This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa File: 344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa (raw, json) Hash identifier: rA+jMPYO83TmvxbwsoV3Ir9vsDrU7NjYNcAjNqYOFuo= Subject key identifier: 99:6C:BE:34:AE:7A:9C:31:28:70:6F:C8:C2:19:7B:4E:EB:1E:C2:BD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C1D2B70A6FDF9DE9B6FCE21F0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.157.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:70:a6:fd:f9:de:9b:6f:ce:21:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=6164dec9-ea80-41c3-89c3-923a0a33b150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:cc:3b:67:38:bf:7d:13:d7:2c:98:3b:d6: bf:0a:a4:ea:16:ee:18:25:d0:8f:22:72:44:34:20: c4:35:10:77:d7:90:b7:21:0b:39:1e:e1:85:8a:03: 5e:31:1e:66:aa:ca:07:a3:a1:9b:e5:ab:90:21:8c: 9a:15:65:73:8c:65:c1:d4:cd:65:c9:62:58:c8:0f: 86:bd:b4:b2:e7:61:ea:56:a7:c1:bb:37:ba:a5:cb: 09:10:e8:eb:30:f6:e1:b6:58:8e:be:3a:19:db:70: 57:6c:84:52:35:1b:2d:13:c5:aa:6d:8f:60:46:62: 67:b4:54:04:cc:78:29:c1:86:38:e4:e6:07:62:99: 78:b4:7b:32:33:19:16:2d:15:95:76:71:8f:dc:90: eb:1e:f2:1b:af:d1:6b:c0:b4:8c:a7:d3:c9:f7:9f: 16:6c:4d:cf:b3:73:8e:cd:e2:75:a8:00:6e:22:c6: 9a:3a:28:40:ac:8c:1f:07:24:cf:b5:5c:2f:46:af: 2f:71:29:bc:c8:85:cb:b5:37:51:c5:6f:5d:79:7a: 7e:de:c6:97:a0:60:f7:79:67:99:d0:b8:aa:54:6e: 50:f0:ed:b0:ea:a1:c9:08:9e:1e:bc:4a:fc:1f:0a: c9:0a:be:7a:9d:3e:39:a4:da:e9:9d:a9:93:15:a3: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6C:BE:34:AE:7A:9C:31:28:70:6F:C8:C2:19:7B:4E:EB:1E:C2:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/344280ba-8bb3-31cd-ada9-4d5ddbe6cd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:bf:43:f2:0b:41:e1:98:6e:61:a5:13:fa:e2:be:66:fe:6a: 43:bc:89:21:7d:fe:53:d7:0d:41:f3:d2:44:80:fb:80:f9:62: 20:69:8b:4f:05:c6:59:23:14:3b:f7:fe:3f:8a:30:7c:c2:c2: 9e:45:48:af:fd:32:aa:4d:7a:03:48:8e:10:50:7b:17:cf:fe: 1b:94:e9:1d:f3:9b:72:17:e8:c6:51:1a:bd:86:8b:5a:c8:f0: 8f:93:ec:31:a7:ca:1a:a9:db:53:16:33:01:0c:e0:f8:9c:b4: 7e:de:9c:ca:b7:18:77:df:7e:82:34:6a:e2:2f:2b:0f:f5:98: a7:17:bc:4c:00:76:96:bc:e4:58:ea:dc:69:2a:3e:eb:17:e2: 9e:68:24:50:13:d1:fb:ab:6e:64:cb:84:90:20:60:48:b4:b6: 9f:8f:18:4f:e9:57:de:6f:c2:37:bc:65:12:1d:31:f9:b2:bc: e1:7a:6e:2a:0b:67:8f:36:57:e2:26:b8:dc:3d:2f:30:9d:c5: 5d:be:5e:20:ff:da:b2:52:7b:55:60:43:91:2a:ee:72:91:c5: ee:9e:10:53:1c:ce:ac:2e:f9:24:19:33:4d:ff:90:a1:26:13: c0:d7:61:ac:a2:30:b7:5e:36:8e:e6:b5:04:4d:ac:32:15:9d: d0:62:d5:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3Cm/fnem2/OIfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk NjE2NGRlYzktZWE4MC00MWMzLTg5YzMtOTIzYTBhMzNiMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjjMO2c4v30T1yyYO9a/CqTqFu4YJdCPInJE NCDENRB315C3IQs5HuGFigNeMR5mqsoHo6Gb5auQIYyaFWVzjGXB1M1lyWJYyA+G vbSy52HqVqfBuze6pcsJEOjrMPbhtliOvjoZ23BXbIRSNRstE8WqbY9gRmJntFQE zHgpwYY45OYHYpl4tHsyMxkWLRWVdnGP3JDrHvIbr9FrwLSMp9PJ958WbE3Ps3OO zeJ1qABuIsaaOihArIwfByTPtVwvRq8vcSm8yIXLtTdRxW9deXp+3saXoGD3eWeZ 0LiqVG5Q8O2w6qHJCJ4evEr8HwrJCr56nT45pNrpnamTFaNy/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlsvjSuepwxKHBvyMIZe07rHsK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ0MjgwYmEtOGJiMy0z MWNkLWFkYTktNGQ1ZGRiZTZjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO/Q/ILQeGYbmGlE/rivmb+akO8iSF9/lPXDUHz0kSA+4D5YiBpi08F xlkjFDv3/j+KMHzCwp5FSK/9MqpNegNIjhBQexfP/huU6R3zm3IX6MZRGr2Gi1rI 8I+T7DGnyhqp21MWMwEM4PictH7enMq3GHfffoI0auIvKw/1mKcXvEwAdpa85Fjq 3GkqPusX4p5oJFAT0furbmTLhJAgYEi0tp+PGE/pV95vwje8ZRIdMfmyvOF6bioL Z482V+ImuNw9LzCdxV2+XiD/2rJSe1VgQ5Eq7nKRxe6eEFMczqwu+SQZM03/kKEm E8DXYayiMLdeNo7mtQRNrDIVndBi1Sk= -----END CERTIFICATE-----Generated at Tue Dec 16 06:21:20 2025 by rpki-client