This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa File: 72d9f07c-a11c-33df-ab2e-319967d0580d.roa (raw, json) Hash identifier: KwdenqmFgUl28fnUxUjP2SSA0dgYWEJpEu3eP6pRH+4= Subject key identifier: FA:A9:7E:F1:12:EC:9A:7C:0F:25:24:AB:B3:38:DA:F0:20:7D:76:0D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BEDB5E4C2E1005D09A8BB3880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:e4:c2:e1:00:5d:09:a8:bb:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=f38aee30-873c-487f-b586-d8fe2aa92971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:c7:16:ab:0f:4c:75:76:02:d9:d7:68:27: ca:53:31:9b:7f:79:a8:f6:06:fc:d0:5e:4c:33:3b: 8d:9b:ea:e5:13:50:42:0b:ce:f0:82:a3:14:c0:e7: 5e:42:73:ea:8c:b2:5f:dc:66:0f:97:12:ad:ec:0f: 23:5f:ba:3b:64:4e:46:94:25:fb:8e:4e:38:f6:a5: 2c:76:ed:16:37:aa:aa:b7:3c:ae:52:2c:00:83:6d: 48:c9:5e:cf:f9:89:84:32:3a:4a:19:b6:dd:8d:f5: 6e:03:8d:ce:7b:ee:9d:d7:be:b9:b0:3b:17:37:d4: 7b:fa:88:92:89:52:48:57:2c:01:41:95:a9:74:7e: b9:b6:cf:29:87:d9:47:17:b3:7b:8c:67:3c:ef:e7: da:e8:ec:a3:22:98:af:85:ce:d0:ee:35:34:02:f0: ed:a8:81:84:12:09:f0:2b:30:57:d1:90:42:f6:b0: f9:94:aa:54:f5:9e:69:3d:cb:97:a9:8f:f2:5e:04: 4f:3a:3c:91:78:23:cb:c7:2d:73:76:cc:25:f9:a4: 7c:6e:1b:26:58:be:b5:cd:e8:61:2a:70:cc:c3:01: 41:9e:cc:a3:76:1b:19:f8:47:e6:06:96:ef:a6:f1: df:b8:4e:55:17:49:58:ca:8b:3c:98:9d:3f:f7:91: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A9:7E:F1:12:EC:9A:7C:0F:25:24:AB:B3:38:DA:F0:20:7D:76:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/72d9f07c-a11c-33df-ab2e-319967d0580d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a1:37:13:ee:83:ec:c5:ea:35:80:6a:d5:14:ee:73:30:7d: e1:87:48:cb:7e:4d:70:7c:b6:de:6c:cd:c3:a1:de:0d:64:f5: cd:31:9b:87:c8:58:d2:fb:9d:2a:1a:ff:4a:f7:0f:a6:b9:4c: bf:a2:c5:07:ed:ee:24:c2:77:ab:f3:3f:1b:61:a7:07:91:91: 0d:44:d2:67:a5:48:df:a4:8b:62:73:b1:a9:71:61:4e:6a:f2: bd:e0:52:d5:19:03:f7:49:b8:39:7f:fc:8b:dd:7a:18:59:45: 19:b3:4b:14:7f:d4:8e:42:71:52:7a:2e:27:49:88:ed:cd:5d: 04:1a:cb:4b:cc:10:f7:45:bb:11:a7:95:3c:05:54:f6:5f:60: 0f:bd:e7:7d:60:ee:74:10:1b:27:e6:c8:a7:a4:29:58:79:16: 34:44:4c:d3:b2:74:8e:ab:4c:27:fa:52:63:0f:19:7f:eb:6c: f5:3e:7e:e0:a4:91:e1:ab:f8:2e:7c:67:94:cb:48:8f:0c:41: a9:7a:10:f3:c3:05:66:ce:0a:4d:80:7c:9b:05:f6:0d:c3:1e: 3e:89:fa:ee:89:29:92:9b:47:2c:a3:9f:2c:77:67:e0:73:74: fd:bf:dd:10:57:0e:3a:4d:52:68:3b:e2:3b:11:85:a8:e1:a5: 7b:fa:24:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvtteTC4QBdCai7OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjM4YWVlMzAtODczYy00ODdmLWI1ODYtZDhmZTJhYTkyOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS7HFqsPTHV2AtnXaCfKUzGbf3mo9gb80F5M MzuNm+rlE1BCC87wgqMUwOdeQnPqjLJf3GYPlxKt7A8jX7o7ZE5GlCX7jk449qUs du0WN6qqtzyuUiwAg21IyV7P+YmEMjpKGbbdjfVuA43Oe+6d1765sDsXN9R7+oiS iVJIVywBQZWpdH65ts8ph9lHF7N7jGc87+fa6OyjIpivhc7Q7jU0AvDtqIGEEgnw KzBX0ZBC9rD5lKpU9Z5pPcuXqY/yXgRPOjyReCPLxy1zdswl+aR8bhsmWL61zehh KnDMwwFBnsyjdhsZ+EfmBpbvpvHfuE5VF0lYyos8mJ0/95FFVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqpfvES7Jp8DyUkq7M42vAgfXYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzJkOWYwN2MtYTExYy0z M2RmLWFiMmUtMzE5OTY3ZDA1ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCETMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmhNxPug+zF6jWAatUU7nMwfeGHSMt+TXB8tt5szcOh3g1k9c0xm4fI WNL7nSoa/0r3D6a5TL+ixQft7iTCd6vzPxthpweRkQ1E0melSN+ki2JzsalxYU5q 8r3gUtUZA/dJuDl//IvdehhZRRmzSxR/1I5CcVJ6LidJiO3NXQQay0vMEPdFuxGn lTwFVPZfYA+9531g7nQQGyfmyKekKVh5FjRETNOydI6rTCf6UmMPGX/rbPU+fuCk keGr+C58Z5TLSI8MQal6EPPDBWbOCk2AfJsF9g3DHj6J+u6JKZKbRyyjnyx3Z+Bz dP2/3RBXDjpNUmg74jsRhajhpXv6JHI= -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:58 2025 by rpki-client