This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa File: 96781fca-906e-351a-8100-dfe1dcb508d0.roa (raw, json) Hash identifier: ZQB5oLCmp1hAA8jxmO5AtFQBcYuQTliL3++hP9+vxf4= Subject key identifier: 92:44:40:0E:5C:7C:05:0C:FA:58:77:27:02:AC:41:68:DA:DB:F8:76 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD7605CF2B72898643C91B440 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:5c:f2:b7:28:98:64:3c:91:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=274ce096-fe09-4ca5-a822-77cc18539d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:8f:6c:12:85:e7:c1:37:c8:11:4e:ea:7e: 0f:09:63:34:0c:4d:8b:6f:92:a9:56:38:62:a2:4d: 0b:a5:df:d1:05:b0:16:2f:f7:a2:38:61:69:1e:35: e5:8e:df:51:ab:d1:05:a2:53:5a:94:26:c0:3c:f1: 16:79:70:31:c1:01:90:6a:af:cb:59:05:bf:c2:4f: 5b:a1:09:ad:23:0c:13:99:3a:0d:77:4b:32:f3:78: b9:d0:5e:01:73:82:31:19:d3:30:d7:4f:2f:b2:dc: 52:7b:5c:77:5a:ff:9d:d9:f6:83:3c:ce:f8:17:98: 98:7e:7a:93:81:b5:9a:83:45:e5:6c:08:81:34:52: 27:b3:56:48:fc:78:cb:86:05:65:d7:38:cb:01:1e: 3e:c0:8b:8b:65:e9:b2:4b:a3:9d:1c:63:1a:ef:ae: 45:dd:de:f2:e3:7d:1a:d1:69:f4:5a:63:18:05:1e: 5e:2e:46:08:a3:31:9c:37:2a:24:09:1e:c1:e6:56: 19:cd:f8:71:64:02:d1:d5:c3:80:5f:0b:f2:64:49: f2:81:e6:3d:b4:f4:06:70:20:7e:38:b2:3c:ce:eb: d2:84:e7:38:c5:e1:b6:23:c4:33:a1:8a:c6:ab:80: c2:94:4e:6b:e4:fd:eb:5d:1b:f1:7b:b7:d0:1d:8c: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:44:40:0E:5C:7C:05:0C:FA:58:77:27:02:AC:41:68:DA:DB:F8:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/96781fca-906e-351a-8100-dfe1dcb508d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8c:d8:2e:0c:5a:fd:61:43:5a:7a:97:eb:56:2b:73:2d:a3: dc:5f:0d:f7:43:12:8b:18:3e:84:7b:e9:07:5c:cb:f1:3c:82: 1d:80:c5:c4:5a:f4:56:28:5f:7d:03:00:0d:52:56:41:f0:ac: 52:7a:ab:e1:3c:b2:cd:77:db:60:f8:35:63:83:64:39:d0:15: 16:91:5f:a6:46:1c:83:64:c4:0a:1b:8c:12:66:24:06:4c:91: 8b:27:9e:88:21:13:8f:ad:78:51:52:06:85:51:3e:18:ad:21: 92:6d:bb:77:86:39:11:18:70:b9:62:c3:9e:4f:6f:6b:ad:42: 96:2c:c7:ef:9b:7e:23:75:57:56:96:7a:3a:f6:29:28:4a:ea: ee:e4:5f:5e:ab:c7:31:a4:35:ad:5b:64:02:3f:30:c2:3d:58: 5a:e4:fd:2b:de:43:d2:72:e5:7f:1a:48:1a:51:f9:a5:48:e6: 55:27:35:4a:ba:e6:13:75:81:3d:9d:53:7f:c3:cc:f3:26:03: bd:17:44:9f:44:52:4b:7d:37:58:9e:d9:5a:46:a1:b4:47:5d: 0f:bc:74:0f:11:e8:0b:d9:4c:7d:2d:b2:f1:a5:34:01:73:c2: 01:95:75:42:27:62:43:4e:7b:f4:ce:fd:1e:20:f0:0b:9c:e0: ab:d6:4e:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvXYFzytyiYZDyRtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk Mjc0Y2UwOTYtZmUwOS00Y2E1LWE4MjItNzdjYzE4NTM5ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/mPbBKF58E3yBFO6n4PCWM0DE2Lb5KpVjhi ok0Lpd/RBbAWL/eiOGFpHjXljt9Rq9EFolNalCbAPPEWeXAxwQGQaq/LWQW/wk9b oQmtIwwTmToNd0sy83i50F4Bc4IxGdMw108vstxSe1x3Wv+d2faDPM74F5iYfnqT gbWag0XlbAiBNFIns1ZI/HjLhgVl1zjLAR4+wIuLZemyS6OdHGMa765F3d7y430a 0Wn0WmMYBR5eLkYIozGcNyokCR7B5lYZzfhxZALR1cOAXwvyZEnygeY9tPQGcCB+ OLI8zuvShOc4xeG2I8QzoYrGq4DClE5r5P3rXRvxe7fQHYwdqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJEQA5cfAUM+lh3JwKsQWja2/h2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTY3ODFmY2EtOTA2ZS0z NTFhLTgxMDAtZGZlMWRjYjUwOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKM2C4MWv1hQ1p6l+tWK3Mto9xfDfdDEosYPoR76Qdcy/E8gh2AxcRa 9FYoX30DAA1SVkHwrFJ6q+E8ss1322D4NWODZDnQFRaRX6ZGHINkxAobjBJmJAZM kYsnnoghE4+teFFSBoVRPhitIZJtu3eGOREYcLliw55Pb2utQpYsx++bfiN1V1aW ejr2KShK6u7kX16rxzGkNa1bZAI/MMI9WFrk/SveQ9Jy5X8aSBpR+aVI5lUnNUq6 5hN1gT2dU3/DzPMmA70XRJ9EUkt9N1ie2VpGobRHXQ+8dA8R6AvZTH0tsvGlNAFz wgGVdUInYkNOe/TO/R4g8Auc4KvWTjA= -----END CERTIFICATE-----Generated at Sat Dec 6 18:02:31 2025 by rpki-client