This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa File: 6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa (raw, json) Hash identifier: mmRZQxKggHPQp6fHSVoCa5mS/avYKNgYTw55t5vmYBo= Subject key identifier: 32:98:B1:83:22:28:CC:89:45:F9:19:94:1E:6B:F4:8C:DF:28:FF:76 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE555DDF1ACF19C8F69CDE900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:dd:f1:ac:f1:9c:8f:69:cd:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=cce933dc-4179-4012-9846-f1cbb02f3e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8f:60:14:73:49:10:15:56:6d:7a:e1:c4:8f: d9:7d:30:2b:99:4f:81:07:4f:4a:34:a6:a7:c4:5f: 3f:b1:be:c0:f8:db:1b:9b:96:e1:45:ae:f0:18:36: 5b:19:b8:af:d9:e1:b0:3b:d2:5d:8b:7d:ed:90:12: 06:62:b7:68:6c:29:5d:52:23:39:95:2b:d3:59:7b: ad:71:31:d5:a3:3d:f5:b4:10:83:e7:c1:b1:ac:01: 72:fd:63:08:13:c9:22:32:e4:61:59:71:50:a2:bc: b7:37:a9:da:a9:92:f8:53:b8:ab:6e:c7:93:52:3e: 6a:85:d6:d8:83:b2:58:8a:18:9e:e5:69:a2:78:2f: 43:67:af:1b:2e:93:ab:eb:8d:a4:46:22:66:77:35: d5:b3:5f:f0:37:c5:b8:b9:52:31:d2:d7:1c:45:08: 4d:47:28:4a:09:2b:f6:d7:df:6e:24:86:58:f0:59: 5c:92:f7:12:e3:de:d2:8e:49:f2:d0:3b:a8:54:20: e2:6a:d7:d7:d3:0e:4c:1f:85:1c:9c:3d:a2:d3:23: fb:04:32:90:14:ae:21:e5:d5:f3:f8:de:18:78:b0: fa:49:6a:5a:ff:f4:bd:54:7c:66:90:64:f4:65:11: b3:56:4e:2e:b3:9b:3a:ca:1e:51:fc:da:e2:da:ec: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:B1:83:22:28:CC:89:45:F9:19:94:1E:6B:F4:8C:DF:28:FF:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6e526c03-6ca8-3ab3-84ba-cd4e6d4d31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1e:23:25:10:42:2d:70:23:6f:e6:4e:0a:a9:39:06:23:1c: 8e:98:37:1d:ab:79:a6:15:bd:72:bc:04:e5:de:b5:d4:3c:e9: 67:a1:b5:69:7a:53:3c:4e:f4:3b:34:14:70:66:19:e3:7c:8a: 18:f5:d0:62:0f:a7:6e:f3:f1:c1:b9:46:9c:3a:98:8a:c9:fb: a6:05:ca:b3:f9:d1:89:26:7d:46:e7:1a:b0:1e:96:54:46:d0: 0e:b1:fa:9a:22:81:af:f1:dc:d7:aa:56:d0:4e:d8:d7:c0:c2: 32:a1:f4:54:62:67:e2:d7:fd:7c:85:65:e1:03:05:03:f4:6b: 41:d3:47:14:ca:fb:24:83:98:c1:6f:99:da:3b:6d:72:14:c1: 18:97:bd:da:1e:12:45:03:92:aa:38:62:09:29:59:6a:37:00: 30:31:93:56:9d:28:d4:20:88:8d:2c:85:22:78:dd:ea:b3:b6: 92:2b:a4:20:b4:f2:69:2a:38:e7:06:fe:0e:6d:9d:cd:6d:66: 10:59:2f:4b:4c:d5:78:8c:b5:d9:4e:f5:12:43:ca:32:cd:7a: f8:55:a5:93:e0:74:1a:1c:85:a6:f4:17:36:80:e3:a8:82:64: f8:41:3e:88:8a:9d:41:1d:04:60:69:42:46:eb:36:0e:f5:be: 4c:70:b6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVd3xrPGcj2nN6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk Y2NlOTMzZGMtNDE3OS00MDEyLTk4NDYtZjFjYmIwMmYzZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg49gFHNJEBVWbXrhxI/ZfTArmU+BB09KNKan xF8/sb7A+Nsbm5bhRa7wGDZbGbiv2eGwO9Jdi33tkBIGYrdobCldUiM5lSvTWXut cTHVoz31tBCD58GxrAFy/WMIE8kiMuRhWXFQory3N6naqZL4U7irbseTUj5qhdbY g7JYihie5WmieC9DZ68bLpOr642kRiJmdzXVs1/wN8W4uVIx0tccRQhNRyhKCSv2 199uJIZY8FlckvcS497Sjkny0DuoVCDiatfX0w5MH4UcnD2i0yP7BDKQFK4h5dXz +N4YeLD6SWpa//S9VHxmkGT0ZRGzVk4us5s6yh5R/Nri2uwxlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKYsYMiKMyJRfkZlB5r9IzfKP92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNmU1MjZjMDMtNmNhOC0z YWIzLTg0YmEtY2Q0ZTZkNGQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEeIyUQQi1wI2/mTgqpOQYjHI6YNx2reaYVvXK8BOXetdQ86WehtWl6 UzxO9Ds0FHBmGeN8ihj10GIPp27z8cG5Rpw6mIrJ+6YFyrP50YkmfUbnGrAellRG 0A6x+poiga/x3NeqVtBO2NfAwjKh9FRiZ+LX/XyFZeEDBQP0a0HTRxTK+ySDmMFv mdo7bXIUwRiXvdoeEkUDkqo4YgkpWWo3ADAxk1adKNQgiI0shSJ43eqztpIrpCC0 8mkqOOcG/g5tnc1tZhBZL0tM1XiMtdlO9RJDyjLNevhVpZPgdBochab0FzaA46iC ZPhBPoiKnUEdBGBpQkbrNg71vkxwtn8= -----END CERTIFICATE-----Generated at Sat Dec 6 20:41:17 2025 by rpki-client