This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa File: 9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa (raw, json) Hash identifier: WGZFBVIQCra5JQJEbs3WgwS+9nM0zl9646EelD1Gqis= Subject key identifier: ED:6D:2C:47:F2:A4:37:85:8A:1F:95:3B:2A:B4:FE:28:8D:EC:E4:76 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD3307F1920373DAABE84D100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:7f:19:20:37:3d:aa:be:84:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=e9198f06-0dbf-42a5-906f-0ceae3b16478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7f:c1:e2:94:58:00:61:e9:29:4c:6d:e7:e1: 14:16:ef:36:47:fb:45:48:db:58:dd:a9:e1:9b:e6: 1c:79:00:b3:f3:27:74:2d:4a:a8:f8:93:77:cc:c9: 1e:ba:48:50:87:0b:3d:ad:c3:5c:0d:c3:e4:ce:be: eb:32:3b:48:3a:47:1a:ae:0f:d6:49:d1:8b:85:56: 7c:78:c0:59:ed:43:2b:c9:18:92:0d:91:79:42:c4: 37:f5:b1:c9:2f:7d:2d:a2:5a:6a:17:7e:ae:b2:d7: 4d:28:fe:21:00:80:30:f1:c8:9e:23:fd:ea:c5:f1: cc:92:8d:4d:b6:20:8b:15:95:44:79:0e:8b:71:d5: 2a:af:e7:32:e9:e2:67:36:50:93:0a:03:fa:13:b7: a9:49:16:8c:99:74:b1:a8:f3:b6:c9:05:ee:36:1a: c6:a1:10:13:0b:fb:7f:69:fb:9b:60:2f:a4:da:c7: fd:0a:62:ba:1a:7a:75:9a:41:28:e8:57:49:e8:cd: f1:58:db:18:e2:e2:df:dd:45:dd:51:cf:2d:4f:71: e2:db:b5:ca:83:52:05:fd:c8:bc:83:c2:d6:e6:60: 56:c9:e9:c2:dd:a6:ad:57:82:64:f2:5d:3e:d3:49: e1:df:27:c4:21:7d:6f:64:f5:4b:de:5f:11:ef:51: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6D:2C:47:F2:A4:37:85:8A:1F:95:3B:2A:B4:FE:28:8D:EC:E4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9256e928-9e7a-395f-a0ec-b2e0c6ac0b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:33:78:cd:f1:c7:f5:19:2c:6d:91:18:be:e8:24:d8:b6:4f: 0c:83:5a:78:da:52:f6:c3:7d:57:9c:b3:b5:0b:97:78:e2:0d: 85:be:a3:b7:77:6a:fd:70:2e:16:37:de:e2:d4:46:e0:fa:f9: fa:dd:ce:48:5a:40:d3:3f:4e:ca:c0:68:48:16:85:73:30:b9: c0:f2:92:56:8b:69:31:13:ff:be:26:53:b7:0d:38:c9:ae:f5: 6a:20:b1:58:80:3e:95:28:9e:12:bf:58:e0:38:c1:8f:f3:59: 3d:7c:df:57:74:5c:c4:b1:96:8d:64:8a:e1:3e:39:e1:48:f0: 7a:3d:39:c6:3a:4f:63:c3:f4:5e:58:f1:e6:1e:6d:79:12:1e: 9c:94:56:ee:d9:e1:a1:23:e2:65:7f:5b:79:f3:8b:73:b5:a4: f8:32:86:bc:66:c6:27:aa:51:2e:3a:0e:97:e2:e2:cb:61:fb: c5:13:bb:be:43:c8:81:f4:59:b0:3e:eb:fd:c9:21:32:c2:58: 07:f5:40:0f:8f:5c:46:ff:0d:2d:7e:8f:23:5e:a8:49:5a:4b: 15:b3:03:d7:98:b1:c9:3d:ef:3a:67:56:56:a3:06:95:e9:d0: b2:a4:6c:f2:a3:b7:16:8b:8e:ed:51:10:09:9f:3e:4a:be:cc: d4:83:02:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMH8ZIDc9qr6E0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZTkxOThmMDYtMGRiZi00MmE1LTkwNmYtMGNlYWUzYjE2NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3/B4pRYAGHpKUxt5+EUFu82R/tFSNtY3anh m+YceQCz8yd0LUqo+JN3zMkeukhQhws9rcNcDcPkzr7rMjtIOkcarg/WSdGLhVZ8 eMBZ7UMryRiSDZF5QsQ39bHJL30tolpqF36ustdNKP4hAIAw8cieI/3qxfHMko1N tiCLFZVEeQ6LcdUqr+cy6eJnNlCTCgP6E7epSRaMmXSxqPO2yQXuNhrGoRATC/t/ afubYC+k2sf9CmK6Gnp1mkEo6FdJ6M3xWNsY4uLf3UXdUc8tT3Hi27XKg1IF/ci8 g8LW5mBWyenC3aatV4Jk8l0+00nh3yfEIX1vZPVL3l8R71FADwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1tLEfypDeFih+VOyq0/iiN7OR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTI1NmU5MjgtOWU3YS0z OTVmLWEwZWMtYjJlMGM2YWMwYjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4zeM3xx/UZLG2RGL7oJNi2TwyDWnjaUvbDfVecs7ULl3jiDYW+o7d3 av1wLhY33uLURuD6+frdzkhaQNM/TsrAaEgWhXMwucDyklaLaTET/74mU7cNOMmu 9WogsViAPpUonhK/WOA4wY/zWT1831d0XMSxlo1kiuE+OeFI8Ho9OcY6T2PD9F5Y 8eYebXkSHpyUVu7Z4aEj4mV/W3nzi3O1pPgyhrxmxieqUS46Dpfi4sth+8UTu75D yIH0WbA+6/3JITLCWAf1QA+PXEb/DS1+jyNeqElaSxWzA9eYsck97zpnVlajBpXp 0LKkbPKjtxaLju1REAmfPkq+zNSDAvE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:50 2025 by rpki-client