This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/56f7c880-8e8b-3593-9681-d656157a4812.roa File: 56f7c880-8e8b-3593-9681-d656157a4812.roa (raw, json) Hash identifier: CMeX/7HzUG3AWtMuA5eJ3WAlSqY7gFe1R+7kU4ibwv8= Subject key identifier: ED:9B:D2:26:84:6C:20:F6:C1:38:09:B1:3E:C8:61:01:D9:0F:D7:F6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE555DD2C63F4AAC72B12F900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/56f7c880-8e8b-3593-9681-d656157a4812.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:dd:2c:63:f4:aa:c7:2b:12:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=31b816db-f9b6-4e33-9b4f-beb08af72b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3a:49:97:98:59:37:64:ae:c2:cc:43:78:22: b5:61:a7:7b:3e:42:1a:c0:d7:16:42:a2:14:f3:44: 96:28:85:41:a2:8d:a5:ab:53:a3:c9:41:0d:79:48: 58:71:9f:53:6f:2c:6a:85:a7:b8:8a:3e:bb:6f:dc: 58:42:0c:c7:77:82:d4:43:a2:0f:39:09:32:12:3a: 45:93:fb:3a:ae:86:f4:ba:93:03:28:d9:96:58:cd: f3:5a:81:c6:db:e3:11:b6:81:57:d7:fb:5a:24:24: 37:21:ec:ef:4d:9e:e7:22:a7:4a:34:c1:b9:3a:39: 59:96:ae:0b:cb:ea:25:1f:25:27:90:46:83:14:0a: 2e:d5:dc:0f:46:55:5a:a6:1f:54:10:49:f4:34:ae: 2e:48:7c:39:c4:9d:e6:c5:f3:d8:d2:e3:fd:08:fb: bd:87:1e:80:6c:e2:c4:13:b8:0f:6c:ca:0d:35:4f: 1a:5b:97:be:f5:74:19:82:88:d5:91:0c:1f:65:4a: d4:75:03:90:07:b7:1a:fb:d6:ba:3f:4f:8e:db:3c: 80:c3:34:57:08:96:8f:bc:f8:83:02:44:b7:53:b1: 43:d1:da:f8:c3:a7:67:5d:f2:5c:6d:7d:3c:7b:6e: 3c:00:94:8d:b7:fe:b8:a6:f0:30:ac:d8:70:0d:94: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9B:D2:26:84:6C:20:F6:C1:38:09:B1:3E:C8:61:01:D9:0F:D7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/56f7c880-8e8b-3593-9681-d656157a4812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1d:3d:56:24:8d:a6:47:ce:f2:78:a5:0a:39:71:59:04:ae: f2:a9:98:fb:a1:f1:7c:33:7a:46:ca:74:9e:a9:f5:c2:a2:97: 0a:58:6a:e4:dd:6c:80:77:90:06:9b:bb:75:69:ca:ec:d7:53: b3:87:a3:29:85:ab:3d:9e:52:00:27:f7:56:17:a0:40:c3:7e: 38:da:2c:fe:21:f2:71:88:92:8e:5f:6b:37:d9:4e:2c:c8:f7: f7:ab:79:a8:9d:41:41:7d:69:10:ab:e1:4d:96:3c:5e:b8:c5: 41:96:ff:25:b2:44:a4:e1:ef:f0:c9:04:c9:91:70:5e:bb:ab: 6e:f3:92:02:3f:8d:37:a9:20:08:62:e3:57:f9:a3:bf:f0:0a: 1e:4d:8c:62:44:81:74:0b:5c:2c:27:a1:4b:2e:8d:41:a7:b7: 4b:cd:31:24:38:46:cd:6a:0b:ab:5d:08:99:49:44:90:8e:6a: e9:c4:34:ed:2d:cf:29:94:03:c9:45:4c:5d:d3:d7:5f:5a:4d: 7e:9b:31:1f:44:d5:8d:04:a9:cc:6e:07:d3:50:19:d7:6a:dd: 8a:54:71:c5:53:12:ae:3c:bb:c5:d7:ac:19:60:b8:58:35:5e: 40:09:46:16:18:d0:61:5a:77:db:bd:74:e2:f9:8a:6c:ae:9f: 19:81:ae:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVd0sY/SqxysS+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk MzFiODE2ZGItZjliNi00ZTMzLTliNGYtYmViMDhhZjcyYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizpJl5hZN2SuwsxDeCK1Yad7PkIawNcWQqIU 80SWKIVBoo2lq1OjyUENeUhYcZ9Tbyxqhae4ij67b9xYQgzHd4LUQ6IPOQkyEjpF k/s6rob0upMDKNmWWM3zWoHG2+MRtoFX1/taJCQ3IezvTZ7nIqdKNMG5OjlZlq4L y+olHyUnkEaDFAou1dwPRlVaph9UEEn0NK4uSHw5xJ3mxfPY0uP9CPu9hx6AbOLE E7gPbMoNNU8aW5e+9XQZgojVkQwfZUrUdQOQB7ca+9a6P0+O2zyAwzRXCJaPvPiD AkS3U7FD0dr4w6dnXfJcbX08e248AJSNt/64pvAwrNhwDZRxIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2b0iaEbCD2wTgJsT7IYQHZD9f2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTZmN2M4ODAtOGU4Yi0z NTkzLTk2ODEtZDY1NjE1N2E0ODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMdPVYkjaZHzvJ4pQo5cVkErvKpmPuh8XwzekbKdJ6p9cKilwpYauTd bIB3kAabu3VpyuzXU7OHoymFqz2eUgAn91YXoEDDfjjaLP4h8nGIko5fazfZTizI 9/ereaidQUF9aRCr4U2WPF64xUGW/yWyRKTh7/DJBMmRcF67q27zkgI/jTepIAhi 41f5o7/wCh5NjGJEgXQLXCwnoUsujUGnt0vNMSQ4Rs1qC6tdCJlJRJCOaunENO0t zymUA8lFTF3T119aTX6bMR9E1Y0EqcxuB9NQGddq3YpUccVTEq48u8XXrBlguFg1 XkAJRhYY0GFad9u9dOL5imyunxmBrrk= -----END CERTIFICATE-----Generated at Sat Dec 6 16:09:39 2025 by rpki-client