This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa File: 2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa (raw, json) Hash identifier: abJ8o9Fxx/rkpEsU/dhPPGdfEEgWbQOJtDywM6/vlqE= Subject key identifier: 9D:FC:D2:43:71:35:E0:CA:AD:C2:64:8D:2B:9F:5D:15:8E:1F:DE:26 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BF615EDEB123B2FF512632800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 8069 IP address blocks: 20.153.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:ed:eb:12:3b:2f:f5:12:63:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=32951a7c-9eb1-4284-bfe9-7cbe4961afa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:17:ba:51:3b:27:23:b4:04:20:7e:ad:bf: 5f:7e:05:ae:80:d9:72:28:99:52:80:88:96:9c:82: 53:25:81:1d:2f:eb:2c:25:dc:10:82:4b:0e:e4:8a: df:91:3c:73:91:14:22:34:87:9f:ec:a3:af:a0:d4: 9b:c7:9b:7a:b8:da:02:09:6c:71:db:06:e6:b0:2d: 1c:38:f1:13:fa:8d:48:9e:7c:c8:e0:1f:a1:97:93: 04:fe:8e:0a:3f:f0:ba:c1:e8:0f:2d:5b:26:24:89: 19:df:62:1a:89:7a:58:f1:69:0f:d6:d0:0b:b8:0c: e8:7c:2c:4c:17:ba:bc:79:39:ea:05:86:22:bf:ee: 07:e7:1a:a4:83:a4:8c:9b:13:f6:9b:e9:ad:aa:28: 30:00:7f:ae:17:b9:89:86:7b:75:5c:53:33:e7:67: a6:f9:aa:6f:70:8f:c7:ef:4a:cf:fa:f7:42:b3:96: dd:55:bf:ac:51:0b:40:eb:ff:fc:9e:b1:fa:1a:11: 09:27:16:52:8e:ac:b7:78:6e:f3:d3:49:97:4a:ce: e0:6b:9c:93:cc:77:c1:29:11:fc:a9:c7:93:0b:85: da:73:85:2e:74:03:94:5d:fa:6f:20:63:39:8b:58: b8:c4:39:9e:05:7a:98:60:a2:63:7f:57:a2:e4:74: bf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FC:D2:43:71:35:E0:CA:AD:C2:64:8D:2B:9F:5D:15:8E:1F:DE:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2d6c3da3-b8d2-3ca8-ad42-671a0b26b4e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:8b:16:dc:bb:be:46:17:1e:e0:55:11:3d:03:0c:91:ab:5a: cb:30:ba:05:a8:41:5d:fe:7c:b6:f9:00:14:1e:c5:dc:79:4f: 65:aa:37:3e:ac:81:40:75:4f:de:20:4a:0f:78:3e:37:05:33: ac:b2:f8:a9:c7:ba:30:42:76:91:8b:9b:bb:87:c9:3a:7e:3e: ab:0a:d9:ab:53:7e:a8:e9:60:60:da:bd:63:02:5d:97:7c:d5: 09:4c:21:0e:6d:7b:5c:73:2a:62:ab:38:b7:73:38:6c:b8:cd: 77:26:77:1a:f7:21:fd:01:ab:4c:93:6e:07:18:77:7e:c4:72: ae:5d:57:de:20:df:99:47:0a:dd:db:43:f7:fa:db:ac:3d:03: 33:02:fa:60:33:06:67:00:d8:d8:dd:26:e7:cb:61:7d:18:07: 7c:b3:ab:f1:9a:83:85:a8:6c:be:19:b0:41:96:b3:10:ed:6c: eb:6f:4f:d0:b3:f6:09:73:e3:e4:50:f1:a2:26:78:ec:20:10: b7:e5:04:18:5b:a0:74:72:31:ed:5e:75:e7:02:a1:27:c1:58: 39:af:d2:60:06:7e:04:fb:e3:34:6c:99:44:02:a8:ad:a6:7b: 65:3a:ae:6e:8b:fa:50:c2:c8:b9:a5:1d:71:1d:79:18:0a:3e: 5d:70:eb:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2Fe3rEjsv9RJjKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk MzI5NTFhN2MtOWViMS00Mjg0LWJmZTktN2NiZTQ5NjFhZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPMXulE7JyO0BCB+rb9ffgWugNlyKJlSgIiW nIJTJYEdL+ssJdwQgksO5IrfkTxzkRQiNIef7KOvoNSbx5t6uNoCCWxx2wbmsC0c OPET+o1InnzI4B+hl5ME/o4KP/C6wegPLVsmJIkZ32IaiXpY8WkP1tALuAzofCxM F7q8eTnqBYYiv+4H5xqkg6SMmxP2m+mtqigwAH+uF7mJhnt1XFMz52em+apvcI/H 70rP+vdCs5bdVb+sUQtA6//8nrH6GhEJJxZSjqy3eG7z00mXSs7ga5yTzHfBKRH8 qceTC4Xac4UudAOUXfpvIGM5i1i4xDmeBXqYYKJjf1ei5HS/yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ380kNxNeDKrcJkjSufXRWOH94mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMmQ2YzNkYTMtYjhkMi0z Y2E4LWFkNDItNjcxYTBiMjZiNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSLFty7vkYXHuBVET0DDJGrWsswugWoQV3+fLb5ABQexdx5T2WqNz6s gUB1T94gSg94PjcFM6yy+KnHujBCdpGLm7uHyTp+PqsK2atTfqjpYGDavWMCXZd8 1QlMIQ5te1xzKmKrOLdzOGy4zXcmdxr3If0Bq0yTbgcYd37Ecq5dV94g35lHCt3b Q/f626w9AzMC+mAzBmcA2NjdJufLYX0YB3yzq/Gag4WobL4ZsEGWsxDtbOtvT9Cz 9glz4+RQ8aImeOwgELflBBhboHRyMe1edecCoSfBWDmv0mAGfgT74zRsmUQCqK2m e2U6rm6L+lDCyLmlHXEdeRgKPl1w6yk= -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:06 2025 by rpki-client