This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa File: b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa (raw, json) Hash identifier: Qa1VjlALO/98/LJeou6t7MZTUsB8ozDBRMo8a4cURK4= Subject key identifier: 8A:40:C2:C8:FE:A1:73:9D:69:DC:87:E2:C4:21:2A:5F:09:33:EB:A1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C040B4E2480A13D2291D3A200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa Signing time: Sat 29 Nov 2025 02:00:31 +0000 ROA not before: Sat 29 Nov 2025 02:00:31 +0000 ROA not after: Fri 27 Feb 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:04:0b:4e:24:80:a1:3d:22:91:d3:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 29 02:00:31 2025 GMT Not After : Feb 27 02:00:31 2026 GMT Subject: CN=227ef96b-9bb2-43d3-b792-d92915745e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:89:62:f9:7c:61:cf:b7:f9:60:43:44:99: d0:f2:e5:2c:1b:c8:fe:f4:00:01:30:40:2f:cf:e0: d0:a5:eb:d7:2f:74:bd:87:36:90:5b:ce:36:0d:22: cf:cc:79:e5:3a:5a:9e:c4:3a:6e:ae:d0:95:8b:31: c0:4d:f9:8d:7b:49:e5:b5:33:bc:60:24:93:77:bf: 6c:9b:84:50:02:2f:ff:71:27:af:18:2c:21:e3:73: 9a:cd:f3:42:64:91:e4:d4:ef:94:19:7b:58:fb:75: e2:6d:70:54:f9:de:6d:dc:62:ed:71:e4:74:7e:fe: 4a:4f:3e:94:0f:3e:bc:90:6f:ae:28:ab:f5:d1:bc: 2d:32:5f:90:e1:54:25:51:e8:6e:43:6d:a0:6c:c3: 67:5e:5a:0d:e2:3f:47:f9:2b:9e:98:a7:b3:45:58: a6:36:d0:1c:df:9d:32:92:2a:8d:25:b4:2e:c0:67: 51:6f:4f:61:c2:84:e2:87:a5:e8:bd:7b:78:e0:b8: 8d:23:6b:d6:51:14:67:35:1a:99:31:a1:72:fc:3f: cf:91:4d:86:5d:d2:73:cc:72:58:82:4d:a5:4b:e6: 67:bf:86:d0:69:26:9a:fd:51:a4:86:51:0f:28:6a: 58:14:dc:f1:31:b6:2e:fc:8a:e5:02:30:3d:27:20: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:40:C2:C8:FE:A1:73:9D:69:DC:87:E2:C4:21:2A:5F:09:33:EB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b98b3835-cb67-3eb6-9902-27ecb2f277ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:df:c0:76:a7:ce:d8:74:7a:d8:6c:af:13:e7:fc:ff:e5:79: 00:36:a1:ff:b6:b8:63:d4:50:d6:f9:9b:01:7c:68:47:c5:e4: 0f:c3:d0:41:a8:86:f9:79:ad:2c:48:96:5b:3b:09:a4:ec:43: c6:5e:4d:2b:b4:90:0b:ee:67:eb:0c:b4:85:c4:b6:3d:15:be: c6:66:82:9a:c1:f7:a8:63:52:c2:de:99:38:25:01:d7:26:57: 30:9b:9c:75:34:ad:c7:99:ae:e4:ba:1d:5c:ad:77:2a:e9:ca: 7c:57:60:ef:e9:f7:1e:f6:f4:72:3d:df:ba:83:4c:6e:81:22: 4f:16:c9:ff:7b:3f:33:c1:91:0f:c0:00:33:3b:0b:d4:cf:6c: 9f:e7:3b:73:e2:4f:30:59:0d:f3:5a:ff:94:d4:39:4a:c3:93: 89:50:1f:b6:e9:d8:0f:5a:42:b8:2a:51:d9:0c:08:2f:f2:fd: 21:b1:15:e1:78:b8:8d:a9:10:46:5f:02:bb:e3:47:8a:aa:d1: 3f:09:37:63:14:a9:a3:9c:5f:a0:af:f1:47:14:21:14:98:79: f0:f1:af:22:fc:49:7f:93:69:c1:17:25:bb:df:27:4b:70:f6: 98:b2:27:b8:49:36:ba:d1:f2:d6:6f:72:42:a7:29:77:8a:c7: 55:c3:37:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwEC04kgKE9IpHTogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyOTAyMDAzMVoXDTI2MDIyNzAyMDAzMVowLzEtMCsGA1UEAxMk MjI3ZWY5NmItOWJiMi00M2QzLWI3OTItZDkyOTE1NzQ1ZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/aJYvl8Yc+3+WBDRJnQ8uUsG8j+9AABMEAv z+DQpevXL3S9hzaQW842DSLPzHnlOlqexDpurtCVizHATfmNe0nltTO8YCSTd79s m4RQAi//cSevGCwh43OazfNCZJHk1O+UGXtY+3XibXBU+d5t3GLtceR0fv5KTz6U Dz68kG+uKKv10bwtMl+Q4VQlUehuQ22gbMNnXloN4j9H+SuemKezRVimNtAc350y kiqNJbQuwGdRb09hwoTih6XovXt44LiNI2vWURRnNRqZMaFy/D/PkU2GXdJzzHJY gk2lS+Znv4bQaSaa/VGkhlEPKGpYFNzxMbYu/IrlAjA9JyDi9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpAwsj+oXOdadyH4sQhKl8JM+uhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjk4YjM4MzUtY2I2Ny0z ZWI2LTk5MDItMjdlY2IyZjI3N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHfwHanzth0ethsrxPn/P/leQA2of+2uGPUUNb5mwF8aEfF5A/D0EGo hvl5rSxIlls7CaTsQ8ZeTSu0kAvuZ+sMtIXEtj0VvsZmgprB96hjUsLemTglAdcm VzCbnHU0rceZruS6HVytdyrpynxXYO/p9x729HI937qDTG6BIk8Wyf97PzPBkQ/A ADM7C9TPbJ/nO3PiTzBZDfNa/5TUOUrDk4lQH7bp2A9aQrgqUdkMCC/y/SGxFeF4 uI2pEEZfArvjR4qq0T8JN2MUqaOcX6Cv8UcUIRSYefDxryL8SX+TacEXJbvfJ0tw 9piyJ7hJNrrR8tZvckKnKXeKx1XDN/4= -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:21 2025 by rpki-client