This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/349aaa88-fa9b-32dd-9e5f-755fec661b99.roa File: 349aaa88-fa9b-32dd-9e5f-755fec661b99.roa (raw, json) Hash identifier: 421lvT2DkwHqeMJItbAbrGJDa7HlvSDcOyHKs99Kelw= Subject key identifier: 08:50:02:B6:BE:17:D2:9A:9B:CE:D0:2F:88:E9:29:5B:54:D2:C9:82 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C3381464255843AAD2A115700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/349aaa88-fa9b-32dd-9e5f-755fec661b99.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:46:42:55:84:3a:ad:2a:11:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=85b97cf8-f51e-4aec-bc87-f9e995c755f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:cb:0d:68:4e:b7:33:e6:63:60:12:3e:e6: 08:df:c1:72:21:57:59:42:81:c5:f8:75:c3:c7:a1: 9d:6e:2f:2b:72:88:6c:e2:40:a5:58:eb:6a:6d:ed: eb:bb:fc:fd:5f:4a:ae:c0:23:9a:04:b2:cc:95:f4: d3:bb:93:8d:ab:c2:88:e5:25:5a:d3:8f:c0:a3:e0: d4:9d:0c:08:e0:37:12:cd:95:0c:db:b5:b1:29:28: 36:8c:a2:54:3b:c3:cc:75:7f:eb:17:8c:69:f2:35: e1:fb:9b:cd:26:29:c7:70:71:30:ff:d9:88:68:ce: 70:14:ff:c1:5c:69:13:30:7b:d6:be:e7:60:8d:77: 57:b7:62:b4:b8:fb:84:91:1b:e8:e8:61:6c:52:2d: 1b:41:d5:a2:da:4d:66:6d:a7:c6:0b:2d:38:02:64: 97:87:05:0f:4e:59:9d:7b:b7:b3:23:e1:b4:72:64: 8f:58:dd:03:31:d2:7b:3a:17:98:a9:77:d4:f1:93: b6:aa:fd:cc:3f:bf:8c:8d:3c:44:31:3d:2d:42:f8: 24:b0:49:b4:1c:90:5f:46:09:01:0e:24:ec:2c:d3: a5:bc:60:bb:c8:fc:b0:5b:47:ed:ee:10:88:74:0e: 62:95:06:59:b4:fe:c4:9e:ed:3b:7d:5f:c1:8a:84: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:50:02:B6:BE:17:D2:9A:9B:CE:D0:2F:88:E9:29:5B:54:D2:C9:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/349aaa88-fa9b-32dd-9e5f-755fec661b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c3:b4:69:32:67:86:f4:05:10:39:87:21:01:f1:68:d9:da: 12:2e:e1:4c:23:d7:6a:b1:dd:14:d6:9b:3f:39:db:b2:8e:a4: 56:68:f8:0c:e8:89:95:3b:ee:9c:5a:4a:67:ab:ba:5c:60:46: 8d:e6:56:f5:a8:25:1c:f3:4b:48:41:b9:cc:1c:83:23:55:19: 73:ec:05:1a:1d:04:45:4e:a8:39:36:83:fa:c3:bd:b8:b5:e1: 17:24:50:5a:0f:74:6d:d9:e5:6b:98:06:6d:2b:22:42:e4:a7: f6:97:ee:75:3e:ef:1a:b9:74:51:43:d8:8a:7b:16:c0:73:f7: b0:79:c6:f6:02:39:1d:e6:4a:12:49:38:07:03:b5:3e:87:ad: ba:32:52:16:43:f0:3e:78:69:a7:7c:1f:74:20:90:06:2e:5e: b8:6d:5b:c5:f3:93:6e:da:d5:f6:61:7f:f8:ab:55:70:ab:ca: 5f:e1:a1:95:6a:b9:5c:d3:ba:b7:03:c2:45:19:1c:60:ac:d5: e0:f4:26:e2:16:10:10:78:01:38:2b:a5:59:a3:4b:38:3e:bd: b8:91:52:16:b5:b5:e9:6c:ac:9e:3c:a3:b5:54:52:15:d2:31: 11:f4:97:f8:65:83:a6:ef:30:1a:c6:6c:f0:26:9d:28:70:7d: ff:5c:6c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgUZCVYQ6rSoRVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk ODViOTdjZjgtZjUxZS00YWVjLWJjODctZjllOTk1Yzc1NWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMbLDWhOtzPmY2ASPuYI38FyIVdZQoHF+HXD x6Gdbi8rcohs4kClWOtqbe3ru/z9X0quwCOaBLLMlfTTu5ONq8KI5SVa04/Ao+DU nQwI4DcSzZUM27WxKSg2jKJUO8PMdX/rF4xp8jXh+5vNJinHcHEw/9mIaM5wFP/B XGkTMHvWvudgjXdXt2K0uPuEkRvo6GFsUi0bQdWi2k1mbafGCy04AmSXhwUPTlmd e7ezI+G0cmSPWN0DMdJ7OheYqXfU8ZO2qv3MP7+MjTxEMT0tQvgksEm0HJBfRgkB DiTsLNOlvGC7yPywW0ft7hCIdA5ilQZZtP7Enu07fV/BioSCcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhQAra+F9Kam87QL4jpKVtU0smCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQ5YWFhODgtZmE5Yi0z MmRkLTllNWYtNzU1ZmVjNjYxYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvDtGkyZ4b0BRA5hyEB8WjZ2hIu4Uwj12qx3RTWmz8527KOpFZo+Azo iZU77pxaSmerulxgRo3mVvWoJRzzS0hBucwcgyNVGXPsBRodBEVOqDk2g/rDvbi1 4RckUFoPdG3Z5WuYBm0rIkLkp/aX7nU+7xq5dFFD2Ip7FsBz97B5xvYCOR3mShJJ OAcDtT6HrboyUhZD8D54aad8H3QgkAYuXrhtW8Xzk27a1fZhf/irVXCryl/hoZVq uVzTurcDwkUZHGCs1eD0JuIWEBB4ATgrpVmjSzg+vbiRUha1telsrJ48o7VUUhXS MRH0l/hlg6bvMBrGbPAmnShwff9cbEM= -----END CERTIFICATE-----Generated at Wed Jan 21 00:57:17 2026 by rpki-client