This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa File: 4e958850-6659-3d52-bbff-26a04f499d8d.roa (raw, json) Hash identifier: O+u0saW24alGg9UgT/qDuSLMcxoaP7QTIlicsDw+KVI= Subject key identifier: B1:66:19:F3:22:C5:24:61:4C:BB:4A:A7:11:4A:25:E9:8F:09:97:E9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C29BBAAB096009489B419CF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 8069 IP address blocks: 20.33.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:aa:b0:96:00:94:89:b4:19:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=ebba215b-50a5-46bd-8da2-81bde4360612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:c1:47:41:58:9b:69:f8:97:3f:9e:e4:f5: a4:2b:40:c5:80:0b:52:a6:92:c6:95:ed:89:fc:6d: 9f:b0:cf:8c:b3:a4:f9:d2:2d:37:f8:5b:4d:83:b2: 5f:42:bb:2f:9a:cb:c5:ac:9b:4a:84:17:3a:dd:03: ca:68:95:e9:82:41:b5:00:01:3b:71:c1:05:10:fc: 36:dc:89:5b:3f:30:39:ee:3d:c9:82:f4:ca:b0:e4: c8:73:75:48:d9:61:ca:7c:55:06:e1:1b:b0:5b:a6: 6d:4d:1b:c5:43:99:c4:80:ec:87:4a:5c:41:7a:b9: 1b:83:44:f3:ef:ea:b7:94:61:cb:59:3c:77:53:dd: 28:66:cf:a9:08:e4:5b:c5:42:81:cb:dd:17:5f:ba: d7:d2:05:b0:cc:37:b8:5b:e8:59:c2:8b:d1:c6:88: 92:bd:5c:3f:bf:c0:b3:d6:68:d4:af:ad:34:18:27: f8:7f:b2:61:a6:9b:2e:7e:38:eb:4e:ea:7a:b7:85: 41:ef:43:96:f2:95:40:8f:c5:3e:ef:08:bc:2e:0b: 1a:4b:99:ea:e4:a5:27:cf:bb:39:99:d1:f3:48:15: f9:63:f5:4a:27:2c:b9:4f:cb:7d:23:85:a3:c4:f7: 91:db:0c:06:9b:09:27:eb:97:9a:fa:53:87:39:c9: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:66:19:F3:22:C5:24:61:4C:BB:4A:A7:11:4A:25:E9:8F:09:97:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e958850-6659-3d52-bbff-26a04f499d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:93:b0:f2:b1:2b:26:9a:19:82:49:02:b4:2a:7c:04:b0:d4: b7:69:f0:52:80:8a:d4:14:44:a2:f6:90:ef:2a:6a:06:a1:42: a2:08:ee:c1:62:c2:c5:a7:87:bc:83:11:36:33:60:78:73:9b: 96:e4:a1:b3:9b:83:9a:3f:d8:23:e5:d9:aa:bd:86:54:79:d9: 4c:60:b6:1c:4c:8d:d0:e7:cf:f8:65:5c:8e:ed:c4:28:6c:af: fb:e1:83:63:04:0a:26:81:c2:ad:c3:a4:89:aa:9a:35:08:92: 2d:24:4b:de:ae:bf:0e:36:9c:42:bb:6a:be:63:c1:62:9f:d4: 62:bf:72:7a:5e:2d:53:ca:f3:28:a8:e9:6c:c0:1d:35:a1:60: 65:65:4a:43:98:3b:69:d0:b2:f6:c7:4b:13:05:af:61:8f:b4: e7:b3:3a:b7:a3:91:d1:eb:9b:f8:11:3c:b3:d7:9e:be:dd:aa: 6b:86:15:7d:fd:79:bc:35:96:9c:15:e8:63:a5:2f:58:28:c3: 84:be:cd:05:bf:6b:9f:5d:46:a6:13:f2:28:5b:10:c8:c4:c7: cf:a0:c3:27:6d:2d:9b:c6:ab:fc:68:de:91:c5:1a:7e:15:48: b0:8e:45:a1:5f:9c:f7:e7:f9:64:46:f4:df:ce:e8:d5:9e:73: 4a:5d:e8:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu6qwlgCUibQZz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk ZWJiYTIxNWItNTBhNS00NmJkLThkYTItODFiZGU0MzYwNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTzBR0FYm2n4lz+e5PWkK0DFgAtSppLGle2J /G2fsM+Ms6T50i03+FtNg7JfQrsvmsvFrJtKhBc63QPKaJXpgkG1AAE7ccEFEPw2 3IlbPzA57j3JgvTKsOTIc3VI2WHKfFUG4RuwW6ZtTRvFQ5nEgOyHSlxBerkbg0Tz 7+q3lGHLWTx3U90oZs+pCORbxUKBy90XX7rX0gWwzDe4W+hZwovRxoiSvVw/v8Cz 1mjUr600GCf4f7JhppsufjjrTup6t4VB70OW8pVAj8U+7wi8LgsaS5nq5KUnz7s5 mdHzSBX5Y/VKJyy5T8t9I4WjxPeR2wwGmwkn65ea+lOHOckXnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFmGfMixSRhTLtKpxFKJemPCZfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGU5NTg4NTAtNjY1OS0z ZDUyLWJiZmYtMjZhMDRmNDk5ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGTsPKxKyaaGYJJArQqfASw1Ldp8FKAitQURKL2kO8qagahQqII7sFi wsWnh7yDETYzYHhzm5bkobObg5o/2CPl2aq9hlR52UxgthxMjdDnz/hlXI7txChs r/vhg2MECiaBwq3DpImqmjUIki0kS96uvw42nEK7ar5jwWKf1GK/cnpeLVPK8yio 6WzAHTWhYGVlSkOYO2nQsvbHSxMFr2GPtOezOrejkdHrm/gRPLPXnr7dqmuGFX39 ebw1lpwV6GOlL1gow4S+zQW/a59dRqYT8ihbEMjEx8+gwydtLZvGq/xo3pHFGn4V SLCORaFfnPfn+WRG9N/O6NWec0pd6KI= -----END CERTIFICATE-----Generated at Wed Jan 21 00:55:52 2026 by rpki-client