This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa File: 2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa (raw, json) Hash identifier: 8PkieCjTEg8FXmCjmaFdq7k757G6STrJpo51LDUoQrQ= Subject key identifier: CF:69:A4:C8:D9:CD:F5:C9:BD:46:B6:0C:5A:32:0D:A9:A1:3F:62:EF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BDB906CD745572C12140B7280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa Signing time: Fri 14 Nov 2025 14:00:37 +0000 ROA not before: Fri 14 Nov 2025 14:00:37 +0000 ROA not after: Thu 12 Feb 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:db:90:6c:d7:45:57:2c:12:14:0b:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 14 14:00:37 2025 GMT Not After : Feb 12 14:00:37 2026 GMT Subject: CN=6b81536f-e86e-4039-b117-c5886a61e0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:64:22:90:b1:44:f5:89:2d:ed:18:04:ea: c2:7f:00:7f:b9:13:e5:cb:33:c0:24:70:37:e4:af: 8f:8d:d6:49:7f:7d:d6:c2:39:c8:5f:0c:0c:e9:70: ca:ee:25:e9:dd:cb:87:3a:e5:b5:98:c3:1c:d6:df: a3:b2:3c:17:6a:15:e8:b1:68:be:a4:02:e8:65:7e: 4a:29:77:3f:ed:f6:5c:12:7f:35:f3:42:ed:d0:fb: 1b:92:56:0e:28:17:da:a7:d6:70:73:b7:66:84:c6: 29:f4:bd:6b:08:ef:bd:e6:c5:3c:8b:cd:e1:72:df: 55:9c:47:aa:d7:45:04:f9:b6:37:3a:2c:5a:81:60: 16:03:df:31:80:42:4d:30:c5:a5:d3:07:be:b2:3a: b9:d4:01:9b:d8:12:07:e7:ca:ea:89:c9:4e:8e:5a: f6:4e:d6:d1:9c:e8:f9:9b:db:d1:1f:b4:b1:23:6e: 33:94:28:7c:a0:a0:c3:7b:e1:7d:0f:7c:81:4a:e2: e8:e9:40:0e:50:90:41:f0:4d:d9:d8:c6:84:4f:52: b9:58:42:a8:44:5e:98:cf:fb:e5:67:3c:ff:1b:79: 57:f5:ae:31:ad:d1:10:d4:e0:01:cf:64:77:91:67: c8:7c:8e:ec:cd:a1:fc:93:e1:d6:f0:59:1d:6d:b0: af:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:69:A4:C8:D9:CD:F5:C9:BD:46:B6:0C:5A:32:0D:A9:A1:3F:62:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2c2aeecb-6fa1-3eb0-95f9-a54c25fd21a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d4:ac:21:91:b7:d1:d5:4b:a4:4e:0e:f0:5d:4c:b1:c6:ef: c3:69:f4:e5:d7:c2:13:86:e3:d1:6d:6e:94:51:63:98:20:c3: 5d:2b:32:48:11:9c:28:b8:a8:c0:e1:74:8f:ac:37:3c:37:df: bf:a5:a5:97:07:b0:2c:cf:8f:e9:d5:c1:16:c4:8b:ae:ad:df: 3e:26:0a:da:79:05:0d:7e:e3:a1:47:4b:1c:a1:6c:c5:63:be: 2f:e9:73:a5:2a:99:9a:25:d9:d7:bb:28:65:9b:24:7c:9f:f6: b4:f6:e6:e9:af:a4:c1:fa:61:75:89:9b:15:8d:4a:89:93:50: 92:9d:52:4f:eb:3f:c7:d9:cf:f9:82:a1:47:d5:6a:28:88:82: 65:ce:0d:5c:ec:a1:7a:af:ec:0c:2a:43:f2:b3:13:8d:0d:8f: 0b:f5:56:23:94:71:a6:ca:9d:d7:53:dc:26:19:c6:2c:c8:d7: 8e:5d:ec:0d:27:e9:72:c9:3a:29:a2:3d:31:24:52:2d:45:96: 6f:dc:84:87:55:08:74:d9:8f:37:60:17:50:0f:a6:3a:8d:72: 4f:92:92:51:7c:8a:cd:da:26:a4:ee:09:fa:ff:8a:4d:b2:cd: 5d:d2:3d:4d:29:be:1c:8a:49:f8:25:4c:a6:9b:ce:0b:e5:8c: 0c:a2:bd:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvbkGzXRVcsEhQLcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExNDE0MDAzN1oXDTI2MDIxMjE0MDAzN1owLzEtMCsGA1UEAxMk NmI4MTUzNmYtZTg2ZS00MDM5LWIxMTctYzU4ODZhNjFlMGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz9kIpCxRPWJLe0YBOrCfwB/uRPlyzPAJHA3 5K+PjdZJf33WwjnIXwwM6XDK7iXp3cuHOuW1mMMc1t+jsjwXahXosWi+pALoZX5K KXc/7fZcEn8180Lt0PsbklYOKBfap9Zwc7dmhMYp9L1rCO+95sU8i83hct9VnEeq 10UE+bY3OixagWAWA98xgEJNMMWl0we+sjq51AGb2BIH58rqiclOjlr2TtbRnOj5 m9vRH7SxI24zlCh8oKDDe+F9D3yBSuLo6UAOUJBB8E3Z2MaET1K5WEKoRF6Yz/vl Zzz/G3lX9a4xrdEQ1OABz2R3kWfIfI7szaH8k+HW8FkdbbCv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9ppMjZzfXJvUa2DFoyDamhP2LvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmMyYWVlY2ItNmZhMS0z ZWIwLTk1ZjktYTU0YzI1ZmQyMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzUrCGRt9HVS6RODvBdTLHG78Np9OXXwhOG49FtbpRRY5ggw10rMkgR nCi4qMDhdI+sNzw337+lpZcHsCzPj+nVwRbEi66t3z4mCtp5BQ1+46FHSxyhbMVj vi/pc6UqmZol2de7KGWbJHyf9rT25umvpMH6YXWJmxWNSomTUJKdUk/rP8fZz/mC oUfVaiiIgmXODVzsoXqv7AwqQ/KzE40Njwv1ViOUcabKnddT3CYZxizI145d7A0n 6XLJOimiPTEkUi1Flm/chIdVCHTZjzdgF1APpjqNck+SklF8is3aJqTuCfr/ik2y zV3SPU0pvhyKSfglTKabzgvljAyivXk= -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:06 2025 by rpki-client