This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa File: b3457f2c-3a55-3e62-87a9-8e24926a0545.roa (raw, json) Hash identifier: fw8LOv3jiM0YqnpNMM9RDIn+RCicp8tNQ4zjT+NiDUY= Subject key identifier: 25:85:64:81:AD:06:28:35:E6:D8:AB:06:88:DA:A8:AC:74:83:1B:55 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE6BB23D3273FF58635E74A80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa Signing time: Tue 18 Nov 2025 14:00:38 +0000 ROA not before: Tue 18 Nov 2025 14:00:38 +0000 ROA not after: Mon 16 Feb 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.153.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:bb:23:d3:27:3f:f5:86:35:e7:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 14:00:38 2025 GMT Not After : Feb 16 14:00:38 2026 GMT Subject: CN=7388d83c-caa4-4a7b-9134-0d8cfd5a0515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:0c:89:83:dd:a2:e3:fb:b6:cf:2e:33:82: c2:f5:f9:f8:23:d5:36:42:a7:52:96:c4:a9:53:0b: f1:41:9c:fd:c4:e4:60:b0:28:5d:2d:5f:ae:04:16: b6:93:dd:22:10:bf:48:74:5c:8c:1d:71:98:1d:6d: 36:3a:ce:3a:43:52:fa:fd:98:52:fc:69:49:5b:a2: 6d:d6:7e:cf:60:5a:55:0d:33:4d:bc:e0:41:b5:91: df:d5:89:01:a3:e9:3b:d7:30:b2:71:27:03:ae:a9: 6a:bc:cb:8b:8a:28:28:1b:03:c0:bb:36:4d:fb:98: 7a:dc:d5:c7:52:9a:af:f5:eb:e2:1f:d0:97:2f:28: ef:e7:10:f1:98:46:ec:27:96:18:b0:e2:2b:fb:9d: cf:44:d1:0d:05:73:9a:f4:36:37:10:ea:e4:7e:48: 4e:7d:8c:fc:be:69:6b:4b:fc:e6:0d:91:d4:a0:9e: 45:ce:8c:6f:fa:11:5a:d9:ca:0b:76:48:6b:e3:be: d5:52:d5:5e:85:84:37:0e:2a:71:cc:31:d1:d9:4b: 7a:e5:7e:65:af:48:00:4d:9a:c6:bb:ad:42:3e:41: 76:bb:fc:c0:d0:2a:dd:03:63:88:d3:57:48:86:1b: 3a:a8:ea:65:39:ac:e3:7d:f8:13:08:dd:ec:ad:77: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:85:64:81:AD:06:28:35:E6:D8:AB:06:88:DA:A8:AC:74:83:1B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b3457f2c-3a55-3e62-87a9-8e24926a0545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:02:f9:7e:02:1b:08:b5:41:17:73:9d:d8:e5:25:f5:9b:98: a3:60:84:be:c7:6f:e3:05:c7:17:6d:f3:78:f6:ef:5b:08:5a: 0a:01:67:86:43:da:a4:51:5a:30:7b:ca:56:f0:df:26:1b:a7: 8b:61:30:fd:e9:19:0a:9a:1d:97:41:b5:fc:01:64:c0:1a:5f: 98:00:70:d3:e6:33:fd:44:f0:87:79:70:bd:21:3e:44:9c:77: d3:95:e5:56:75:d8:7b:1c:a4:a4:67:a5:b6:ad:76:b1:eb:22: 30:74:c4:93:09:43:a0:c8:84:ee:e0:bf:65:05:66:ac:06:f1: f3:a8:a9:1b:5e:48:54:7a:0b:9e:2d:0a:ac:6d:a4:56:67:b7: 9b:e8:c2:dd:dd:54:71:03:c7:1b:de:52:a9:8c:1c:1a:9a:0d: 72:e8:67:f2:44:f1:93:e3:f3:bc:f3:04:50:28:00:7e:0f:48: e9:00:3f:45:19:4b:fa:02:11:32:14:42:7a:3d:4f:2a:6f:93: 60:40:c5:03:c5:a8:3e:6b:85:f0:3f:6a:c1:01:bf:b3:c3:37: 2c:5e:4e:4e:75:04:7e:97:ff:c8:1b:c9:be:31:96:c6:99:83: 10:52:6b:b4:f1:5a:ee:63:55:f8:d4:86:aa:7e:7a:4e:ff:fa: 64:61:17:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvmuyPTJz/1hjXnSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODE0MDAzOFoXDTI2MDIxNjE0MDAzOFowLzEtMCsGA1UEAxMk NzM4OGQ4M2MtY2FhNC00YTdiLTkxMzQtMGQ4Y2ZkNWEwNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYgMiYPdouP7ts8uM4LC9fn4I9U2QqdSlsSp UwvxQZz9xORgsChdLV+uBBa2k90iEL9IdFyMHXGYHW02Os46Q1L6/ZhS/GlJW6Jt 1n7PYFpVDTNNvOBBtZHf1YkBo+k71zCycScDrqlqvMuLiigoGwPAuzZN+5h63NXH Upqv9eviH9CXLyjv5xDxmEbsJ5YYsOIr+53PRNENBXOa9DY3EOrkfkhOfYz8vmlr S/zmDZHUoJ5Fzoxv+hFa2coLdkhr477VUtVehYQ3DipxzDHR2Ut65X5lr0gATZrG u61CPkF2u/zA0CrdA2OI01dIhhs6qOplOazjffgTCN3srXeBFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWFZIGtBig15tirBojaqKx0gxtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjM0NTdmMmMtM2E1NS0z ZTYyLTg3YTktOGUyNDkyNmEwNTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFJn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAC+X4CGwi1QRdzndjlJfWbmKNghL7Hb+MFxxdt83j271sIWgoBZ4ZD 2qRRWjB7ylbw3yYbp4thMP3pGQqaHZdBtfwBZMAaX5gAcNPmM/1E8Id5cL0hPkSc d9OV5VZ12HscpKRnpbatdrHrIjB0xJMJQ6DIhO7gv2UFZqwG8fOoqRteSFR6C54t CqxtpFZnt5vowt3dVHEDxxveUqmMHBqaDXLoZ/JE8ZPj87zzBFAoAH4PSOkAP0UZ S/oCETIUQno9Typvk2BAxQPFqD5rhfA/asEBv7PDNyxeTk51BH6X/8gbyb4xlsaZ gxBSa7TxWu5jVfjUhqp+ek7/+mRhF3c= -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:43 2025 by rpki-client