This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa File: 3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa (raw, json) Hash identifier: v8Ft+bZq3DQxi1xRIUY8IxTuNVfny7qcGw7B9B09xjg= Subject key identifier: 3C:5D:DA:84:28:9E:8F:A2:E1:6D:29:78:F4:01:91:DA:B9:B9:B3:01 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C8476E0D0070E9286EF589610 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:e0:d0:07:0e:92:86:ef:58:96:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=b4b5878b-f4fb-46e5-bc62-525773102c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:9f:ee:b7:21:76:f1:a0:02:c1:ca:5c:ef: 12:76:45:bd:b6:f8:34:87:40:61:45:a2:fe:8e:3a: f8:d9:fd:23:86:ca:b4:12:aa:63:07:97:d8:11:be: 02:c1:5d:f7:c9:5f:75:d7:2d:a9:c9:f2:9b:0a:a4: a2:6a:2c:92:af:18:9b:7c:cd:ac:c3:c4:69:6b:34: 54:7d:4a:6d:18:e8:f7:ec:78:34:00:59:d6:d5:27: 26:6c:dd:86:f9:05:95:b2:4e:e9:eb:0b:36:b2:30: 82:28:f7:fc:9d:c7:c5:a9:03:e6:4e:ad:89:69:89: 9c:2c:35:2a:be:7f:76:a0:e6:1a:5b:b3:9e:d0:65: 20:99:f6:2c:41:ea:b5:c0:54:b9:81:7f:d3:5e:37: 3b:76:b6:a2:4f:fd:65:d4:79:5d:55:03:2b:e0:96: d7:01:fd:98:8a:c8:3a:ed:a1:4e:82:c6:c1:bb:21: 9a:87:cf:26:eb:12:74:35:47:74:ac:fa:f5:30:d9: 59:ba:2c:f9:41:56:d6:ad:b1:35:3d:52:3f:1a:16: 5d:d6:3d:f3:77:fb:5c:a9:e5:ab:2c:44:b0:7e:28: 09:0d:d1:06:94:ac:d9:2c:3f:38:c0:1f:da:df:b0: 6a:22:d7:29:96:02:f6:22:b3:4c:6c:b0:2e:38:2c: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5D:DA:84:28:9E:8F:A2:E1:6D:29:78:F4:01:91:DA:B9:B9:B3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3eef707b-8fc4-3ee2-b4b2-5ce43ae2d1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a6:94:bf:20:5b:47:e0:3c:d7:55:ca:bf:03:ca:9e:3c:d9: 52:7d:91:a4:88:c9:bc:a1:60:9c:bb:85:80:d9:98:ef:87:df: bc:0c:cb:16:b7:f7:05:17:60:28:7d:54:15:df:58:78:a9:27: 00:02:68:af:3a:28:d2:22:15:8e:b2:cc:6a:6b:e9:98:70:43: 70:38:4f:c7:fd:59:0f:71:31:e8:a4:bb:ea:e5:f5:d2:1a:4b: b7:a7:bf:1a:82:0c:b5:30:a7:57:c3:0b:79:df:10:dc:cb:26: 61:68:18:87:55:69:d2:6b:82:2b:a9:1f:2d:4e:30:94:81:d4: 02:43:0e:ad:11:06:92:29:5e:a5:6d:d4:0e:32:28:5e:7d:57: 64:f8:7d:35:d8:74:01:ae:78:ef:f8:fc:b5:b4:a9:bd:df:2c: 50:a9:c9:29:de:c3:00:3c:b7:e1:f4:e6:e9:84:0d:7d:61:da: 76:fe:31:3f:01:f8:b5:c4:12:ad:1a:a6:e6:28:4a:6f:86:eb: 26:2b:c5:4d:80:d1:c3:74:23:5f:ff:76:34:e0:af:38:79:72: c5:51:8e:3c:2d:f6:ce:37:c8:6e:c0:5c:9b:25:e6:14:34:fa: ae:7c:6b:3d:a3:f8:ed:17:ec:61:c7:44:26:21:cd:c0:1c:c6: 5d:76:29:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEduDQBw6Shu9YlhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk YjRiNTg3OGItZjRmYi00NmU1LWJjNjItNTI1NzczMTAyYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf6f7rchdvGgAsHKXO8SdkW9tvg0h0BhRaL+ jjr42f0jhsq0EqpjB5fYEb4CwV33yV911y2pyfKbCqSiaiySrxibfM2sw8RpazRU fUptGOj37Hg0AFnW1ScmbN2G+QWVsk7p6ws2sjCCKPf8ncfFqQPmTq2JaYmcLDUq vn92oOYaW7Oe0GUgmfYsQeq1wFS5gX/TXjc7draiT/1l1HldVQMr4JbXAf2Yisg6 7aFOgsbBuyGah88m6xJ0NUd0rPr1MNlZuiz5QVbWrbE1PVI/GhZd1j3zd/tcqeWr LESwfigJDdEGlKzZLD84wB/a37BqItcplgL2IrNMbLAuOCyy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxd2oQono+i4W0pePQBkdq5ubMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2VlZjcwN2ItOGZjNC0z ZWUyLWI0YjItNWNlNDNhZTJkMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFJnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACimlL8gW0fgPNdVyr8Dyp482VJ9kaSIybyhYJy7hYDZmO+H37wMyxa3 9wUXYCh9VBXfWHipJwACaK86KNIiFY6yzGpr6ZhwQ3A4T8f9WQ9xMeiku+rl9dIa S7envxqCDLUwp1fDC3nfENzLJmFoGIdVadJrgiupHy1OMJSB1AJDDq0RBpIpXqVt 1A4yKF59V2T4fTXYdAGueO/4/LW0qb3fLFCpySnewwA8t+H05umEDX1h2nb+MT8B +LXEEq0apuYoSm+G6yYrxU2A0cN0I1//djTgrzh5csVRjjwt9s43yG7AXJsl5hQ0 +q58az2j+O0X7GHHRCYhzcAcxl12KSI= -----END CERTIFICATE-----Generated at Wed Jan 21 00:54:27 2026 by rpki-client