This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa File: bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa (raw, json) Hash identifier: kWjmHfujw1mV4Sl1wJn6hjcoFsNYiIsD8kEv3WCSnEY= Subject key identifier: 91:B6:FF:00:52:78:A6:80:C2:AA:86:25:22:98:31:FA:31:D7:AB:EA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE555DCFE5046F9E3851F1000 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:dc:fe:50:46:f9:e3:85:1f:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=7aefc345-ac95-4750-b810-323bdf042517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:7d:90:0e:be:c1:97:21:ad:b4:64:6e:2a: 6e:5a:8d:1d:69:80:91:c0:6e:ed:af:f2:d6:a2:f1: 21:a6:21:5e:c8:30:4e:a1:02:bc:52:54:16:71:88: 80:d2:1b:52:96:6e:0c:82:09:25:e5:86:4c:42:a8: 1c:65:79:70:be:18:c4:79:5a:3e:5c:84:db:c9:51: f0:58:e0:0a:3b:fd:16:2f:7d:12:28:0a:68:85:7c: 2f:84:04:60:8d:ae:f2:c7:99:b1:3c:76:34:0a:44: b1:c6:4f:f4:d5:15:89:81:97:23:23:c6:04:4c:68: 01:ea:ed:e0:97:2d:96:b7:2d:2e:24:7e:09:d0:12: 35:91:f8:30:eb:5a:90:71:25:8f:89:82:4d:d1:23: bc:c3:13:b0:6b:96:84:e1:67:ff:d5:3b:16:66:ab: 28:fd:39:73:13:76:a6:ac:b4:bc:2f:47:e6:ea:0a: d0:43:fa:f1:d9:16:66:49:d8:fa:12:46:6a:ae:47: 7e:32:ac:39:06:a2:26:17:b1:f5:31:1b:44:6f:79: 38:42:74:44:82:f2:73:e0:4d:ef:9f:84:1d:58:27: 74:3c:b4:4e:ea:cf:e9:5e:32:42:7b:6c:02:82:ff: 7e:e0:d0:31:68:57:fc:a6:15:a2:6c:9a:c9:d0:44: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:FF:00:52:78:A6:80:C2:AA:86:25:22:98:31:FA:31:D7:AB:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/bf5165e3-d1b5-30c8-9bb2-340b00e4186a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:80:58:ef:db:9b:f1:74:63:da:25:fb:6a:6f:20:54:07:e4: 53:5e:cb:a3:da:f4:c1:18:f6:08:61:fa:47:75:03:88:71:dc: e2:80:5e:d8:cb:60:c9:f0:9f:9e:4f:1e:ef:73:7c:e9:93:c9: 22:c4:4a:d5:d6:3a:c3:25:2f:88:a7:14:e6:8b:4d:cb:f4:79: 61:2d:ff:60:95:42:6d:5e:06:ba:7f:e5:e0:30:2f:92:bc:b3: bb:e5:9f:50:48:c9:73:e9:ea:d0:9a:20:36:02:ce:78:7b:e3: 9f:43:41:20:d1:f8:f8:7e:ac:85:7f:4f:35:84:7d:8b:ff:70: 45:a3:33:77:2d:3f:6c:6a:23:32:db:ac:c8:50:ec:10:b1:d9: 90:ee:ed:d9:55:e4:ca:5b:ae:f0:b3:7f:95:8d:24:a1:2d:2c: 3a:89:74:1e:58:06:42:52:86:5d:62:99:9c:55:8c:d0:09:ba: 5a:36:42:a3:c4:17:5d:51:05:86:59:5d:c0:66:83:32:59:90: 09:0f:39:db:44:db:f1:d8:6c:bc:b6:61:1c:44:28:a6:5f:50: b6:8a:8c:08:cd:28:5c:a3:5c:c6:ac:0a:13:d9:a2:e0:e9:d9: 73:1d:9f:4d:25:79:9a:bf:08:a4:e9:bc:5d:9b:72:a8:c8:01: 2a:14:d4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVdz+UEb544UfEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk N2FlZmMzNDUtYWM5NS00NzUwLWI4MTAtMzIzYmRmMDQyNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7N9kA6+wZchrbRkbipuWo0daYCRwG7tr/LW ovEhpiFeyDBOoQK8UlQWcYiA0htSlm4Mggkl5YZMQqgcZXlwvhjEeVo+XITbyVHw WOAKO/0WL30SKApohXwvhARgja7yx5mxPHY0CkSxxk/01RWJgZcjI8YETGgB6u3g ly2Wty0uJH4J0BI1kfgw61qQcSWPiYJN0SO8wxOwa5aE4Wf/1TsWZqso/TlzE3am rLS8L0fm6grQQ/rx2RZmSdj6EkZqrkd+Mqw5BqImF7H1MRtEb3k4QnREgvJz4E3v n4QdWCd0PLRO6s/pXjJCe2wCgv9+4NAxaFf8phWibJrJ0EQBXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG2/wBSeKaAwqqGJSKYMfox16vqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYmY1MTY1ZTMtZDFiNS0z MGM4LTliYjItMzQwYjAwZTQxODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuAWO/bm/F0Y9ol+2pvIFQH5FNey6Pa9MEY9ghh+kd1A4hx3OKAXtjL YMnwn55PHu9zfOmTySLEStXWOsMlL4inFOaLTcv0eWEt/2CVQm1eBrp/5eAwL5K8 s7vln1BIyXPp6tCaIDYCznh7459DQSDR+Ph+rIV/TzWEfYv/cEWjM3ctP2xqIzLb rMhQ7BCx2ZDu7dlV5MpbrvCzf5WNJKEtLDqJdB5YBkJShl1imZxVjNAJulo2QqPE F11RBYZZXcBmgzJZkAkPOdtE2/HYbLy2YRxEKKZfULaKjAjNKFyjXMasChPZouDp 2XMdn00leZq/CKTpvF2bcqjIASoU1IE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:38 2025 by rpki-client