This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/582c9230-96ab-3e98-b9e4-388350b12133.roa File: 582c9230-96ab-3e98-b9e4-388350b12133.roa (raw, json) Hash identifier: 5eaabhWakv8Q7qehmJfP+n/9gfy+48uRmnv+8N4DEaM= Subject key identifier: ED:9D:CB:54:41:D4:8B:C1:B3:2B:FF:A3:29:97:4F:13:75:B8:03:E1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C84770739C753F730788D8B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/582c9230-96ab-3e98-b9e4-388350b12133.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:77:07:39:c7:53:f7:30:78:8d:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=2d12cae0-3e0f-4711-a882-36ed687de7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:95:19:60:46:55:e8:ea:c0:57:71:66:dc: df:3d:71:25:6f:b2:85:74:0c:07:73:1a:8f:75:ad: cd:bc:70:65:d8:ad:08:e5:b5:93:9e:e4:9c:e4:4e: 26:96:94:8b:2f:42:a5:4c:ba:f8:68:ce:b3:17:95: 58:40:47:b0:94:5f:81:62:2f:86:b7:4c:41:7f:b5: 5c:60:6d:03:63:41:fa:38:cf:d6:18:79:41:65:89: 5e:61:c6:78:87:5c:e9:84:09:e9:10:92:9c:56:c0: 39:50:79:fa:f4:f1:e1:b8:c8:e5:00:79:af:f3:61: 08:eb:93:6d:56:6f:7c:ca:4d:d3:f0:84:34:ce:98: 53:ae:cd:92:3d:3d:01:e8:83:a5:e8:d3:43:55:87: c3:fc:08:98:fc:cb:e2:24:b2:19:b9:a3:c5:9d:6f: 50:1b:ea:da:38:22:06:ba:da:19:91:47:20:70:56: 13:97:c4:cd:81:91:28:99:6a:0b:9e:a6:34:f4:74: 4f:8f:f4:66:8a:9e:1a:15:45:20:53:fb:58:65:2c: a2:82:00:13:97:bd:45:0c:36:05:19:77:58:e5:fd: 4b:79:76:cf:d2:a6:91:68:8a:ab:83:8c:39:91:3b: 86:9c:b5:32:77:8b:06:1e:7e:0f:5f:3e:d3:a3:d2: 2f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9D:CB:54:41:D4:8B:C1:B3:2B:FF:A3:29:97:4F:13:75:B8:03:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/582c9230-96ab-3e98-b9e4-388350b12133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:63:d9:cc:4e:d5:a0:05:90:74:e9:a6:e6:92:64:52:de:e9: 1f:4c:07:67:b2:7d:6e:d1:65:a5:06:3f:a2:09:cd:e6:32:ce: 44:c8:17:72:fc:23:82:70:52:bd:10:7c:07:3c:0e:b7:08:29: b4:82:ac:49:47:c9:ef:57:2e:79:bf:3f:db:4d:87:be:e0:aa: 95:9e:a3:bf:8c:c3:ca:33:9f:8b:ea:a4:96:4e:81:d5:d1:45: 3a:70:c0:76:40:e1:a4:0d:0a:ef:86:cd:e0:ae:b8:9a:79:3f: 80:3a:f7:a7:db:8b:56:86:fa:21:af:9a:ab:d5:6e:ee:6f:92: a3:51:56:7d:8a:cf:15:75:7a:20:a1:f3:3b:b0:b4:4e:85:7e: bf:e8:04:26:4e:74:e8:9d:2d:ca:f9:97:a9:71:03:b6:ea:3b: 8f:fe:5f:10:93:54:a1:ea:43:4b:ce:51:b2:c1:82:f9:48:d8: cc:75:65:49:e9:30:00:02:d6:63:b3:9a:d0:e7:37:e0:e4:62: e1:5c:8d:14:a8:32:71:c0:84:42:4c:6b:4f:5c:a1:46:dc:bd: 6a:b2:26:09:b7:33:3a:f1:70:d5:53:b1:d8:09:31:79:a3:c1: 42:98:c5:58:6e:31:54:b6:5a:83:f4:70:32:48:d8:d5:45:f6: ab:c4:76:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwc5x1P3MHiNi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk MmQxMmNhZTAtM2UwZi00NzExLWE4ODItMzZlZDY4N2RlN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjmVGWBGVejqwFdxZtzfPXElb7KFdAwHcxqP da3NvHBl2K0I5bWTnuSc5E4mlpSLL0KlTLr4aM6zF5VYQEewlF+BYi+Gt0xBf7Vc YG0DY0H6OM/WGHlBZYleYcZ4h1zphAnpEJKcVsA5UHn69PHhuMjlAHmv82EI65Nt Vm98yk3T8IQ0zphTrs2SPT0B6IOl6NNDVYfD/AiY/MviJLIZuaPFnW9QG+raOCIG utoZkUcgcFYTl8TNgZEomWoLnqY09HRPj/Rmip4aFUUgU/tYZSyiggATl71FDDYF GXdY5f1LeXbP0qaRaIqrg4w5kTuGnLUyd4sGHn4PXz7To9IvgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2dy1RB1IvBsyv/oymXTxN1uAPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTgyYzkyMzAtOTZhYi0z ZTk4LWI5ZTQtMzg4MzUwYjEyMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBj2cxO1aAFkHTppuaSZFLe6R9MB2eyfW7RZaUGP6IJzeYyzkTIF3L8 I4JwUr0QfAc8DrcIKbSCrElHye9XLnm/P9tNh77gqpWeo7+Mw8ozn4vqpJZOgdXR RTpwwHZA4aQNCu+GzeCuuJp5P4A696fbi1aG+iGvmqvVbu5vkqNRVn2KzxV1eiCh 8zuwtE6Ffr/oBCZOdOidLcr5l6lxA7bqO4/+XxCTVKHqQ0vOUbLBgvlI2Mx1ZUnp MAAC1mOzmtDnN+DkYuFcjRSoMnHAhEJMa09coUbcvWqyJgm3MzrxcNVTsdgJMXmj wUKYxVhuMVS2WoP0cDJI2NVF9qvEdps= -----END CERTIFICATE-----Generated at Wed Jan 21 01:01:31 2026 by rpki-client