This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b78a586a-4aea-3a0c-8d51-4b0da576ee14.roa File: b78a586a-4aea-3a0c-8d51-4b0da576ee14.roa (raw, json) Hash identifier: gISRfFvcyZBKiv9kAdhGJdfO8gI1yIZ8GZ65H59e0lQ= Subject key identifier: E8:E6:30:A2:5A:07:AE:7F:1A:C1:D6:F3:FA:35:7E:C9:A6:BD:C3:03 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C3381471CD27E59517E6ECA00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b78a586a-4aea-3a0c-8d51-4b0da576ee14.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:47:1c:d2:7e:59:51:7e:6e:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=cd276402-346a-4b01-adf5-89bd1805b65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:93:b2:ff:c6:e8:b4:b3:35:78:7d:37:d9: 2c:09:0c:60:2d:fa:a0:ab:08:e2:ef:d1:f5:cf:f5: 77:7d:2b:ce:5d:81:9f:c3:ac:8c:5a:8d:47:f8:22: 3c:63:db:d7:64:f7:23:53:12:04:da:e3:af:d3:2f: f7:d8:5e:69:b7:ea:d3:05:00:2e:76:76:3f:2f:a8: 09:c8:2c:3b:00:ea:25:18:81:cf:fc:e4:e1:dc:c6: 6e:be:2a:8b:d7:ec:67:2d:be:a3:58:30:ae:0e:26: 33:18:7b:78:c1:61:4c:70:22:5d:0d:77:46:33:d1: 4a:fa:db:49:41:75:4e:d4:ce:d6:91:77:b2:27:81: ae:a1:20:85:e3:55:b6:b9:64:d3:5c:7e:65:7f:51: 34:69:4b:b7:c9:82:94:13:e3:33:78:a1:81:0f:b6: 43:65:2c:ef:52:8c:66:86:e4:27:9f:c4:ae:b3:e2: bb:33:dc:76:6d:72:6f:92:90:75:1f:fc:a1:6b:ab: 1d:bf:b6:f4:8d:14:ed:d2:30:db:27:3b:18:39:c8: b1:a6:bf:14:b6:cb:24:bb:4c:54:9c:e3:77:5b:6e: 0d:18:86:0c:69:05:ac:e1:3b:94:c4:9e:6e:cf:61: 05:73:c3:95:3d:64:05:f8:69:e1:7e:10:d2:2c:4f: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E6:30:A2:5A:07:AE:7F:1A:C1:D6:F3:FA:35:7E:C9:A6:BD:C3:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b78a586a-4aea-3a0c-8d51-4b0da576ee14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:fd:b9:72:52:ff:6f:96:2d:f4:98:6c:91:94:a6:f2:38:c8: 24:5c:f4:50:c0:de:04:fd:c2:db:0f:47:d5:6d:5d:39:e0:ea: c6:86:2d:0f:ea:09:24:8c:12:35:a5:a6:4d:a4:30:ed:60:a3: 49:26:c4:bc:5b:bc:83:65:ec:f5:f1:a6:93:3e:9d:cb:47:ab: e0:c7:b4:36:f4:da:79:f1:d2:c3:7a:79:ae:15:09:5f:c5:0e: 6e:41:5e:5b:a9:56:21:76:9b:96:fc:74:35:1a:9a:de:19:d5: 6e:b9:89:98:b9:6d:22:4b:02:ad:89:b9:74:77:32:cd:39:6b: 14:53:d8:60:ca:bc:0c:c5:3e:21:80:44:ff:31:7d:c6:32:ef: 4e:ef:a1:0c:2d:4a:1d:dd:bb:db:e2:03:1d:f6:8f:fc:1a:c6: 21:9d:74:65:3e:ef:83:0c:69:6c:9a:56:8d:0d:54:52:69:ac: bf:68:ec:f8:f6:0f:c0:9d:70:7d:24:2c:56:1c:af:66:ae:76: 49:eb:27:63:f3:42:6a:12:a7:2b:d8:91:0a:eb:ce:22:f2:94: 5a:53:ee:ba:13:a3:84:03:b7:17:18:d4:81:30:bd:6d:49:70: f0:57:99:4d:6f:66:cf:ea:45:d6:17:91:93:d8:85:f6:62:ed: 61:a5:60:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgUcc0n5ZUX5uygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk Y2QyNzY0MDItMzQ2YS00YjAxLWFkZjUtODliZDE4MDViNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK+Tsv/G6LSzNXh9N9ksCQxgLfqgqwji79H1 z/V3fSvOXYGfw6yMWo1H+CI8Y9vXZPcjUxIE2uOv0y/32F5pt+rTBQAudnY/L6gJ yCw7AOolGIHP/OTh3MZuviqL1+xnLb6jWDCuDiYzGHt4wWFMcCJdDXdGM9FK+ttJ QXVO1M7WkXeyJ4GuoSCF41W2uWTTXH5lf1E0aUu3yYKUE+MzeKGBD7ZDZSzvUoxm huQnn8Sus+K7M9x2bXJvkpB1H/yha6sdv7b0jRTt0jDbJzsYOcixpr8Utssku0xU nON3W24NGIYMaQWs4TuUxJ5uz2EFc8OVPWQF+GnhfhDSLE9YGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjmMKJaB65/GsHW8/o1fsmmvcMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjc4YTU4NmEtNGFlYS0z YTBjLThkNTEtNGIwZGE1NzZlZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX9uXJS/2+WLfSYbJGUpvI4yCRc9FDA3gT9wtsPR9VtXTng6saGLQ/q CSSMEjWlpk2kMO1go0kmxLxbvINl7PXxppM+nctHq+DHtDb02nnx0sN6ea4VCV/F Dm5BXlupViF2m5b8dDUamt4Z1W65iZi5bSJLAq2JuXR3Ms05axRT2GDKvAzFPiGA RP8xfcYy707voQwtSh3du9viAx32j/waxiGddGU+74MMaWyaVo0NVFJprL9o7Pj2 D8CdcH0kLFYcr2audknrJ2PzQmoSpyvYkQrrziLylFpT7roTo4QDtxcY1IEwvW1J cPBXmU1vZs/qRdYXkZPYhfZi7WGlYEY= -----END CERTIFICATE-----Generated at Wed Jan 21 00:58:02 2026 by rpki-client