This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42bf1295-1969-3c75-8c08-abee6320099c.roa File: 42bf1295-1969-3c75-8c08-abee6320099c.roa (raw, json) Hash identifier: +8wx3rU9GwTGdzyVHT79RnYEWOeRNuVDvh4zgULo8XU= Subject key identifier: 4B:D7:3F:83:0A:23:2B:19:06:5F:46:7D:00:D7:A8:24:1F:B1:74:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C1D2B709495D066591B23C480 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42bf1295-1969-3c75-8c08-abee6320099c.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.157.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:70:94:95:d0:66:59:1b:23:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=0b486163-e546-4cb8-a605-9486cacf0f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f4:6a:12:40:e0:dc:1a:7a:9d:c8:07:c8:27: 0f:2e:ae:19:b3:01:9a:93:98:fc:9c:9d:0c:7c:dc: 9e:6f:25:95:29:02:df:89:fd:af:b0:0e:7a:33:9c: 8b:50:e5:ea:34:af:ff:38:26:b5:91:a3:ee:fa:ba: 50:5e:33:9a:17:3f:46:88:19:f0:c8:b0:93:44:c6: e3:cd:49:ce:75:94:35:98:0b:d4:64:76:94:00:fe: f0:2a:06:aa:92:e2:15:bd:27:58:31:f5:ca:87:03: a1:2c:f7:d2:8e:dc:9f:e0:2f:c2:14:18:54:ae:89: 58:6f:21:b6:82:f9:83:83:70:71:02:cb:0b:b0:a3: cf:8b:30:9e:b7:dc:c9:f8:6e:5c:1c:c9:30:28:5c: b3:03:bc:98:23:c4:02:4b:3d:e2:57:b4:2d:e7:1b: 81:cb:5d:85:2b:58:54:f2:5d:8c:b2:25:ba:3b:64: 61:b1:ee:b8:fd:ae:c6:e6:71:bd:c6:33:1d:5c:14: dd:00:32:4d:f0:7a:d4:79:6c:84:3b:34:7f:44:20: 41:30:88:b7:2a:4a:1f:cf:7c:c5:31:90:c0:23:6b: 0a:35:9e:4d:eb:b0:37:56:ef:e7:84:7a:17:66:10: 56:5d:3f:c4:6a:49:00:23:e8:f9:d7:c5:73:2b:8a: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D7:3F:83:0A:23:2B:19:06:5F:46:7D:00:D7:A8:24:1F:B1:74:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/42bf1295-1969-3c75-8c08-abee6320099c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:97:ee:ab:bc:49:17:61:09:b9:d2:ca:12:eb:cc:9b:1c:8a: 82:a0:82:ad:39:87:6a:ce:76:0d:46:ab:09:b4:82:8f:e3:55: 4c:91:1a:57:dc:0f:53:bb:18:cb:6e:6e:b6:fc:fa:4b:f9:75: 35:99:f8:e5:80:e5:b1:e3:c1:3e:e8:2e:3c:7c:e8:ce:85:bf: ff:84:20:f5:f9:ee:2f:27:1c:c5:ec:e2:d8:9a:88:0f:0b:97: 20:2b:db:51:bd:7a:64:16:66:8d:52:76:2f:df:e1:fc:18:55: 16:8a:74:02:2b:55:ae:2b:1a:d2:49:57:75:7c:8f:4a:60:81: 37:01:11:52:63:6f:cb:48:14:51:48:d0:e4:1f:46:8a:9c:36: ea:a5:47:8e:e6:78:ec:b1:89:ad:00:60:33:f2:50:81:08:a1: 5c:98:fc:59:83:5e:98:d5:b7:cf:42:63:cf:43:d8:f5:f2:1c: 46:41:f9:2c:69:14:1c:e6:e2:a1:53:31:69:15:41:1e:f6:3e: a5:c1:85:17:56:9c:dd:c4:56:88:7a:6d:ce:34:29:3e:de:0b: 0c:82:a7:a6:2d:88:80:e7:13:a6:32:33:44:23:80:46:e2:37: e5:84:65:98:9e:c6:cd:fd:2b:4c:68:c6:78:b2:ac:ef:68:66: 22:71:49:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3CUldBmWRsjxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk MGI0ODYxNjMtZTU0Ni00Y2I4LWE2MDUtOTQ4NmNhY2YwZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvRqEkDg3Bp6ncgHyCcPLq4ZswGak5j8nJ0M fNyebyWVKQLfif2vsA56M5yLUOXqNK//OCa1kaPu+rpQXjOaFz9GiBnwyLCTRMbj zUnOdZQ1mAvUZHaUAP7wKgaqkuIVvSdYMfXKhwOhLPfSjtyf4C/CFBhUrolYbyG2 gvmDg3BxAssLsKPPizCet9zJ+G5cHMkwKFyzA7yYI8QCSz3iV7Qt5xuBy12FK1hU 8l2MsiW6O2Rhse64/a7G5nG9xjMdXBTdADJN8HrUeWyEOzR/RCBBMIi3Kkofz3zF MZDAI2sKNZ5N67A3Vu/nhHoXZhBWXT/EakkAI+j518VzK4oFIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvXP4MKIysZBl9GfQDXqCQfsXRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDJiZjEyOTUtMTk2OS0z Yzc1LThjMDgtYWJlZTYzMjAwOTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGX7qu8SRdhCbnSyhLrzJscioKggq05h2rOdg1Gqwm0go/jVUyRGlfc D1O7GMtubrb8+kv5dTWZ+OWA5bHjwT7oLjx86M6Fv/+EIPX57i8nHMXs4tiaiA8L lyAr21G9emQWZo1Sdi/f4fwYVRaKdAIrVa4rGtJJV3V8j0pggTcBEVJjb8tIFFFI 0OQfRoqcNuqlR47meOyxia0AYDPyUIEIoVyY/FmDXpjVt89CY89D2PXyHEZB+Sxp FBzm4qFTMWkVQR72PqXBhRdWnN3EVoh6bc40KT7eCwyCp6YtiIDnE6YyM0QjgEbi N+WEZZiexs39K0xoxniyrO9oZiJxSWs= -----END CERTIFICATE-----Generated at Wed Jan 21 01:01:33 2026 by rpki-client