This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/73bef919-66f8-303b-95b1-221664a1d714.roa File: 73bef919-66f8-303b-95b1-221664a1d714.roa (raw, json) Hash identifier: 5lIzWAY7YrR4HBjPn/Vcz86aP1UlzadkdMY/RZAfQV0= Subject key identifier: A6:4D:01:D2:0A:FB:FF:BE:B3:14:72:65:10:D4:B0:81:68:07:65:DE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD7605E87221B4E6E71EB6000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/73bef919-66f8-303b-95b1-221664a1d714.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:5e:87:22:1b:4e:6e:71:eb:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=900b9443-2c8d-4ccd-bab4-07221b653979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:e5:e3:24:72:a4:2f:10:30:9c:c6:ca:1f: ce:20:95:3d:ee:f2:ef:4d:db:6a:16:a4:91:f6:56: 58:b8:b8:5e:f7:06:9c:ea:0d:67:e7:f7:a9:2b:d5: 3a:eb:4a:71:af:58:c3:1d:f1:20:a4:f7:0f:b5:14: 53:cb:bf:6c:e0:ca:76:ae:61:40:bc:6d:fe:1f:b9: 89:fc:1a:81:df:b4:50:c3:f2:dc:fc:3d:30:84:5b: d3:6b:60:cb:86:7d:16:4d:5b:0a:84:a4:cf:9e:2b: 45:ac:07:0e:a1:f9:67:41:12:77:66:15:89:8d:f0: dc:28:c4:84:cb:ef:34:61:aa:97:05:94:bc:bb:91: 2e:bf:db:03:4a:23:3a:c1:ac:e8:67:9f:55:9b:70: 82:c9:bf:44:1f:62:c7:a2:ce:6b:3f:5c:d1:1f:38: 6e:6e:d0:ff:ac:af:15:12:de:5b:59:5a:16:07:34: f0:97:99:c2:02:d7:32:12:5a:40:f4:10:0d:79:2f: e1:ab:e8:6a:32:50:43:55:60:68:01:33:f0:ac:de: cb:80:c7:ca:7f:1e:e2:bd:35:42:2f:82:06:a8:7a: a7:23:e3:2c:2d:49:67:80:ba:77:dd:d3:1c:da:8d: b6:3d:ce:db:26:72:09:72:ac:3f:b0:5e:b1:f9:d2: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:01:D2:0A:FB:FF:BE:B3:14:72:65:10:D4:B0:81:68:07:65:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/73bef919-66f8-303b-95b1-221664a1d714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:20:37:92:80:c4:3a:09:b9:f8:1a:11:cb:02:5e:7c:af:07: a7:83:c2:91:c5:b7:be:e6:06:a2:dc:ba:b3:0c:a5:de:f1:50: 9d:00:80:06:1a:92:03:b8:30:80:59:c4:eb:91:ac:5b:0c:2c: a3:ac:17:79:55:57:32:c4:84:ce:da:29:4d:f7:69:47:ed:88: c3:fc:71:6e:2c:88:f7:d3:22:4c:3d:25:ff:80:79:fc:e9:b2: 83:83:85:36:24:bf:87:d3:0c:49:c9:4d:d7:07:a7:65:86:6d: 01:fb:3d:85:f6:27:89:4a:d8:8a:1e:55:0a:0b:08:b5:db:9d: 66:dc:96:a1:55:97:4b:c6:98:5b:32:77:63:27:8f:8a:57:a4: 7a:73:7d:32:a6:91:7f:b3:72:cd:7a:cd:64:d1:3b:a8:15:d0: 5b:50:f5:de:a7:b1:0b:0b:94:8e:b6:82:14:c1:45:06:c4:95: 64:78:a0:c0:e7:88:bb:41:d3:44:5a:ab:ad:2f:1b:74:b9:2d: 5f:19:e5:97:ff:fc:ed:17:84:7d:75:c0:1a:c8:67:5c:f4:a6: b9:19:ed:27:d1:20:fa:4a:0d:59:7c:d7:86:7d:a6:4d:59:dd: ac:12:64:55:5a:06:02:47:51:b9:b4:1b:19:a0:c2:3b:1a:b2: 26:00:4f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvXYF6HIhtObnHrYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk OTAwYjk0NDMtMmM4ZC00Y2NkLWJhYjQtMDcyMjFiNjUzOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne7l4yRypC8QMJzGyh/OIJU97vLvTdtqFqSR 9lZYuLhe9wac6g1n5/epK9U660pxr1jDHfEgpPcPtRRTy79s4Mp2rmFAvG3+H7mJ /BqB37RQw/Lc/D0whFvTa2DLhn0WTVsKhKTPnitFrAcOoflnQRJ3ZhWJjfDcKMSE y+80YaqXBZS8u5Euv9sDSiM6wazoZ59Vm3CCyb9EH2LHos5rP1zRHzhubtD/rK8V Et5bWVoWBzTwl5nCAtcyElpA9BANeS/hq+hqMlBDVWBoATPwrN7LgMfKfx7ivTVC L4IGqHqnI+MsLUlngLp33dMc2o22Pc7bJnIJcqw/sF6x+dJSCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZNAdIK+/++sxRyZRDUsIFoB2XeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzNiZWY5MTktNjZmOC0z MDNiLTk1YjEtMjIxNjY0YTFkNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEgN5KAxDoJufgaEcsCXnyvB6eDwpHFt77mBqLcurMMpd7xUJ0AgAYa kgO4MIBZxOuRrFsMLKOsF3lVVzLEhM7aKU33aUftiMP8cW4siPfTIkw9Jf+Aefzp soODhTYkv4fTDEnJTdcHp2WGbQH7PYX2J4lK2IoeVQoLCLXbnWbclqFVl0vGmFsy d2Mnj4pXpHpzfTKmkX+zcs16zWTRO6gV0FtQ9d6nsQsLlI62ghTBRQbElWR4oMDn iLtB00Raq60vG3S5LV8Z5Zf//O0XhH11wBrIZ1z0prkZ7SfRIPpKDVl814Z9pk1Z 3awSZFVaBgJHUbm0GxmgwjsasiYAT0g= -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:18 2025 by rpki-client