This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa File: b500f9ea-1f0a-3934-963e-3f57b3b70047.roa (raw, json) Hash identifier: CzHIcVthGzj84GSFcczAmlUoiO28/QouV5ZWZMuF1mY= Subject key identifier: B9:C2:A1:31:EE:2D:3C:18:97:53:05:B8:2A:65:8F:3F:15:C7:6A:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C59315B886F4CFFDCB1D81800 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 8069 IP address blocks: 20.33.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:5b:88:6f:4c:ff:dc:b1:d8:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=a667de47-a1c6-4c4a-81e6-bfeacb93b830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d6:f2:c4:38:19:11:81:b3:8c:04:41:37:9d: 18:5d:59:01:c8:ab:bf:0b:8d:1e:d2:09:a0:11:a2: 73:c2:19:23:3d:72:b4:d1:35:06:0a:3e:d7:28:24: 8a:06:02:7c:4f:17:dd:e0:b2:6c:8b:58:4d:40:09: 88:79:ff:84:85:2e:26:b7:ff:bb:f2:f8:a0:5a:f0: 05:f0:a4:bb:4e:bc:56:da:c1:d3:ff:0b:fa:9d:56: 84:d3:05:65:5b:40:65:32:66:f5:6a:29:93:5f:4f: 28:2a:fb:5f:0c:0d:15:19:8f:34:64:8c:43:cb:15: 4d:4f:74:c2:0a:ce:c4:01:13:ec:cc:3a:4b:11:40: f8:ec:69:93:83:89:2c:1c:5a:1d:9e:8a:5f:34:0e: ed:dd:26:8d:83:f2:0a:08:a1:06:e8:96:11:8d:61: 75:23:aa:93:e9:8a:f3:e1:1c:8a:0e:43:55:a8:64: 39:a7:0a:c5:aa:1e:c8:84:c5:d9:56:48:e7:d9:24: 78:12:1a:07:8a:7b:4d:42:b3:7b:d4:5c:e6:da:9b: 1b:16:ad:0c:c7:87:37:8b:59:26:b5:37:a0:52:4d: 5a:25:97:83:e7:5f:5d:25:80:48:c5:8a:7d:ae:58: 8e:35:d3:62:70:61:8f:2a:16:36:42:e2:23:1f:b6: de:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C2:A1:31:EE:2D:3C:18:97:53:05:B8:2A:65:8F:3F:15:C7:6A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b500f9ea-1f0a-3934-963e-3f57b3b70047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:25:0b:4a:2d:5f:e4:b3:ac:87:e8:ad:fc:ea:1c:d4:4d:a4: bd:77:dd:f3:e1:d2:9c:7d:93:4b:ba:34:7a:0e:1b:4a:0c:c8: 98:7a:ec:3e:23:ec:75:2c:f2:43:cc:80:02:02:0b:6e:fb:6a: a2:1d:e8:42:d9:8d:dc:7f:70:19:5e:7e:8d:54:96:46:0d:ab: d4:c3:7a:b8:de:8d:fb:cb:e1:dd:e5:22:13:75:92:a9:bd:1c: fc:3d:bf:4e:12:94:0e:c2:e7:55:9f:a6:c7:85:ae:81:bc:9e: 87:e7:d8:92:57:80:56:85:36:67:3e:64:30:d1:8d:49:07:42: c9:76:25:1f:59:8e:d6:41:7e:96:3a:ff:97:05:e1:08:f2:f5: 8e:e7:78:e5:19:89:d6:30:ec:d9:48:fd:03:ef:e7:d0:19:be: 0a:97:af:a1:84:aa:cd:fc:39:4d:d9:30:d3:bf:25:5c:c8:11: a2:d3:cd:71:fe:88:b3:f5:ef:df:fe:a0:5c:9f:74:80:fa:24: fe:91:16:d6:a5:33:7a:02:24:6f:22:a3:51:7b:7f:8d:48:f3: c0:4f:5b:9d:dc:fc:30:18:95:3e:b4:5d:5b:5b:67:cb:a4:40: 1e:7e:be:fd:e5:86:f7:83:f1:97:1d:34:e2:a6:5b:5c:f2:f5: d4:f2:b7:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMVuIb0z/3LHYGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk YTY2N2RlNDctYTFjNi00YzRhLTgxZTYtYmZlYWNiOTNiODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59byxDgZEYGzjARBN50YXVkByKu/C40e0gmg EaJzwhkjPXK00TUGCj7XKCSKBgJ8Txfd4LJsi1hNQAmIef+EhS4mt/+78vigWvAF 8KS7TrxW2sHT/wv6nVaE0wVlW0BlMmb1aimTX08oKvtfDA0VGY80ZIxDyxVNT3TC Cs7EARPszDpLEUD47GmTg4ksHFodnopfNA7t3SaNg/IKCKEG6JYRjWF1I6qT6Yrz 4RyKDkNVqGQ5pwrFqh7IhMXZVkjn2SR4EhoHintNQrN71Fzm2psbFq0Mx4c3i1km tTegUk1aJZeD519dJYBIxYp9rliONdNicGGPKhY2QuIjH7belwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnCoTHuLTwYl1MFuCpljz8Vx2rEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjUwMGY5ZWEtMWYwYS0z OTM0LTk2M2UtM2Y1N2IzYjcwMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0lC0otX+SzrIforfzqHNRNpL133fPh0px9k0u6NHoOG0oMyJh67D4j 7HUs8kPMgAICC277aqId6ELZjdx/cBlefo1UlkYNq9TDerjejfvL4d3lIhN1kqm9 HPw9v04SlA7C51WfpseFroG8nofn2JJXgFaFNmc+ZDDRjUkHQsl2JR9ZjtZBfpY6 /5cF4Qjy9Y7neOUZidYw7NlI/QPv59AZvgqXr6GEqs38OU3ZMNO/JVzIEaLTzXH+ iLP179/+oFyfdID6JP6RFtalM3oCJG8io1F7f41I88BPW53c/DAYlT60XVtbZ8uk QB5+vv3lhveD8ZcdNOKmW1zy9dTyt0w= -----END CERTIFICATE-----Generated at Wed Jan 21 00:59:24 2026 by rpki-client