This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1439d28-9af8-3f08-8217-331ff0fa7b80.roa File: c1439d28-9af8-3f08-8217-331ff0fa7b80.roa (raw, json) Hash identifier: 48wZKgJc8yjViWaFMbyDPm6rmk0y2OHgashmfyGhI8k= Subject key identifier: 45:3B:9E:DE:5B:E5:C9:71:7F:06:9D:28:FD:11:5C:3D:AA:DB:66:5B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BF615F0F359B0D5C2710BE240 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1439d28-9af8-3f08-8217-331ff0fa7b80.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 8069 IP address blocks: 20.153.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:f0:f3:59:b0:d5:c2:71:0b:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=78d73142-8a65-4c35-adec-79bbef150812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:3f:81:9d:36:eb:df:80:73:69:91:27:7c: 6f:71:b8:56:04:49:ca:13:8e:4a:69:ba:7e:c0:b4: 7a:9f:43:3b:03:c2:90:29:be:15:11:1b:b3:e8:e5: 2d:c2:39:91:3b:bb:dd:ec:aa:ba:41:38:ed:89:bc: 6d:09:96:fb:b9:cd:78:2d:7e:fa:3d:c1:a7:59:9c: 0e:f6:12:25:5b:c1:50:d0:70:7f:80:b9:f0:89:48: 8c:0c:c5:f7:c9:b2:95:e0:3c:d0:6e:41:a3:85:d5: 58:d1:d2:5c:41:2b:dc:ef:7e:0a:c2:18:d0:22:a5: fd:cc:f7:bc:1b:e0:30:21:36:8a:82:22:da:c8:f8: 2e:b8:a6:b3:c4:93:94:34:43:7e:a1:a1:ab:8f:31: fe:0d:8d:7b:73:d0:70:0b:ef:85:73:a3:f8:22:da: 24:7a:ec:52:2b:22:ff:18:bf:0f:e1:7c:46:49:96: aa:04:88:99:7f:47:37:2a:9a:6f:88:f8:14:7f:d8: 39:28:a2:7f:32:fd:ac:5b:97:9f:af:9d:40:cd:e5: ee:3e:15:27:2c:83:3c:90:65:94:36:60:49:55:03: 05:9c:74:f0:4f:c4:cc:88:db:35:e3:9a:2b:6a:e3: e1:e7:6c:f6:80:59:a2:e4:6c:2b:20:f5:f7:62:49: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3B:9E:DE:5B:E5:C9:71:7F:06:9D:28:FD:11:5C:3D:AA:DB:66:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c1439d28-9af8-3f08-8217-331ff0fa7b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:83:31:ff:6a:30:d6:78:3d:4a:3b:4b:57:98:24:2e:bc:d1: 84:72:b0:83:5f:3b:69:83:30:36:26:10:0b:bb:28:11:9c:5b: 14:be:18:5d:fa:9c:0e:57:ed:5a:94:0b:9a:26:65:0e:bc:bf: 57:89:13:3d:ec:e8:ed:90:d1:8c:74:de:f0:e4:f4:1f:c2:ab: c2:e3:f3:8e:b2:cf:6b:db:9a:38:19:41:8a:64:42:4b:67:76: a6:c0:99:4a:76:57:0a:d6:9d:67:5e:32:a4:63:e2:67:f7:1b: a5:c4:ef:38:e4:68:f1:89:52:3a:66:2b:4c:ec:6f:c0:9d:bd: af:9f:df:67:4d:fc:46:b9:99:9b:2d:e1:3c:a6:15:a2:ee:5a: 28:ba:4b:34:4d:70:6a:81:b1:e6:09:4a:08:1f:a4:b9:9b:8a: c3:23:02:87:02:07:9a:dd:2f:fb:d4:69:57:1d:24:74:7e:9f: a8:a1:02:10:e7:c9:bf:13:19:09:ce:09:23:f9:30:6b:29:3b: c9:ec:24:a0:b2:eb:c9:77:ce:0d:ab:0f:a5:a0:19:69:23:a8: 62:03:13:89:9e:54:ef:56:88:6f:43:22:89:6b:76:c2:27:d7: c4:65:19:0e:a7:f5:41:77:1f:9d:eb:b7:39:76:80:14:30:0b: f5:19:6a:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2FfDzWbDVwnEL4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk NzhkNzMxNDItOGE2NS00YzM1LWFkZWMtNzliYmVmMTUwODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaw/gZ0269+Ac2mRJ3xvcbhWBEnKE45Kabp+ wLR6n0M7A8KQKb4VERuz6OUtwjmRO7vd7Kq6QTjtibxtCZb7uc14LX76PcGnWZwO 9hIlW8FQ0HB/gLnwiUiMDMX3ybKV4DzQbkGjhdVY0dJcQSvc734KwhjQIqX9zPe8 G+AwITaKgiLayPguuKazxJOUNEN+oaGrjzH+DY17c9BwC++Fc6P4ItokeuxSKyL/ GL8P4XxGSZaqBIiZf0c3KppviPgUf9g5KKJ/Mv2sW5efr51AzeXuPhUnLIM8kGWU NmBJVQMFnHTwT8TMiNs145orauPh52z2gFmi5GwrIPX3Yklf1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEU7nt5b5clxfwadKP0RXD2q22ZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzE0MzlkMjgtOWFmOC0z ZjA4LTgyMTctMzMxZmYwZmE3YjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeDMf9qMNZ4PUo7S1eYJC680YRysINfO2mDMDYmEAu7KBGcWxS+GF36 nA5X7VqUC5omZQ68v1eJEz3s6O2Q0Yx03vDk9B/Cq8Lj846yz2vbmjgZQYpkQktn dqbAmUp2VwrWnWdeMqRj4mf3G6XE7zjkaPGJUjpmK0zsb8Cdva+f32dN/Ea5mZst 4TymFaLuWii6SzRNcGqBseYJSggfpLmbisMjAocCB5rdL/vUaVcdJHR+n6ihAhDn yb8TGQnOCSP5MGspO8nsJKCy68l3zg2rD6WgGWkjqGIDE4meVO9WiG9DIolrdsIn 18RlGQ6n9UF3H53rtzl2gBQwC/UZanE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:04 2025 by rpki-client