This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa File: 78718e56-794a-397d-80d6-334e9fd3e89d.roa (raw, json) Hash identifier: ff0gZAKrkEBW8Zle//horjxugYUXtG6fjR+GLevOZsI= Subject key identifier: 5B:33:F4:25:DB:5C:D6:F4:94:D1:5C:D9:E6:95:F7:7B:AF:CE:4E:E4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C5EC71958EF7B5FACA0FDF500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 8069 IP address blocks: 20.33.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:19:58:ef:7b:5f:ac:a0:fd:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=8125b6e1-2161-41b0-ad2b-f8c2eec0f149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:05:33:76:14:ce:65:34:d7:98:ea:ee:22:5f: 10:17:e0:3a:c1:0e:7e:c1:65:ec:35:13:d5:18:af: 4e:68:11:7c:ea:28:f6:0f:4a:e9:13:21:19:79:67: fd:7f:1e:a7:51:af:93:30:95:31:49:94:44:35:50: 79:f7:a6:16:eb:33:8d:23:ed:4b:c9:a9:c6:0c:b9: fd:9b:2e:f0:ee:24:ef:5f:3d:3f:a8:aa:5e:d1:98: 15:22:fd:00:62:88:ad:5c:33:33:0c:f7:26:1e:e1: e5:ea:94:7b:dd:3b:83:02:47:fe:3e:f6:5d:de:b6: 82:58:3a:1e:6f:8e:40:83:93:32:0b:45:6e:97:80: 9b:4d:52:07:32:04:05:28:47:6b:2b:95:d3:3b:9c: 4f:80:58:1c:1c:e8:78:fd:8b:1e:ea:08:0e:b0:7c: 52:6a:6e:12:67:d9:1c:8b:bd:80:05:50:82:a0:3e: 31:df:f6:64:58:7f:be:e5:f0:d3:34:cd:92:5b:fd: 99:99:95:a5:af:b1:97:fd:62:c6:57:d5:80:27:20: 14:aa:17:55:90:46:cc:0b:eb:39:da:d0:7d:25:49: 70:e0:b8:43:e6:a0:a6:ec:99:21:e3:b4:9a:2c:c4: 8f:d6:9b:b0:f9:bd:40:4b:d3:0f:06:70:9f:db:cc: 63:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:33:F4:25:DB:5C:D6:F4:94:D1:5C:D9:E6:95:F7:7B:AF:CE:4E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/78718e56-794a-397d-80d6-334e9fd3e89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8d:92:75:aa:3c:a1:28:cf:94:75:e8:0a:6b:bd:01:97:91: 38:56:12:a8:1c:3a:25:89:4b:7b:b3:b4:2f:73:0d:30:00:26: 80:e5:ed:d7:ce:70:1b:e2:85:bd:11:61:ef:5e:51:a0:79:c1: 74:94:d3:27:80:f7:ff:68:48:c5:97:5b:0f:6f:5f:37:a3:e7: df:cd:26:27:01:a7:cd:4c:c0:d4:17:42:7b:78:5b:4c:7e:4c: 04:57:ce:db:d4:30:b0:aa:24:68:7b:af:40:41:6a:e2:08:b5: c9:67:b1:67:a0:e6:db:f5:f0:88:17:37:7c:89:b4:52:3d:c4: eb:01:60:d3:ac:38:da:0f:26:69:59:a8:5e:d6:59:70:35:26: 33:11:61:80:1a:7d:e4:bb:c6:28:d1:06:a9:d9:42:e7:f0:a1: 0d:0b:9c:0d:e8:6a:57:cf:93:51:99:94:1b:5a:59:ec:fd:d7: f7:e1:4c:d7:a3:27:ab:eb:a4:ef:94:5d:d7:32:39:00:63:41: 22:36:bf:26:90:d6:dd:7b:4d:78:5a:91:6a:cf:da:a3:a6:3e: 50:75:4e:0b:8e:1a:9d:a8:7f:8c:29:7f:1a:16:08:b6:b8:90: 1e:f8:88:18:93:15:04:93:b0:85:25:e1:70:78:6d:01:77:58: 21:a6:5d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexxlY73tfrKD99QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk ODEyNWI2ZTEtMjE2MS00MWIwLWFkMmItZjhjMmVlYzBmMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQUzdhTOZTTXmOruIl8QF+A6wQ5+wWXsNRPV GK9OaBF86ij2D0rpEyEZeWf9fx6nUa+TMJUxSZRENVB596YW6zONI+1LyanGDLn9 my7w7iTvXz0/qKpe0ZgVIv0AYoitXDMzDPcmHuHl6pR73TuDAkf+PvZd3raCWDoe b45Ag5MyC0Vul4CbTVIHMgQFKEdrK5XTO5xPgFgcHOh4/Yse6ggOsHxSam4SZ9kc i72ABVCCoD4x3/ZkWH++5fDTNM2SW/2ZmZWlr7GX/WLGV9WAJyAUqhdVkEbMC+s5 2tB9JUlw4LhD5qCm7Jkh47SaLMSP1puw+b1AS9MPBnCf28xjywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsz9CXbXNb0lNFc2eaV93uvzk7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzg3MThlNTYtNzk0YS0z OTdkLTgwZDYtMzM0ZTlmZDNlODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiNknWqPKEoz5R16AprvQGXkThWEqgcOiWJS3uztC9zDTAAJoDl7dfO cBvihb0RYe9eUaB5wXSU0yeA9/9oSMWXWw9vXzej59/NJicBp81MwNQXQnt4W0x+ TARXztvUMLCqJGh7r0BBauIItclnsWeg5tv18IgXN3yJtFI9xOsBYNOsONoPJmlZ qF7WWXA1JjMRYYAafeS7xijRBqnZQufwoQ0LnA3oalfPk1GZlBtaWez91/fhTNej J6vrpO+UXdcyOQBjQSI2vyaQ1t17TXhakWrP2qOmPlB1TguOGp2of4wpfxoWCLa4 kB74iBiTFQSTsIUl4XB4bQF3WCGmXcE= -----END CERTIFICATE-----Generated at Wed Jan 21 00:57:53 2026 by rpki-client