This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5937f320-e64d-3772-84e9-bde88f69a677.roa File: 5937f320-e64d-3772-84e9-bde88f69a677.roa (raw, json) Hash identifier: fFtccvS0ecmWUtcL1yJX+czecOD4pmMmTQF/Gon7VFQ= Subject key identifier: 97:7A:4F:DD:E5:9F:03:BA:27:D6:D5:86:44:69:B7:97:B6:35:05:CF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BEDB5E48A8036E7500E01BF80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5937f320-e64d-3772-84e9-bde88f69a677.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:e4:8a:80:36:e7:50:0e:01:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=a2d89379-eced-479e-aa7a-9b45d620c286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:82:3c:92:91:61:b5:3f:37:a0:a0:02:f8:33: ab:e6:b1:22:ee:0a:cb:72:0c:9d:76:66:2a:27:1f: 8f:cf:c3:79:36:13:ec:44:56:a9:1c:f2:dc:6c:88: 36:1d:5d:f6:83:39:f7:14:af:2a:04:13:96:31:84: 0a:e9:7d:ab:46:93:d4:b8:03:69:c2:16:c5:43:3d: 4c:99:9c:9f:f4:7b:bd:54:b9:ae:24:67:ac:0f:14: 8d:eb:fd:07:ae:88:87:4e:c5:a4:69:1c:1f:6f:eb: ba:b7:0d:38:de:b5:5c:ed:13:c6:91:34:d6:5c:35: 65:77:d3:81:6f:63:e1:92:69:88:6e:c5:84:d4:60: a8:fb:c6:55:06:f6:ed:27:02:ff:24:44:d2:9d:c0: 94:f1:8c:68:e4:15:a6:3b:1c:58:46:71:39:74:97: 32:59:a5:d7:5c:18:be:53:20:47:a7:03:b9:2a:59: c0:b9:66:cb:37:a6:08:de:75:b6:b7:67:41:df:f9: 25:05:14:48:c7:fc:ed:73:a9:a8:65:88:87:7d:e4: 03:8f:45:85:72:36:07:c7:8d:c8:35:7f:60:10:8c: ec:2f:b4:19:c5:07:56:97:ea:2d:98:8f:47:c0:49: ea:25:1d:0f:23:9d:76:0c:fe:9b:11:13:17:20:d9: 29:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7A:4F:DD:E5:9F:03:BA:27:D6:D5:86:44:69:B7:97:B6:35:05:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5937f320-e64d-3772-84e9-bde88f69a677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1a:df:a8:ec:8b:b0:e9:04:04:ae:88:c0:fc:9c:cf:5b:32: ce:28:85:7f:07:82:ce:68:68:d0:72:08:45:69:2b:a0:a0:07: 14:64:c0:e1:14:bb:8a:cb:35:e6:51:a9:21:5b:ae:52:e4:44: e6:7d:46:64:39:64:2a:b4:30:4c:e9:94:63:22:24:76:be:a8: 08:77:f0:cf:2d:72:28:24:d8:21:d7:1c:e7:f2:99:95:1c:f3: 37:a5:92:a7:20:34:c3:73:30:35:c5:19:23:f3:4c:2b:45:d4: 3d:a5:5d:94:f1:2e:9e:36:b8:a7:d5:10:7a:ed:b5:61:ac:02: 8a:93:0b:61:c1:f4:c2:57:a2:ce:70:cb:38:44:09:a7:be:40: 98:0a:f1:05:6c:53:7b:ba:4c:73:30:3e:9c:fb:52:6c:82:a8: f9:72:e5:31:56:53:0f:74:10:33:90:58:22:74:98:58:07:9e: 91:b3:6d:21:29:28:e5:10:f2:27:a8:55:b1:e0:48:fa:0a:d1: 23:2a:4e:bb:20:4f:4c:19:aa:62:92:77:92:f1:9a:c9:3b:8b: d0:81:f8:33:22:0b:32:4e:7c:ae:3b:21:d0:9a:77:5a:3d:3b: e0:ee:94:ee:b3:a9:4d:a8:83:aa:b1:ed:d1:2a:1b:e6:ff:e8: a0:7a:0c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvtteSKgDbnUA4Bv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk YTJkODkzNzktZWNlZC00NzllLWFhN2EtOWI0NWQ2MjBjMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4I8kpFhtT83oKAC+DOr5rEi7grLcgyddmYq Jx+Pz8N5NhPsRFapHPLcbIg2HV32gzn3FK8qBBOWMYQK6X2rRpPUuANpwhbFQz1M mZyf9Hu9VLmuJGesDxSN6/0HroiHTsWkaRwfb+u6tw043rVc7RPGkTTWXDVld9OB b2PhkmmIbsWE1GCo+8ZVBvbtJwL/JETSncCU8Yxo5BWmOxxYRnE5dJcyWaXXXBi+ UyBHpwO5KlnAuWbLN6YI3nW2t2dB3/klBRRIx/ztc6moZYiHfeQDj0WFcjYHx43I NX9gEIzsL7QZxQdWl+otmI9HwEnqJR0PI512DP6bERMXINkpCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd6T93lnwO6J9bVhkRpt5e2NQXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNTkzN2YzMjAtZTY0ZC0z NzcyLTg0ZTktYmRlODhmNjlhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEa36jsi7DpBASuiMD8nM9bMs4ohX8Hgs5oaNByCEVpK6CgBxRkwOEU u4rLNeZRqSFbrlLkROZ9RmQ5ZCq0MEzplGMiJHa+qAh38M8tcigk2CHXHOfymZUc 8zelkqcgNMNzMDXFGSPzTCtF1D2lXZTxLp42uKfVEHrttWGsAoqTC2HB9MJXos5w yzhECae+QJgK8QVsU3u6THMwPpz7UmyCqPly5TFWUw90EDOQWCJ0mFgHnpGzbSEp KOUQ8ieoVbHgSPoK0SMqTrsgT0wZqmKSd5Lxmsk7i9CB+DMiCzJOfK47IdCad1o9 O+DulO6zqU2og6qx7dEqG+b/6KB6DAM= -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:21 2025 by rpki-client