This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa File: 7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa (raw, json) Hash identifier: DexAzS+4/2rXpNKznjVjCsUbQe/MynPMu3mLok5Y4Vk= Subject key identifier: 54:55:9B:7C:6A:53:AC:3C:77:DB:3D:DC:85:06:C4:E3:2E:ED:7A:8A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C338146A7AFA8CDA9ABBC1818 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:46:a7:af:a8:cd:a9:ab:bc:18:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=0c336adc-e68e-40c6-a743-856aa00a2b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:6c:df:63:a4:60:1c:04:ea:37:b2:8a:65: ce:e3:44:c9:62:a4:c4:8e:c3:fd:18:a0:dc:7c:b9: f6:8c:0a:6d:e4:85:84:33:56:6f:d1:f3:4d:e9:9f: 17:dc:1f:1a:b4:f2:42:6f:d1:ba:02:cd:db:72:36: ce:06:7a:b5:1f:dc:e2:c9:3e:33:52:c2:42:6c:77: 41:98:84:6d:8b:15:83:46:9c:3d:01:c5:c7:75:80: 6a:4c:e7:f2:56:1c:08:0d:8e:1e:57:c2:80:c2:40: 4b:71:4b:ba:82:27:0d:1f:31:0d:f5:96:77:be:a7: b3:38:3b:77:c3:75:1b:c8:72:d1:a1:0b:7d:ce:28: b8:80:49:3e:4f:76:5c:43:9f:75:23:4f:73:79:d4: 6b:80:0e:aa:76:e4:ce:1e:65:39:64:7b:2f:69:25: f9:61:f8:32:a5:33:0a:c0:b7:38:39:57:74:a8:21: f8:12:6a:16:33:4f:67:c5:a9:8e:68:bf:01:2b:bf: ed:ca:a0:4e:b9:3e:a0:bd:15:2c:b7:c7:7f:0b:83: 5c:d5:d6:d1:32:46:6c:9f:56:f4:dd:2c:38:01:18: b3:07:ac:f2:2e:35:82:ad:7c:70:ae:f0:bd:fa:0c: 73:df:c8:82:33:8a:58:6a:e8:3d:66:3f:0d:9b:1e: ab:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:55:9B:7C:6A:53:AC:3C:77:DB:3D:DC:85:06:C4:E3:2E:ED:7A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7aeab62e-dc0a-314c-873d-1a87e53fa67f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d4:7f:f7:a4:22:3a:c2:25:e2:d6:59:ad:3b:11:d4:0e:60: 67:ab:10:9e:ac:31:bc:1d:ec:e5:8f:96:66:65:69:33:09:1b: 51:ed:ab:9a:80:fa:5e:59:ff:a3:41:ee:49:d1:44:ba:fa:fc: e0:03:3c:42:90:96:31:06:af:23:5f:c7:63:b4:8b:cd:e0:d5: 7d:35:dd:36:a4:10:3a:36:e1:2c:c5:21:1f:66:51:ee:dd:44: ba:b6:32:b9:25:23:0c:3a:ac:ec:c6:cf:52:51:30:59:97:c2: 7a:bd:c9:e1:ed:12:0a:5b:4b:77:44:09:db:ec:a0:41:91:6e: 47:3a:de:98:c9:e9:9a:ec:10:8b:6f:0c:99:4d:9b:77:dd:bb: bc:9b:4f:7b:a8:76:d6:60:80:fd:95:3a:cf:5d:78:61:77:6b: 86:43:53:da:4b:b4:05:c7:f0:d6:1c:3d:0b:02:cb:90:52:bb: 69:47:2a:66:d0:a9:31:e5:b7:47:59:50:06:1c:50:c8:0e:5e: bf:f5:2d:06:a4:89:36:52:01:b8:24:15:23:cc:72:3b:5a:1a: ca:f6:59:f3:55:71:3c:e8:32:44:40:33:bc:66:fe:01:78:57: 26:1c:7c:9d:a2:13:c5:a2:3f:fd:1f:0f:df:2e:e7:4d:52:b6: 52:39:34:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgUanr6jNqau8GBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk MGMzMzZhZGMtZTY4ZS00MGM2LWE3NDMtODU2YWEwMGEyYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVxs32OkYBwE6jeyimXO40TJYqTEjsP9GKDc fLn2jApt5IWEM1Zv0fNN6Z8X3B8atPJCb9G6As3bcjbOBnq1H9ziyT4zUsJCbHdB mIRtixWDRpw9AcXHdYBqTOfyVhwIDY4eV8KAwkBLcUu6gicNHzEN9ZZ3vqezODt3 w3UbyHLRoQt9zii4gEk+T3ZcQ591I09zedRrgA6qduTOHmU5ZHsvaSX5YfgypTMK wLc4OVd0qCH4EmoWM09nxamOaL8BK7/tyqBOuT6gvRUst8d/C4Nc1dbRMkZsn1b0 3Sw4ARizB6zyLjWCrXxwrvC9+gxz38iCM4pYaug9Zj8Nmx6rFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRVm3xqU6w8d9s93IUGxOMu7XqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2FlYWI2MmUtZGMwYS0z MTRjLTg3M2QtMWE4N2U1M2ZhNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJlUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrUf/ekIjrCJeLWWa07EdQOYGerEJ6sMbwd7OWPlmZlaTMJG1Htq5qA +l5Z/6NB7knRRLr6/OADPEKQljEGryNfx2O0i83g1X013TakEDo24SzFIR9mUe7d RLq2MrklIww6rOzGz1JRMFmXwnq9yeHtEgpbS3dECdvsoEGRbkc63pjJ6ZrsEItv DJlNm3fdu7ybT3uodtZggP2VOs9deGF3a4ZDU9pLtAXH8NYcPQsCy5BSu2lHKmbQ qTHlt0dZUAYcUMgOXr/1LQakiTZSAbgkFSPMcjtaGsr2WfNVcTzoMkRAM7xm/gF4 VyYcfJ2iE8WiP/0fD98u501StlI5NAo= -----END CERTIFICATE-----Generated at Wed Jan 21 00:55:14 2026 by rpki-client