This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa File: 823f884b-6301-377e-8d28-5834d52ead5c.roa (raw, json) Hash identifier: cv+mort32LuqiVD4O4YkuD6eseJTkyeFKvPCbolbv5w= Subject key identifier: 91:81:5D:95:6B:14:63:10:8D:C7:72:F6:60:D3:CB:AD:4E:A4:BB:0A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C33814877C5D44E1F15F4E880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:48:77:c5:d4:4e:1f:15:f4:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=01926d58-94f6-4770-a20e-f2981cd6611d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:75:24:8d:a6:8a:64:0e:2e:4c:3a:5d:c4:c0: 47:93:be:c8:5d:7a:83:f7:fa:eb:28:ed:18:58:06: 3e:37:58:ac:45:33:75:0c:a2:3f:42:9f:e7:ac:a7: 94:d6:1a:e1:44:76:bf:15:f5:6f:b3:ea:3c:be:cf: 81:cb:7f:ca:98:6d:a2:55:95:ba:01:5e:57:32:19: 10:76:b6:35:e7:e9:f7:62:6a:b6:c4:77:f6:50:46: a9:d5:8b:ec:81:83:a4:1a:91:b8:ab:7f:fa:94:4e: a5:5c:5c:f9:6c:96:c8:ee:15:7b:c0:58:4b:d8:aa: b7:fb:51:47:b3:20:85:f9:7d:e0:b8:7f:c5:66:f5: b4:d3:7c:72:7e:9d:a6:af:c6:4f:6f:e0:a5:69:8b: b3:9c:9b:da:c9:5b:03:52:fd:51:00:7e:7b:9c:78: a1:58:ad:b3:a5:61:88:01:7b:8c:c1:fe:98:9d:e4: 95:87:e7:a3:45:5a:05:b9:97:f7:b8:9d:8f:4a:1a: 8c:d0:1e:63:14:a5:66:c4:14:95:f3:89:83:32:ab: a4:44:c7:68:ec:64:6e:2e:fc:68:28:f0:10:e6:1c: 97:b3:c6:2a:36:ce:f9:d3:f4:1d:98:e8:40:fa:43: 41:63:e7:03:f4:ba:cf:b1:b3:2d:65:29:53:b4:72: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:81:5D:95:6B:14:63:10:8D:C7:72:F6:60:D3:CB:AD:4E:A4:BB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823f884b-6301-377e-8d28-5834d52ead5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:e0:7a:9f:3e:ff:c7:35:af:76:a7:10:e3:eb:25:6e:aa:e4: 9e:0a:89:e8:7f:14:69:ba:d9:f3:eb:23:bf:69:71:ed:04:87: c1:53:bf:61:da:e6:76:79:90:6a:a9:ad:4f:20:22:40:12:89: 41:ee:09:c4:9f:cc:27:1a:ab:52:6b:dd:79:0a:df:19:48:79: 11:0a:c0:7f:40:55:d1:82:e5:8b:25:99:da:27:2a:f7:51:5d: 50:2e:f5:7d:e9:dc:6d:0d:13:5b:aa:05:0d:b9:d3:41:60:d3: 6b:9f:eb:87:88:cc:12:70:da:9f:1d:6b:b9:0a:7f:22:76:31: 17:3e:6c:c1:7e:8f:a9:d4:2f:d2:81:ea:d9:58:16:ab:95:3c: 50:7d:63:b7:c4:75:6e:c7:57:58:c2:40:48:b3:3d:87:df:07: 0d:d1:4d:a8:42:61:f1:9c:fa:c1:b5:92:4d:9e:79:e2:00:76: a0:ed:44:24:08:92:25:ae:72:14:9f:7a:9d:a3:31:2c:51:31: 4f:21:0e:17:9e:aa:f4:a8:9c:47:d7:5a:f5:6b:3f:6a:11:79: ed:d4:16:e9:3d:70:1e:fa:79:b4:5b:84:45:49:1e:ea:eb:1e: e5:18:b6:80:62:48:bc:89:98:f2:ad:b4:10:00:67:81:88:55: ce:bf:5a:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgUh3xdROHxX06IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk MDE5MjZkNTgtOTRmNi00NzcwLWEyMGUtZjI5ODFjZDY2MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3UkjaaKZA4uTDpdxMBHk77IXXqD9/rrKO0Y WAY+N1isRTN1DKI/Qp/nrKeU1hrhRHa/FfVvs+o8vs+By3/KmG2iVZW6AV5XMhkQ drY15+n3Ymq2xHf2UEap1YvsgYOkGpG4q3/6lE6lXFz5bJbI7hV7wFhL2Kq3+1FH syCF+X3guH/FZvW003xyfp2mr8ZPb+ClaYuznJvayVsDUv1RAH57nHihWK2zpWGI AXuMwf6YneSVh+ejRVoFuZf3uJ2PShqM0B5jFKVmxBSV84mDMqukRMdo7GRuLvxo KPAQ5hyXs8YqNs750/QdmOhA+kNBY+cD9LrPsbMtZSlTtHLAqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGBXZVrFGMQjcdy9mDTy61OpLsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODIzZjg4NGItNjMwMS0z NzdlLThkMjgtNTgzNGQ1MmVhZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTgep8+/8c1r3anEOPrJW6q5J4Kieh/FGm62fPrI79pce0Eh8FTv2Ha 5nZ5kGqprU8gIkASiUHuCcSfzCcaq1Jr3XkK3xlIeREKwH9AVdGC5YslmdonKvdR XVAu9X3p3G0NE1uqBQ2500Fg02uf64eIzBJw2p8da7kKfyJ2MRc+bMF+j6nUL9KB 6tlYFquVPFB9Y7fEdW7HV1jCQEizPYffBw3RTahCYfGc+sG1kk2eeeIAdqDtRCQI kiWuchSfep2jMSxRMU8hDheeqvSonEfXWvVrP2oRee3UFuk9cB76ebRbhEVJHurr HuUYtoBiSLyJmPKttBAAZ4GIVc6/Wvo= -----END CERTIFICATE-----Generated at Wed Jan 21 01:00:59 2026 by rpki-client