This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa File: 1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa (raw, json) Hash identifier: EVaGa0LGyr0n4JirOKdiRnYJIlXQrQ1pcwdOZxFOZxA= Subject key identifier: 24:2C:46:0D:5B:19:88:46:7C:4D:9D:F2:AA:09:5A:45:C0:25:F3:D8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE3F074850F0154968FA14AC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa Signing time: Mon 17 Nov 2025 14:00:39 +0000 ROA not before: Mon 17 Nov 2025 14:00:39 +0000 ROA not after: Sun 15 Feb 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e3:f0:74:85:0f:01:54:96:8f:a1:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 17 14:00:39 2025 GMT Not After : Feb 15 14:00:39 2026 GMT Subject: CN=a5febc30-5663-4fbe-8b49-f865562b6d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:3f:9d:16:21:f2:0c:96:9c:13:db:98:b1: 6b:c3:2e:e6:33:17:23:d2:3f:02:8e:00:60:a1:bf: e9:55:45:6c:99:67:49:3c:68:1d:4b:e3:2d:10:df: 50:ca:30:bf:2a:04:f3:c0:7e:fc:a7:30:51:a9:c4: 03:22:c2:2e:8d:89:bd:ff:d5:33:2b:43:38:73:88: c6:b5:86:c3:28:9f:90:c1:d5:0b:60:fe:b9:3d:7e: d2:14:b7:b7:95:b3:e1:d5:20:fd:57:e6:53:24:e5: 05:a2:8c:ad:10:b4:56:97:e3:23:b1:24:5e:2f:12: cd:5d:54:07:fb:7c:97:8e:06:1f:59:85:bc:87:72: 4a:59:ce:26:2c:46:10:08:ff:c5:2d:99:1d:b6:56: 5d:37:db:58:2b:be:6a:d9:2e:60:0e:41:e6:f5:e5: 2c:66:95:6c:25:d6:41:e5:16:2a:92:18:c3:61:b1: c5:7f:2c:be:d7:8d:e6:c6:be:4c:2a:b9:57:97:0a: 1b:ae:d9:95:8f:82:0c:dc:64:89:1b:c6:14:cb:68: d1:ee:99:4d:80:59:14:e4:7e:d1:b6:66:3f:9b:41: 72:de:a2:57:fb:8e:de:09:5d:cd:46:b4:6d:44:bb: df:7f:23:cd:dd:83:1e:a7:07:5b:a1:8d:27:18:cf: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2C:46:0D:5B:19:88:46:7C:4D:9D:F2:AA:09:5A:45:C0:25:F3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1ce6e781-5c0d-36ba-814c-679f5a41ae06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8a:2e:92:1a:1a:11:8e:73:f3:e7:ae:70:8b:91:af:be:91: db:fe:dd:d5:b1:24:af:f3:78:e7:43:f2:b4:6f:07:e3:79:7c: af:87:aa:69:d3:42:b7:9d:44:82:01:1b:5e:3f:95:73:8b:b9: 24:0c:d1:39:fc:92:d3:53:b1:68:b1:61:9a:cc:8f:20:96:6f: 62:56:e4:65:fa:ae:ed:ba:6c:ca:38:05:25:ca:90:bd:50:6d: 5d:84:b6:78:9d:a2:23:b5:47:9a:01:e5:bb:73:f8:67:1d:2d: f7:d7:a7:4f:33:4e:6c:ff:86:d3:0c:ef:7e:72:4e:7d:e2:84: 7e:53:50:eb:cd:71:78:54:58:ff:80:0b:9b:5d:f5:8c:e1:aa: 8d:ef:22:4f:16:8e:9a:ec:95:c7:63:72:19:c8:22:cd:08:a0: 99:2f:fe:c6:2b:87:5f:dd:7a:80:1f:74:f3:96:da:ff:4d:65: 37:8b:c2:f1:6a:58:f3:8e:f3:47:18:fd:5b:34:07:11:f3:61: ae:f9:65:bb:09:73:d1:71:3a:69:16:26:80:4d:5d:85:9b:ce: 20:a5:c7:6f:28:10:4c:3f:8e:6b:4b:2c:90:ad:5c:5f:1e:9d: fb:f2:48:d2:fb:ab:58:6f:4c:74:72:1f:0d:a8:6f:b8:ce:59: 7b:2f:75:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvj8HSFDwFUlo+hSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExNzE0MDAzOVoXDTI2MDIxNTE0MDAzOVowLzEtMCsGA1UEAxMk YTVmZWJjMzAtNTY2My00ZmJlLThiNDktZjg2NTU2MmI2ZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneQ/nRYh8gyWnBPbmLFrwy7mMxcj0j8CjgBg ob/pVUVsmWdJPGgdS+MtEN9QyjC/KgTzwH78pzBRqcQDIsIujYm9/9UzK0M4c4jG tYbDKJ+QwdULYP65PX7SFLe3lbPh1SD9V+ZTJOUFooytELRWl+MjsSReLxLNXVQH +3yXjgYfWYW8h3JKWc4mLEYQCP/FLZkdtlZdN9tYK75q2S5gDkHm9eUsZpVsJdZB 5RYqkhjDYbHFfyy+143mxr5MKrlXlwobrtmVj4IM3GSJG8YUy2jR7plNgFkU5H7R tmY/m0Fy3qJX+47eCV3NRrRtRLvffyPN3YMepwdboY0nGM/vLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQsRg1bGYhGfE2d8qoJWkXAJfPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWNlNmU3ODEtNWMwZC0z NmJhLTgxNGMtNjc5ZjVhNDFhZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaKLpIaGhGOc/PnrnCLka++kdv+3dWxJK/zeOdD8rRvB+N5fK+HqmnT QredRIIBG14/lXOLuSQM0Tn8ktNTsWixYZrMjyCWb2JW5GX6ru26bMo4BSXKkL1Q bV2EtnidoiO1R5oB5btz+GcdLffXp08zTmz/htMM735yTn3ihH5TUOvNcXhUWP+A C5td9Yzhqo3vIk8WjprslcdjchnIIs0IoJkv/sYrh1/deoAfdPOW2v9NZTeLwvFq WPOO80cY/Vs0BxHzYa75ZbsJc9FxOmkWJoBNXYWbziClx28oEEw/jmtLLJCtXF8e nfvySNL7q1hvTHRyHw2ob7jOWXsvdcE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:11 2025 by rpki-client