This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa File: 785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa (raw, json) Hash identifier: CpO+xXgz3F0Z3E2O1RMS7K/t+4nT4lIRrIN/8SIFUlo= Subject key identifier: 2F:FF:36:2C:1E:E9:59:5F:60:2E:64:98:70:A9:FE:10:5F:4A:65:4E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BDB906D620EE73AF5FEFC1100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa Signing time: Fri 14 Nov 2025 14:00:37 +0000 ROA not before: Fri 14 Nov 2025 14:00:37 +0000 ROA not after: Thu 12 Feb 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:db:90:6d:62:0e:e7:3a:f5:fe:fc:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 14 14:00:37 2025 GMT Not After : Feb 12 14:00:37 2026 GMT Subject: CN=f981842b-054e-4f44-8c2a-0651d812a676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:b2:6c:09:1d:f1:dc:8a:18:49:f8:76:53: 5c:61:e2:e1:af:12:f3:8c:c2:a2:c9:60:b0:c9:ce: 4e:e1:47:2b:17:73:af:d3:1f:a0:15:08:71:e9:25: 5b:9e:97:3c:8a:a3:ae:de:d9:94:1c:ba:7f:db:92: 63:1c:7f:de:98:5b:1f:80:33:20:3f:5f:42:17:cd: 63:d1:74:04:2f:46:07:1b:38:57:c9:fa:51:93:2d: 67:59:2d:96:96:24:ad:49:81:a0:73:0c:ae:5a:ca: 29:05:10:f6:cc:dd:43:a0:f2:6d:04:fc:36:06:0b: 21:12:8e:8d:0c:21:82:22:60:05:e9:2e:f4:a9:d9: 76:fd:ab:b8:b8:3f:4d:e7:f0:7a:6d:b6:b7:b8:6c: 1c:c0:26:33:9c:f3:35:c7:40:40:c9:9b:26:aa:60: 16:ad:f1:91:e3:92:19:49:0a:d2:61:b7:03:f4:b8: c2:82:45:fd:5e:51:aa:11:db:01:2f:ae:56:a6:84: 52:89:65:08:c3:a7:2e:06:f2:f4:68:27:8e:1f:0e: 7c:b9:22:91:52:7e:58:7a:ff:3f:dd:e7:e3:25:a0: 31:57:3a:0e:3f:21:32:53:7a:2f:a2:7c:ca:2b:4b: 52:41:53:fd:cd:c7:b2:af:7d:35:d6:2f:d7:77:a4: 38:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FF:36:2C:1E:E9:59:5F:60:2E:64:98:70:A9:FE:10:5F:4A:65:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/785ef6c1-0f29-3372-a80f-ce269e76b5bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ec:9f:11:50:9d:36:dd:2f:a6:e2:c0:da:93:65:d6:56:9f: 5f:fc:1e:a2:bc:39:19:5a:68:0e:31:95:47:8f:ab:3e:c5:0c: 43:61:6a:e7:72:9d:27:2b:0b:3d:5b:c4:d9:f8:a0:a4:96:d9: 82:bc:c2:b3:da:fa:56:ea:23:33:fa:3e:18:e3:b6:e9:bc:72: 50:73:e7:dd:09:54:26:a5:40:a6:f0:29:6c:cf:31:16:66:7d: a7:50:a2:66:17:6e:70:ed:7d:9f:a4:7d:67:58:cc:10:75:0f: 9e:5c:e7:9f:31:67:f8:22:0e:dc:03:0e:bc:70:f5:2d:34:e6: 8b:8e:09:09:9f:b4:af:16:5f:ec:c9:0e:04:3e:9d:a2:25:c8: 78:89:67:22:bc:40:d7:37:54:9f:38:26:07:e6:9c:dc:d2:ad: 06:cf:8b:6e:78:02:5f:68:28:8f:0c:0f:a8:f0:37:5f:ed:81: f4:8b:7d:eb:43:8a:85:23:c0:8a:69:02:88:ad:7f:2d:eb:2d: 11:5f:26:91:3c:45:0d:44:db:e5:2d:9a:57:3b:5f:ef:9b:db: cf:85:c1:39:2c:6d:32:a0:fd:61:d5:71:77:68:ff:85:63:f0: d6:88:64:47:a0:d8:d9:30:5b:99:04:7e:b9:fd:ef:ab:dc:22: db:f0:06:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvbkG1iDuc69f78EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExNDE0MDAzN1oXDTI2MDIxMjE0MDAzN1owLzEtMCsGA1UEAxMk Zjk4MTg0MmItMDU0ZS00ZjQ0LThjMmEtMDY1MWQ4MTJhNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArguybAkd8dyKGEn4dlNcYeLhrxLzjMKiyWCw yc5O4UcrF3Ov0x+gFQhx6SVbnpc8iqOu3tmUHLp/25JjHH/emFsfgDMgP19CF81j 0XQEL0YHGzhXyfpRky1nWS2WliStSYGgcwyuWsopBRD2zN1DoPJtBPw2BgshEo6N DCGCImAF6S70qdl2/au4uD9N5/B6bba3uGwcwCYznPM1x0BAyZsmqmAWrfGR45IZ SQrSYbcD9LjCgkX9XlGqEdsBL65WpoRSiWUIw6cuBvL0aCeOHw58uSKRUn5Yev8/ 3efjJaAxVzoOPyEyU3ovonzKK0tSQVP9zceyr3011i/Xd6Q4KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC//Niwe6VlfYC5kmHCp/hBfSmVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzg1ZWY2YzEtMGYyOS0z MzcyLWE4MGYtY2UyNjllNzZiNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnsnxFQnTbdL6biwNqTZdZWn1/8HqK8ORlaaA4xlUePqz7FDENhaudy nScrCz1bxNn4oKSW2YK8wrPa+lbqIzP6Phjjtum8clBz590JVCalQKbwKWzPMRZm fadQomYXbnDtfZ+kfWdYzBB1D55c558xZ/giDtwDDrxw9S005ouOCQmftK8WX+zJ DgQ+naIlyHiJZyK8QNc3VJ84JgfmnNzSrQbPi254Al9oKI8MD6jwN1/tgfSLfetD ioUjwIppAoitfy3rLRFfJpE8RQ1E2+Utmlc7X++b28+FwTksbTKg/WHVcXdo/4Vj 8NaIZEeg2NkwW5kEfrn976vcItvwBkQ= -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:26 2025 by rpki-client