This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa File: 43645d55-9561-369b-9813-11df0c8526be.roa (raw, json) Hash identifier: x8ZjYmboWbWlkjynPSofLSGlKPNHNNse4NfrkbiHtbI= Subject key identifier: 68:34:25:CF:C4:57:C7:3F:26:39:0C:37:D0:C0:19:F5:25:07:BB:9A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD3307F89DD1D7ECD71B644C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:7f:89:dd:1d:7e:cd:71:b6:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=c2befc6a-4ba7-468c-9ab1-c0caf98b0f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:f5:eb:4f:6c:3d:0d:12:cc:ca:a8:91:e0: d6:9b:9c:95:5f:b5:74:c2:b0:c8:69:27:05:cf:b1: d1:57:3a:e3:3e:28:33:75:62:2c:91:f7:5a:00:04: b3:35:2b:b6:11:02:eb:78:68:07:82:e9:45:1a:bd: e1:1b:7a:7c:ef:62:a8:62:4d:e5:07:bd:ae:60:7a: 62:75:59:8b:98:bd:19:f7:6e:a1:7d:be:89:5c:76: 43:37:4b:37:c5:e5:36:e8:c8:12:9b:e5:6a:8a:e0: 35:a5:38:d3:46:56:07:85:07:eb:47:27:01:2e:23: 70:9b:3f:54:4d:16:4c:14:53:81:4a:6f:2f:99:4f: 5d:98:01:d8:b0:fb:58:04:20:34:ad:fb:c3:3a:fd: 6a:99:2b:01:b1:94:fc:f7:50:e9:63:6c:dc:9f:01: f0:8f:96:ac:9e:e9:92:fd:11:3d:8e:7f:f7:7c:95: 8d:d5:6e:f8:46:2e:52:af:3b:22:14:ab:56:5c:6c: 89:93:ac:75:62:58:a3:75:56:52:80:9d:21:cd:55: a6:74:25:70:ae:08:84:ce:4d:d6:1a:98:b9:e8:36: 95:30:b8:41:12:63:9f:b8:f8:dd:3c:95:4f:bd:c7: b9:a3:20:f6:8d:05:23:d6:22:da:44:b3:a2:8d:8b: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:34:25:CF:C4:57:C7:3F:26:39:0C:37:D0:C0:19:F5:25:07:BB:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0c:be:39:df:cd:3d:2f:6f:cf:54:e7:cf:e1:0d:72:c6:3a: 1a:ea:82:b2:73:be:67:90:fc:7f:8a:ed:3a:71:3a:9d:93:17: 4d:e5:41:25:a5:80:de:08:5d:8f:64:75:c7:7b:d2:ee:62:f4: 05:8b:a4:5e:ef:df:47:d9:b4:74:ec:34:b0:0e:d5:c2:54:d1: ca:48:9f:f0:69:3f:94:78:5b:bb:42:19:36:07:16:81:c3:58: 56:20:b1:15:c3:f4:fa:2a:70:9b:68:d7:d2:81:28:e5:b7:3b: e2:6d:40:3c:97:e7:ba:b4:86:8a:6d:22:19:23:81:98:dd:62: 81:ec:0c:06:6a:14:ab:e2:0b:76:ed:6f:5c:7d:f8:e1:f1:a3: 5f:97:03:7b:d5:84:e6:41:36:d2:bb:a8:31:58:14:f6:03:99: 79:c5:a7:a9:6f:5c:7f:17:31:2d:25:5d:ce:48:42:80:a2:1a: 77:f7:44:ba:55:1b:d8:46:79:18:46:e4:09:5c:bb:0e:43:2f: f0:85:30:b1:02:90:69:68:11:7c:d7:4d:3f:9c:69:52:41:51: d2:30:9e:40:e6:8e:af:fe:49:29:7f:ce:f1:5f:6c:90:00:a4: d7:84:5e:b3:a6:22:b2:dd:18:02:33:70:5e:79:83:f3:d6:1e: 81:9d:56:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMH+J3R1+zXG2RMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk YzJiZWZjNmEtNGJhNy00NjhjLTlhYjEtYzBjYWY5OGIwZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/D1609sPQ0SzMqokeDWm5yVX7V0wrDIaScF z7HRVzrjPigzdWIskfdaAASzNSu2EQLreGgHgulFGr3hG3p872KoYk3lB72uYHpi dVmLmL0Z926hfb6JXHZDN0s3xeU26MgSm+VqiuA1pTjTRlYHhQfrRycBLiNwmz9U TRZMFFOBSm8vmU9dmAHYsPtYBCA0rfvDOv1qmSsBsZT891DpY2zcnwHwj5asnumS /RE9jn/3fJWN1W74Ri5SrzsiFKtWXGyJk6x1YlijdVZSgJ0hzVWmdCVwrgiEzk3W Gpi56DaVMLhBEmOfuPjdPJVPvce5oyD2jQUj1iLaRLOijYu7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg0Jc/EV8c/JjkMN9DAGfUlB7uaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM2NDVkNTUtOTU2MS0z NjliLTk4MTMtMTFkZjBjODUyNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoMvjnfzT0vb89U58/hDXLGOhrqgrJzvmeQ/H+K7TpxOp2TF03lQSWl gN4IXY9kdcd70u5i9AWLpF7v30fZtHTsNLAO1cJU0cpIn/BpP5R4W7tCGTYHFoHD WFYgsRXD9PoqcJto19KBKOW3O+JtQDyX57q0hoptIhkjgZjdYoHsDAZqFKviC3bt b1x9+OHxo1+XA3vVhOZBNtK7qDFYFPYDmXnFp6lvXH8XMS0lXc5IQoCiGnf3RLpV G9hGeRhG5Alcuw5DL/CFMLECkGloEXzXTT+caVJBUdIwnkDmjq/+SSl/zvFfbJAA pNeEXrOmIrLdGAIzcF55g/PWHoGdVjU= -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:35 2025 by rpki-client