This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a96e2e41-ace8-3197-a149-40e9c904d0fe.roa File: a96e2e41-ace8-3197-a149-40e9c904d0fe.roa (raw, json) Hash identifier: FvRKwMBnSF+AvsQxRT0iLj1EVsUK7JMzrH7k9T7iiYc= Subject key identifier: 08:1F:4A:61:84:24:E6:2E:2C:95:A4:5B:44:82:2A:E2:A7:71:E6:BE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C3381485594648339F975E660 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a96e2e41-ace8-3197-a149-40e9c904d0fe.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:48:55:94:64:83:39:f9:75:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=a3a02f47-fd9c-492e-b325-37a6aee0397b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:82:c8:f1:94:b7:73:01:6c:71:56:ea:9f: 49:3a:f9:bb:8b:60:64:30:51:d3:a6:e5:94:56:00: df:04:16:2b:80:e4:86:21:7a:71:2c:3d:ec:60:4f: 3a:c9:c5:8c:17:bc:69:5f:61:06:12:57:09:0d:d4: 62:01:69:b3:9b:1d:b6:61:e8:f8:14:e1:76:0e:b8: 7c:8c:70:24:6c:21:14:0a:65:70:c1:c6:82:cb:e3: 28:1d:03:dd:5b:ec:53:1a:f0:f1:27:37:b6:5b:11: ed:14:5a:59:23:e0:0a:f7:18:ec:54:78:03:83:c7: 58:a3:fb:2b:02:63:bb:6e:6f:89:1b:23:df:d9:53: d0:e0:fd:c3:e3:3b:5c:7d:93:9b:0d:61:65:a3:bf: 26:3d:33:1f:f4:42:29:f6:ab:da:e4:92:2a:90:02: 3a:9d:74:fa:be:b2:9c:39:56:27:1d:9a:c6:ae:00: fa:ba:44:c3:92:14:b3:14:d8:d1:bf:77:4a:c4:cb: 2f:d8:e9:db:5c:d5:75:59:05:5c:dc:e8:5a:be:73: c4:d7:db:5d:dc:b3:d3:5c:34:53:7d:50:be:98:b1: b9:ed:db:29:89:92:db:41:98:5f:82:09:1e:06:90: b4:64:0b:e0:85:97:63:de:87:94:16:25:eb:45:36: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1F:4A:61:84:24:E6:2E:2C:95:A4:5B:44:82:2A:E2:A7:71:E6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a96e2e41-ace8-3197-a149-40e9c904d0fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:06:fb:90:78:d5:d0:1b:c2:4a:28:aa:96:83:85:32:3a:c2: 69:f5:43:09:ba:45:b5:d0:bd:30:5b:59:14:a5:a2:63:45:55: ef:cc:f5:fa:6a:4a:3c:b2:70:85:61:b3:8f:cb:76:1c:45:25: 42:60:11:40:33:78:9b:16:d4:83:77:21:13:f7:ce:bf:2f:7c: e1:56:c4:2f:02:d4:ab:8f:5c:f7:07:66:c2:b8:f1:b6:48:7e: 99:cb:90:e4:5f:63:d7:5e:6a:e2:12:da:46:81:38:8e:8d:9a: 9f:64:39:79:a2:17:b2:d2:f8:25:7b:1a:2b:49:48:c2:b6:d5: 70:5f:38:57:ae:c5:2d:2d:7f:c1:b8:4b:73:b0:84:ef:62:aa: 42:f7:0e:50:bf:de:91:cc:a7:2c:f0:f4:52:74:73:7e:08:c5: 49:ac:43:9c:11:4e:b6:f3:71:1c:46:83:90:5a:e7:fc:4e:bc: 78:98:02:3e:98:af:2c:ec:fd:2b:64:7e:d8:2f:5b:1a:1b:da: 39:e3:41:f6:e8:3b:68:3b:98:25:4f:8a:68:38:5a:80:5a:8f: 49:4b:47:94:e5:c2:7e:d5:82:c4:63:70:db:b8:b7:32:bb:ae: 28:36:29:af:af:be:82:cc:df:da:31:7c:ae:66:3c:e8:5b:99: cd:62:4e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgUhVlGSDOfl15mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk YTNhMDJmNDctZmQ5Yy00OTJlLWIzMjUtMzdhNmFlZTAzOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/iCyPGUt3MBbHFW6p9JOvm7i2BkMFHTpuWU VgDfBBYrgOSGIXpxLD3sYE86ycWMF7xpX2EGElcJDdRiAWmzmx22Yej4FOF2Drh8 jHAkbCEUCmVwwcaCy+MoHQPdW+xTGvDxJze2WxHtFFpZI+AK9xjsVHgDg8dYo/sr AmO7bm+JGyPf2VPQ4P3D4ztcfZObDWFlo78mPTMf9EIp9qva5JIqkAI6nXT6vrKc OVYnHZrGrgD6ukTDkhSzFNjRv3dKxMsv2OnbXNV1WQVc3OhavnPE19td3LPTXDRT fVC+mLG57dspiZLbQZhfggkeBpC0ZAvghZdj3oeUFiXrRTagywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgfSmGEJOYuLJWkW0SCKuKncea+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTk2ZTJlNDEtYWNlOC0z MTk3LWExNDktNDBlOWM5MDRkMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwG+5B41dAbwkooqpaDhTI6wmn1Qwm6RbXQvTBbWRSlomNFVe/M9fpq SjyycIVhs4/LdhxFJUJgEUAzeJsW1IN3IRP3zr8vfOFWxC8C1KuPXPcHZsK48bZI fpnLkORfY9deauIS2kaBOI6Nmp9kOXmiF7LS+CV7GitJSMK21XBfOFeuxS0tf8G4 S3OwhO9iqkL3DlC/3pHMpyzw9FJ0c34IxUmsQ5wRTrbzcRxGg5Ba5/xOvHiYAj6Y ryzs/StkftgvWxob2jnjQfboO2g7mCVPimg4WoBaj0lLR5Tlwn7VgsRjcNu4tzK7 rig2Ka+vvoLM39oxfK5mPOhbmc1iTi8= -----END CERTIFICATE-----Generated at Wed Jan 21 00:57:18 2026 by rpki-client