This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa File: 77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa (raw, json) Hash identifier: JvYV4Z44o1XnAb4GDWPnhtf11A5Azv+ZGBo9nhiC1ZI= Subject key identifier: 43:CE:F6:AC:9F:95:AE:9A:F6:5B:DB:46:BD:06:E4:EE:AE:59:9A:2F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BDB906D9E37D424DE0DC17880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa Signing time: Fri 14 Nov 2025 14:00:37 +0000 ROA not before: Fri 14 Nov 2025 14:00:37 +0000 ROA not after: Thu 12 Feb 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:db:90:6d:9e:37:d4:24:de:0d:c1:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 14 14:00:37 2025 GMT Not After : Feb 12 14:00:37 2026 GMT Subject: CN=8c3b9fe4-4311-4b50-bee2-f6a315ea4dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:57:7a:f4:37:dc:22:11:fb:50:2b:07:2c: 98:a7:c5:62:c7:d3:03:76:2a:97:55:39:f9:11:05: 94:1f:77:6a:df:31:57:39:3b:59:d3:3e:1d:8b:9e: 56:4f:80:9f:af:e6:6d:f1:1c:66:98:e6:5c:68:40: 3d:01:5f:2c:d8:a1:97:16:51:2c:70:be:27:5a:7a: 3a:35:3e:75:ed:da:bd:c2:34:bd:99:d3:bc:35:bb: bd:78:3c:23:54:c2:ed:4c:d5:58:ef:0b:9e:b3:8b: ae:03:48:f7:de:25:f4:aa:7a:47:15:10:50:77:15: d0:98:2e:90:17:89:68:46:4d:16:60:03:f8:5a:db: cc:86:b7:bd:24:f1:22:6b:bc:3b:f7:c6:c3:cb:63: 13:31:16:da:c1:24:83:40:b4:67:ff:b1:61:c8:a1: 1c:d7:e3:98:aa:22:b8:27:af:a3:c8:4a:81:43:6e: ee:c2:9f:0e:47:94:00:27:cb:d9:e9:9b:f6:0d:d5: 09:f7:ad:2b:74:1b:0b:9d:1a:a0:8d:16:82:e2:4d: a1:ce:ae:e1:34:bc:30:e7:e8:49:1b:cf:03:b0:b5: 33:99:8d:e5:3d:5b:c6:7d:8b:5a:1b:fe:4d:9d:cc: 16:7f:a8:46:f0:03:ab:1a:b7:19:88:65:e9:df:b2: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CE:F6:AC:9F:95:AE:9A:F6:5B:DB:46:BD:06:E4:EE:AE:59:9A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/77dcec28-3dd5-33e9-b1bb-17b034a18bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:35:54:07:93:ac:a8:62:5b:d0:2e:69:6d:22:a2:28:bf:dd: a8:79:f1:5d:01:bc:3a:59:ed:b6:3c:f0:7c:f1:d6:3f:23:a1: af:46:91:ae:b2:1b:54:79:bc:e2:e1:d8:5d:2d:be:2a:f9:5e: e2:a4:b0:0e:b3:05:81:87:f4:7f:1a:3f:22:b5:a2:bf:61:06: e1:4a:9f:fe:4d:12:5c:92:29:4a:1c:bd:02:89:c8:21:7b:5e: 17:14:4f:c9:dd:60:fb:9f:5c:d9:9a:f2:d6:03:dd:68:18:4c: 73:2f:35:36:3d:c2:29:9a:de:c7:7c:a4:a5:31:7e:b0:99:fc: 4e:fa:3f:4c:f6:90:e6:33:13:0e:72:31:04:3a:66:c4:4d:4c: c1:2e:51:92:93:c7:be:d1:9c:06:16:e4:45:c9:a7:6a:fd:03: c1:35:93:ed:95:b7:dc:5b:ea:7c:94:1f:f2:c4:21:0d:33:b2: 17:eb:12:f7:51:6e:7c:47:ec:9c:33:27:22:ea:d4:f4:51:86: 38:bd:7c:04:a9:9a:d9:76:89:17:4b:36:a0:0b:cc:d8:0e:9c: 00:5e:ad:a7:99:2a:d5:9e:cc:04:cd:60:fa:d9:f5:43:9a:d2: d1:b1:c2:97:57:c5:c8:3f:2b:49:de:28:fe:ca:60:3f:25:e0: 3f:be:50:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvbkG2eN9Qk3g3BeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExNDE0MDAzN1oXDTI2MDIxMjE0MDAzN1owLzEtMCsGA1UEAxMk OGMzYjlmZTQtNDMxMS00YjUwLWJlZTItZjZhMzE1ZWE0ZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+pXevQ33CIR+1ArByyYp8Vix9MDdiqXVTn5 EQWUH3dq3zFXOTtZ0z4di55WT4Cfr+Zt8RxmmOZcaEA9AV8s2KGXFlEscL4nWno6 NT517dq9wjS9mdO8Nbu9eDwjVMLtTNVY7wues4uuA0j33iX0qnpHFRBQdxXQmC6Q F4loRk0WYAP4WtvMhre9JPEia7w798bDy2MTMRbawSSDQLRn/7FhyKEc1+OYqiK4 J6+jyEqBQ27uwp8OR5QAJ8vZ6Zv2DdUJ960rdBsLnRqgjRaC4k2hzq7hNLww5+hJ G88DsLUzmY3lPVvGfYtaG/5NncwWf6hG8AOrGrcZiGXp37KhOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPO9qyfla6a9lvbRr0G5O6uWZovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzdkY2VjMjgtM2RkNS0z M2U5LWIxYmItMTdiMDM0YTE4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo1VAeTrKhiW9AuaW0ioii/3ah58V0BvDpZ7bY88Hzx1j8joa9Gka6y G1R5vOLh2F0tvir5XuKksA6zBYGH9H8aPyK1or9hBuFKn/5NElySKUocvQKJyCF7 XhcUT8ndYPufXNma8tYD3WgYTHMvNTY9wima3sd8pKUxfrCZ/E76P0z2kOYzEw5y MQQ6ZsRNTMEuUZKTx77RnAYW5EXJp2r9A8E1k+2Vt9xb6nyUH/LEIQ0zshfrEvdR bnxH7JwzJyLq1PRRhji9fASpmtl2iRdLNqALzNgOnABeraeZKtWezATNYPrZ9UOa 0tGxwpdXxcg/K0neKP7KYD8l4D++UAU= -----END CERTIFICATE-----Generated at Sat Dec 6 19:07:45 2025 by rpki-client