This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/455ce729-9314-3871-9126-fed08a134b24.roa File: 455ce729-9314-3871-9126-fed08a134b24.roa (raw, json) Hash identifier: e7u1A1MbMNAzPjvUv2P41+WR/H15MyJgbjoYWqW9H94= Subject key identifier: 4C:1A:87:F0:7F:C3:D0:24:D3:7F:C2:38:C1:35:63:CC:D3:62:F9:12 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C29BBAA59514F3A3E0BDD14C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/455ce729-9314-3871-9126-fed08a134b24.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 8069 IP address blocks: 20.33.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:aa:59:51:4f:3a:3e:0b:dd:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=f1b6e874-c0d5-4c39-987a-b3a0762d3fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bb:73:ab:02:4f:1e:a9:f3:f1:5d:46:66:1f: 77:34:fc:00:22:71:a8:db:17:58:51:a0:c5:1c:21: 4e:62:22:12:1e:fc:74:b8:e5:ba:06:f5:53:3b:ca: 46:72:cc:1c:9a:84:5b:cc:9d:05:b7:67:a4:fc:5c: e3:8d:cf:7e:9e:67:d7:91:7b:8b:26:da:3f:e0:4b: 54:32:85:f4:79:9d:24:3a:3c:97:4b:38:ee:33:a5: 4b:1b:15:65:1c:0a:e7:af:5a:7b:52:d0:94:4f:a0: 99:d6:94:2c:ac:d6:33:8a:ee:f8:bd:93:0d:b2:a7: 2c:40:a4:92:c8:15:17:b3:9a:d7:14:3e:2b:16:31: e2:62:9e:08:d7:57:eb:66:ef:23:fb:32:a1:ab:a7: 04:17:98:30:ce:d4:ef:49:da:9e:01:61:dd:fa:a5: 2d:a1:5a:00:cf:6a:4f:be:7f:42:24:a2:f5:bb:e2: 68:5f:a5:9c:2f:a5:07:45:33:1f:e7:1d:32:d5:3d: 4c:87:61:d1:52:e3:51:7d:70:1b:8b:dd:c7:50:43: 2d:5b:fc:9d:7b:3a:6d:61:e4:c1:13:9c:9f:3b:ec: c2:10:e0:5e:57:f7:32:95:6e:6d:13:32:1e:8a:59: f3:08:3b:12:5d:b3:ea:b7:67:bc:ec:31:9b:8e:bf: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1A:87:F0:7F:C3:D0:24:D3:7F:C2:38:C1:35:63:CC:D3:62:F9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/455ce729-9314-3871-9126-fed08a134b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:41:6b:a0:4c:d6:fa:27:46:e8:66:29:1d:ff:5a:f3:95:61: 26:1f:a9:51:f7:2c:1e:ed:3c:d0:8c:d2:07:3d:c1:21:8d:83: 17:57:03:de:ff:9c:86:0f:6a:a1:fd:da:ef:a7:15:a1:b9:c9: 15:de:b9:bc:3f:f9:da:53:36:39:ca:b0:ed:10:f0:ec:91:b4: 07:50:5f:0e:49:e0:16:e1:89:85:25:a7:f9:d8:a1:10:5a:1b: 54:a2:eb:c0:12:4e:42:e5:60:85:2f:e2:7e:aa:ff:15:6a:4c: 3f:52:2b:98:75:8b:fa:9a:ee:40:21:be:a5:2b:65:d7:72:f1: 3d:fe:51:1a:a0:41:a2:7c:a7:d6:fd:74:dc:df:25:24:79:51: 2a:08:41:2a:5e:f3:da:27:06:46:57:a4:60:9b:2e:d5:07:ca: d3:21:d1:3c:d3:bd:b5:4b:02:3f:10:ef:2a:2a:26:49:b9:ae: 83:3a:3b:bc:84:d7:7d:be:c9:a0:14:79:9c:c8:26:42:0b:88: e7:9d:a8:b4:ba:75:e2:f3:81:56:7e:b2:36:1a:d8:af:1e:91: 12:79:a5:bb:1e:d9:8e:61:9c:76:db:f9:07:07:2e:e0:ca:54: a9:1b:a6:23:e6:79:85:01:ee:88:c1:07:83:7a:21:c7:de:87: ca:d1:59:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu6pZUU86PgvdFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk ZjFiNmU4NzQtYzBkNS00YzM5LTk4N2EtYjNhMDc2MmQzZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrtzqwJPHqnz8V1GZh93NPwAInGo2xdYUaDF HCFOYiISHvx0uOW6BvVTO8pGcswcmoRbzJ0Ft2ek/Fzjjc9+nmfXkXuLJto/4EtU MoX0eZ0kOjyXSzjuM6VLGxVlHArnr1p7UtCUT6CZ1pQsrNYziu74vZMNsqcsQKSS yBUXs5rXFD4rFjHiYp4I11frZu8j+zKhq6cEF5gwztTvSdqeAWHd+qUtoVoAz2pP vn9CJKL1u+JoX6WcL6UHRTMf5x0y1T1Mh2HRUuNRfXAbi93HUEMtW/ydezptYeTB E5yfO+zCEOBeV/cylW5tEzIeilnzCDsSXbPqt2e87DGbjr9pvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwah/B/w9Ak03/COME1Y8zTYvkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDU1Y2U3MjktOTMxNC0z ODcxLTkxMjYtZmVkMDhhMTM0YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5Ba6BM1vonRuhmKR3/WvOVYSYfqVH3LB7tPNCM0gc9wSGNgxdXA97/ nIYPaqH92u+nFaG5yRXeubw/+dpTNjnKsO0Q8OyRtAdQXw5J4BbhiYUlp/nYoRBa G1Si68ASTkLlYIUv4n6q/xVqTD9SK5h1i/qa7kAhvqUrZddy8T3+URqgQaJ8p9b9 dNzfJSR5USoIQSpe89onBkZXpGCbLtUHytMh0TzTvbVLAj8Q7yoqJkm5roM6O7yE 132+yaAUeZzIJkILiOedqLS6deLzgVZ+sjYa2K8ekRJ5pbse2Y5hnHbb+QcHLuDK VKkbpiPmeYUB7ojBB4N6Icfeh8rRWYI= -----END CERTIFICATE-----Generated at Wed Jan 21 01:01:33 2026 by rpki-client