This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa File: bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa (raw, json) Hash identifier: HYcUAVlLUNlbaqg63VC6lSSvNIdGgYjCvxU/gMAWbqc= Subject key identifier: DE:8B:E5:CF:EE:99:63:BA:86:9B:C9:1A:38:46:D2:52:CF:05:9B:52 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD5FB1730B346731F15BB5600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.157.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:17:30:b3:46:73:1f:15:bb:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=aa236e09-0cf5-4324-8859-56b9ff5eaea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:9f:9b:e0:32:4d:68:96:11:5d:23:38:dd: 4f:aa:0a:4d:bd:79:02:7c:8d:d4:b5:96:d7:0f:5e: 27:57:6d:40:de:58:c4:db:65:24:a9:9a:29:4d:f8: bc:90:75:4f:9b:3e:79:44:9b:10:fd:5e:5e:de:6d: 44:61:b8:b0:da:57:29:e1:22:cc:48:a2:28:65:02: 9b:8d:a8:d0:fd:b0:0d:92:7c:84:85:84:7b:82:5e: 77:9e:2e:f6:0c:66:b1:bd:ef:e3:a3:ff:db:35:a1: 0c:cc:55:a8:05:78:7c:d7:50:a8:5f:ea:9c:4f:51: 10:cf:96:78:df:1a:13:8a:96:8b:26:fe:ca:94:0f: 4a:9a:0c:ff:ad:52:c8:e9:31:93:d3:ad:c8:6d:29: b4:a1:44:e9:e3:eb:50:de:d7:b9:58:97:fa:77:62: 3b:2e:c1:87:dd:9d:a3:f3:90:71:58:27:e8:90:80: 47:86:1f:66:e8:a2:11:9f:8a:20:98:c0:c6:45:e6: f2:55:46:62:0e:7f:5c:86:4a:61:10:ab:14:75:06: 6c:5e:ba:29:4b:49:64:20:f4:c6:b7:3e:83:4f:94: 12:dc:9c:d2:61:4f:7b:b0:32:43:eb:a0:15:65:45: af:27:43:66:95:e8:c8:b1:7d:69:f8:78:82:7f:ee: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8B:E5:CF:EE:99:63:BA:86:9B:C9:1A:38:46:D2:52:CF:05:9B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf46d194-0dd2-36cc-ae4a-7bcffa50ec1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a4:8e:29:ad:17:9c:f7:22:14:d3:b7:e9:9b:ac:de:97:a2: f7:83:e5:38:05:dd:0a:b5:d4:2d:bb:02:61:9d:d3:dc:a8:bf: 4b:21:b5:ff:a9:89:2e:15:fe:52:5b:8f:08:cc:8f:02:8a:58: e7:02:06:a8:be:45:fe:0f:25:43:31:13:f9:c1:62:15:15:c4: 0c:4e:b5:ab:56:b1:2f:57:d8:f3:2e:d8:63:84:67:8d:c5:30: 83:90:02:27:7c:55:e3:23:25:0f:06:e9:7e:19:c7:94:e5:37: a4:24:21:ed:c0:b2:18:5f:e0:f6:d1:eb:63:fc:78:ac:71:c3: b5:e7:80:bd:e2:5c:91:24:55:c8:1d:96:bc:84:7e:0d:99:a1: 6e:77:cc:02:6c:3e:42:c9:9e:24:7a:65:f6:38:32:74:a2:d9: d6:fe:aa:27:ed:f9:79:bb:3d:14:33:48:c4:61:ae:fc:96:42: 53:7b:87:67:2e:1d:0b:5d:5f:aa:7c:95:39:1b:7a:01:38:71: 45:8c:ff:47:9c:ff:0b:47:31:8b:2a:ad:29:c1:f5:80:d2:b7: 45:5a:94:92:d1:ce:af:13:39:ef:c0:c4:51:b5:4e:a4:df:dc: 72:f2:74:e5:09:88:a9:02:00:3f:2a:82:a7:e6:8e:e8:9a:c7: 39:f5:d8:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+xcws0ZzHxW7VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk YWEyMzZlMDktMGNmNS00MzI0LTg4NTktNTZiOWZmNWVhZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA212fm+AyTWiWEV0jON1PqgpNvXkCfI3UtZbX D14nV21A3ljE22UkqZopTfi8kHVPmz55RJsQ/V5e3m1EYbiw2lcp4SLMSKIoZQKb jajQ/bANknyEhYR7gl53ni72DGaxve/jo//bNaEMzFWoBXh811CoX+qcT1EQz5Z4 3xoTipaLJv7KlA9Kmgz/rVLI6TGT063IbSm0oUTp4+tQ3te5WJf6d2I7LsGH3Z2j 85BxWCfokIBHhh9m6KIRn4ogmMDGRebyVUZiDn9chkphEKsUdQZsXropS0lkIPTG tz6DT5QS3JzSYU97sDJD66AVZUWvJ0NmlejIsX1p+HiCf+6S7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6L5c/umWO6hpvJGjhG0lLPBZtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmY0NmQxOTQtMGRkMi0z NmNjLWFlNGEtN2JjZmZhNTBlYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCkjimtF5z3IhTTt+mbrN6XoveD5TgF3Qq11C27AmGd09yov0shtf+p iS4V/lJbjwjMjwKKWOcCBqi+Rf4PJUMxE/nBYhUVxAxOtatWsS9X2PMu2GOEZ43F MIOQAid8VeMjJQ8G6X4Zx5TlN6QkIe3Ashhf4PbR62P8eKxxw7XngL3iXJEkVcgd lryEfg2ZoW53zAJsPkLJniR6ZfY4MnSi2db+qift+Xm7PRQzSMRhrvyWQlN7h2cu HQtdX6p8lTkbegE4cUWM/0ec/wtHMYsqrSnB9YDSt0ValJLRzq8TOe/AxFG1TqTf 3HLydOUJiKkCAD8qgqfmjuiaxzn12Ls= -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:31 2025 by rpki-client