This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa File: 4765031d-1fb0-368a-b723-e6788ae0b6c0.roa (raw, json) Hash identifier: XNFNgRtZxpuvB4F27VF3hkV5PpUTiEy80dyys7QJrGE= Subject key identifier: FC:F8:D6:1F:AE:05:D9:E6:F9:FF:16:61:B7:47:B5:42:DA:A5:8F:55 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE555DE26D8D1D5BA9B4FB000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:de:26:d8:d1:d5:ba:9b:4f:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=2f6e990e-614f-4a8b-8801-c116a22f4b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:fa:d4:e8:d7:9e:44:54:ab:8f:15:dc:ac: 2a:1b:e5:36:e4:de:b1:c4:72:e1:5f:f0:e6:c1:42: e6:d8:9a:7a:43:35:69:85:e3:1d:46:52:62:4c:20: 6b:c9:f8:5b:14:22:87:b0:df:73:b3:8d:7c:ae:0c: d0:66:f6:12:32:de:2e:13:29:26:e7:06:b2:f6:25: 93:40:ff:f5:f1:a2:60:42:b2:aa:da:28:b3:20:c7: 5e:53:b3:86:4e:9c:3b:15:22:d2:db:aa:2a:9d:6c: 60:ba:0e:1c:01:db:75:4a:50:ae:e9:4a:b6:3c:c2: 5d:87:b6:a8:35:5e:be:f5:64:70:89:ca:9a:13:0f: ab:7a:90:88:aa:59:7d:30:2a:36:3b:11:b1:e2:24: 04:9f:9b:8a:40:4e:46:44:db:db:18:25:e4:5f:82: a1:03:ff:5b:c3:d0:e5:8d:f1:41:69:b8:17:e8:75: 7b:31:3b:a0:57:9d:1c:8c:c6:52:43:aa:99:29:10: 4e:db:17:27:41:b8:e8:e5:7c:c4:99:0d:ea:b6:e1: 7b:d4:8a:af:f9:bb:af:40:f2:bd:c9:c5:0d:32:35: ab:b8:d2:e8:83:8b:2d:de:4a:69:07:a8:00:23:0c: 1f:b4:17:4e:a8:9b:8d:7f:d7:89:3e:9d:fc:49:38: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F8:D6:1F:AE:05:D9:E6:F9:FF:16:61:B7:47:B5:42:DA:A5:8F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4765031d-1fb0-368a-b723-e6788ae0b6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:2b:0d:b2:72:20:e1:53:7f:54:86:f5:0f:19:b3:b3:72:66: d7:1d:4a:07:32:b5:6b:1b:da:c8:ac:03:f1:96:51:cc:9b:c8: 83:7e:ee:8e:91:3e:cd:01:a1:7c:6e:ce:93:6d:98:d6:6a:e2: 15:1f:4c:34:ef:93:21:94:de:7b:b9:f3:7a:a5:0d:85:cb:b5: 0e:8d:14:50:50:e5:3d:b5:f0:cb:27:f4:a1:a3:ec:db:ae:19: f4:9e:64:c8:43:eb:9f:52:e4:13:e9:72:ef:df:93:39:4c:8f: 4e:0a:5d:b4:ed:c4:37:89:8f:31:51:fe:31:9c:63:ca:01:35: 5b:93:2b:20:10:ce:49:f4:2d:9c:35:a2:02:ea:04:a4:92:ee: 72:cd:8a:e9:e4:da:65:dd:6b:ba:0f:63:79:10:07:c6:ca:92: 61:e4:6b:c2:91:98:0f:0d:f4:73:df:5d:93:22:0d:c4:38:16: 5a:10:b1:4a:d5:d5:2a:0b:69:94:5f:d1:93:8a:8d:17:be:0a: 54:bc:13:96:d4:ea:c2:86:ba:19:21:85:57:05:ea:63:ee:08: 46:d3:d8:60:c8:f0:46:a2:48:94:8b:a8:fe:9b:16:fc:1d:b3: a7:a4:4b:44:de:3a:e7:b7:5f:7b:53:cd:07:b0:ae:26:2e:b4: 9a:65:92:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVd4m2NHVuptPsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk MmY2ZTk5MGUtNjE0Zi00YThiLTg4MDEtYzExNmEyMmY0YjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuH61OjXnkRUq48V3KwqG+U25N6xxHLhX/Dm wULm2Jp6QzVpheMdRlJiTCBryfhbFCKHsN9zs418rgzQZvYSMt4uEykm5way9iWT QP/18aJgQrKq2iizIMdeU7OGTpw7FSLS26oqnWxgug4cAdt1SlCu6Uq2PMJdh7ao NV6+9WRwicqaEw+repCIqll9MCo2OxGx4iQEn5uKQE5GRNvbGCXkX4KhA/9bw9Dl jfFBabgX6HV7MTugV50cjMZSQ6qZKRBO2xcnQbjo5XzEmQ3qtuF71Iqv+buvQPK9 ycUNMjWruNLog4st3kppB6gAIwwftBdOqJuNf9eJPp38STheNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz41h+uBdnm+f8WYbdHtULapY9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDc2NTAzMWQtMWZiMC0z NjhhLWI3MjMtZTY3ODhhZTBiNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgrDbJyIOFTf1SG9Q8Zs7NyZtcdSgcytWsb2sisA/GWUcybyIN+7o6R Ps0BoXxuzpNtmNZq4hUfTDTvkyGU3nu583qlDYXLtQ6NFFBQ5T218Msn9KGj7Nuu GfSeZMhD659S5BPpcu/fkzlMj04KXbTtxDeJjzFR/jGcY8oBNVuTKyAQzkn0LZw1 ogLqBKSS7nLNiunk2mXda7oPY3kQB8bKkmHka8KRmA8N9HPfXZMiDcQ4FloQsUrV 1SoLaZRf0ZOKjRe+ClS8E5bU6sKGuhkhhVcF6mPuCEbT2GDI8EaiSJSLqP6bFvwd s6ekS0TeOue3X3tTzQewriYutJplkg0= -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:46 2025 by rpki-client