqH4tBhWNPqffSLS/ZptXO8SO1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMTdkNjA5OWMtZGJjNS0z MmFlLWEyNDUtYmE1OWY4NmU0NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLaJBZ2HtDw1s6gW7onAV1NGApUnPmAXRUQ1tD8F3YhlxAcEp6zpDBT J2a9ASUV1nR7lljsujLx8d4OUM9cnh7DuXjO4Nejbjz7q/fh7i6XOEshuiJVwtWK 2vFwVxeD9DouzZSfPZDR0d+xGDTWwNZgO+HAmAn4GDLesiK7E7PfYlpfRih0lJ/t p7YYIBNHz3Ek382bp8NEFQvLyqjoTNpXW97TQrxkKUu94PetNJSr2CbmFb8ujBW0 oISXUVnyrlrAoMr34BQ6nOCQTXACwr1CKnIf6Dm7S86N92EFjniO1YfQBAchbuqU lVSw7fGSxMxCQVex/Xlu4LVZ91Z5iH8= -----END CERTIFICATE-----Generated at Wed Jan 21 00:57:57 2026 by rpki-client