This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa File: b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa (raw, json) Hash identifier: U93gDaA3kB4+9Spdcb7gXOrAGiv9J2dj66cED7Ci3kw= Subject key identifier: A9:D5:6A:45:2A:32:A0:50:80:6C:7D:12:1E:39:4B:EA:AE:24:4A:68 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C1D2B727453AADEFB39502D20 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:72:74:53:aa:de:fb:39:50:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=850b5998-6454-4a6a-91ae-4d2aed139e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6a:dc:40:1a:ab:4b:db:b8:0e:6d:fb:bf:c3: ce:31:c0:7b:89:4d:83:4f:fd:82:9b:f2:4e:10:be: d1:fb:a9:7f:f7:33:87:67:17:93:a6:85:1a:7e:a8: c7:45:d4:f3:93:42:0c:12:c9:7c:15:c5:2b:62:6b: 2e:ee:5c:b5:cb:68:dd:46:b7:ed:71:1d:01:0f:6b: b4:ef:e1:ba:99:7e:9b:92:11:c6:d5:a5:48:73:ee: f4:91:d1:e5:d1:da:fa:fd:2c:d4:74:4f:34:60:b2: f5:e5:5f:99:64:56:98:cb:fc:15:70:f5:e1:b9:9c: c5:73:11:32:b4:6b:97:bb:cd:31:20:e0:bc:af:49: be:95:8b:6c:fd:68:23:98:ba:4c:05:3f:ed:7f:56: c2:b1:7e:42:5d:19:eb:31:81:93:b0:7d:94:4c:32: 4d:ec:af:7e:f6:b2:a0:b0:c4:d4:7b:2f:c7:83:d4: 4a:31:f1:b7:c8:c7:e8:f6:60:3d:bd:64:bd:1e:7f: 13:08:d0:00:2f:7a:1a:9f:54:6e:e5:0c:e0:92:1c: 42:9a:b8:e6:86:38:0e:af:5f:8c:23:4f:31:7e:e7: 0e:11:62:bd:cc:2f:23:cd:8e:62:92:22:dc:d2:8a: 60:42:0c:d9:d8:2c:d2:64:00:a0:5d:64:cd:dd:4e: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D5:6A:45:2A:32:A0:50:80:6C:7D:12:1E:39:4B:EA:AE:24:4A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b29c80bc-009a-3da4-ae58-96b8bae82cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:d0:1e:2a:f0:47:ad:48:ec:d1:72:9b:eb:a8:b4:80:a3:fe: df:70:92:ac:cb:e1:31:28:ae:e4:9b:a9:ce:0b:21:94:2b:4d: 93:8f:70:94:55:2f:2d:82:2a:3c:d1:59:19:c5:ff:27:b5:28: 95:48:0c:1f:f3:d0:6d:1c:39:49:34:45:49:88:ef:9f:36:94: 2b:fb:81:29:0a:d9:fd:9f:7f:68:76:f4:92:3c:4e:a1:51:74: f3:ec:97:3a:68:70:45:0b:0d:46:5b:44:49:a4:55:4f:e5:66: 79:ec:b7:21:49:47:3e:d5:09:f8:52:7c:bb:e5:07:92:bf:a1: 3d:d8:a7:e3:54:e8:68:da:17:41:65:63:d6:52:0e:b5:75:a2: 1e:69:df:b9:d6:ee:41:11:a5:f0:2b:32:21:66:53:41:0e:74: d2:04:00:f6:34:c1:e4:75:2b:ae:db:d2:36:de:2c:91:3f:1c: 01:79:3c:f0:f9:03:a4:f8:41:b1:55:68:e6:02:90:63:1d:30: 02:e2:7f:b1:5c:62:22:b6:64:c7:2b:e3:95:ce:a7:6b:a9:14: 61:8e:61:d6:d8:29:d4:d2:d2:a0:9d:af:bb:c0:a1:36:3e:85: e3:cf:81:b1:57:b4:29:16:cb:6d:b9:1e:97:b7:bc:7b:09:4f: b9:2f:02:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3J0U6re+zlQLSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk ODUwYjU5OTgtNjQ1NC00YTZhLTkxYWUtNGQyYWVkMTM5ZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2rcQBqrS9u4Dm37v8POMcB7iU2DT/2Cm/JO EL7R+6l/9zOHZxeTpoUafqjHRdTzk0IMEsl8FcUrYmsu7ly1y2jdRrftcR0BD2u0 7+G6mX6bkhHG1aVIc+70kdHl0dr6/SzUdE80YLL15V+ZZFaYy/wVcPXhuZzFcxEy tGuXu80xIOC8r0m+lYts/WgjmLpMBT/tf1bCsX5CXRnrMYGTsH2UTDJN7K9+9rKg sMTUey/Hg9RKMfG3yMfo9mA9vWS9Hn8TCNAAL3oan1Ru5QzgkhxCmrjmhjgOr1+M I08xfucOEWK9zC8jzY5ikiLc0opgQgzZ2CzSZACgXWTN3U4VOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnVakUqMqBQgGx9Eh45S+quJEpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjI5YzgwYmMtMDA5YS0z ZGE0LWFlNTgtOTZiOGJhZTgyY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDQHirwR61I7NFym+uotICj/t9wkqzL4TEoruSbqc4LIZQrTZOPcJRV Ly2CKjzRWRnF/ye1KJVIDB/z0G0cOUk0RUmI7582lCv7gSkK2f2ff2h29JI8TqFR dPPslzpocEULDUZbREmkVU/lZnnstyFJRz7VCfhSfLvlB5K/oT3Yp+NU6GjaF0Fl Y9ZSDrV1oh5p37nW7kERpfArMiFmU0EOdNIEAPY0weR1K67b0jbeLJE/HAF5PPD5 A6T4QbFVaOYCkGMdMALif7FcYiK2ZMcr45XOp2upFGGOYdbYKdTS0qCdr7vAoTY+ hePPgbFXtCkWy225Hpe3vHsJT7kvAjs= -----END CERTIFICATE-----Generated at Mon Dec 15 14:39:35 2025 by rpki-client