This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa File: cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa (raw, json) Hash identifier: ldABPEus/3ZB3yjKbHoDQmHQo16wOeUQUAGW87Z+XKY= Subject key identifier: 23:BD:25:E2:89:56:EB:D8:2A:1A:D0:B6:CF:EF:D4:1C:0A:12:0B:B8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C0B06303D86931108EA65F580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:30:3d:86:93:11:08:ea:65:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=451bfc4e-fb5a-4204-bc23-ccb55ab3f408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:ef:30:51:49:dc:cd:d2:87:26:27:3a:9a: e7:a2:3a:27:50:a1:fd:79:89:55:9b:96:3b:5d:f8: df:48:62:03:c5:2f:e1:e4:2d:27:4e:06:88:36:60: 21:7b:75:ed:fc:e3:67:52:22:d0:76:5b:e7:5c:fa: 2d:c6:74:76:56:28:73:29:a9:64:b2:f6:8b:9c:c2: 97:ef:83:aa:a2:9e:c7:46:d2:b4:aa:26:06:8b:59: 8d:de:28:af:fb:8c:7b:b3:a6:3c:76:2a:9f:8b:73: 0e:6f:85:b9:09:af:a0:71:40:bf:9c:1d:47:a2:8d: 82:cc:87:bf:d7:3f:7a:c9:b5:03:7f:0c:5d:c1:24: ba:0e:48:5f:44:30:a4:ab:ad:89:07:d9:58:8d:63: a5:11:71:7e:0b:6d:f2:71:b6:b6:1f:3b:04:a1:89: f4:82:93:6c:71:52:10:19:44:71:8c:83:df:5c:8e: d4:50:1b:8e:c2:9e:4c:d0:5e:ae:a1:1f:54:9d:15: e1:7c:41:1c:6b:0c:57:e9:17:d6:be:19:0c:aa:ff: 9d:ec:b1:84:32:91:7b:79:18:41:03:01:a3:5c:f7: 7f:02:fc:70:79:b0:9a:53:bb:e0:51:d1:c5:01:3d: 04:97:65:38:c4:9e:56:15:ba:19:bb:b0:87:65:dc: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BD:25:E2:89:56:EB:D8:2A:1A:D0:B6:CF:EF:D4:1C:0A:12:0B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cb95dcb5-036c-3bfa-828a-cd844f666ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:53:fd:1e:d9:1d:aa:e5:5e:c3:33:29:c1:c2:0f:81:fc:6b: 6e:cf:45:b7:5a:3b:31:53:ee:e3:cd:ad:f3:73:36:0d:e9:44: 8b:ce:ec:63:49:6b:6b:d1:44:07:26:76:c7:4a:dc:91:d6:c0: 2d:9f:18:41:ae:2f:3f:20:40:59:97:69:8d:dc:54:ca:6b:f8: 27:85:6d:a4:79:a3:2b:2b:ed:d4:11:38:38:7c:0b:2c:4f:91: 80:43:59:4a:87:18:88:b8:8f:83:83:2a:e5:7e:88:59:bb:0d: 51:87:cb:2d:57:f8:28:04:5c:52:cf:12:04:8b:08:95:32:06: c5:2e:c2:97:1b:a4:c6:1e:fe:a5:68:fb:a0:5b:37:82:49:06: 0f:79:78:df:ae:88:38:17:80:0a:cd:13:76:3b:c5:59:57:2b: ff:55:9e:ae:a6:a9:56:39:a4:86:c5:5c:c2:43:15:52:18:10: b0:0c:1b:b7:a7:a3:97:a7:59:d7:3f:7d:3d:bd:98:50:ec:3d: ef:1b:62:5f:46:1c:ac:56:19:4b:36:c5:1e:86:eb:e7:f9:4f: af:6b:61:45:e7:1c:54:95:72:df:4d:0a:e0:4e:b4:0f:c8:75: 7e:bf:ad:1a:ab:d3:96:e2:64:de:01:51:8e:37:1c:f6:bf:b4: 8e:91:dc:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBjA9hpMRCOpl9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk NDUxYmZjNGUtZmI1YS00MjA0LWJjMjMtY2NiNTVhYjNmNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBLvMFFJ3M3ShyYnOprnojonUKH9eYlVm5Y7 XfjfSGIDxS/h5C0nTgaINmAhe3Xt/ONnUiLQdlvnXPotxnR2VihzKalksvaLnMKX 74Oqop7HRtK0qiYGi1mN3iiv+4x7s6Y8diqfi3MOb4W5Ca+gcUC/nB1Hoo2CzIe/ 1z96ybUDfwxdwSS6DkhfRDCkq62JB9lYjWOlEXF+C23ycba2HzsEoYn0gpNscVIQ GURxjIPfXI7UUBuOwp5M0F6uoR9UnRXhfEEcawxX6RfWvhkMqv+d7LGEMpF7eRhB AwGjXPd/AvxwebCaU7vgUdHFAT0El2U4xJ5WFboZu7CHZdwicQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO9JeKJVuvYKhrQts/v1BwKEgu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2I5NWRjYjUtMDM2Yy0z YmZhLTgyOGEtY2Q4NDRmNjY2YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElT/R7ZHarlXsMzKcHCD4H8a27PRbdaOzFT7uPNrfNzNg3pRIvO7GNJ a2vRRAcmdsdK3JHWwC2fGEGuLz8gQFmXaY3cVMpr+CeFbaR5oysr7dQRODh8CyxP kYBDWUqHGIi4j4ODKuV+iFm7DVGHyy1X+CgEXFLPEgSLCJUyBsUuwpcbpMYe/qVo +6BbN4JJBg95eN+uiDgXgArNE3Y7xVlXK/9Vnq6mqVY5pIbFXMJDFVIYELAMG7en o5enWdc/fT29mFDsPe8bYl9GHKxWGUs2xR6G6+f5T69rYUXnHFSVct9NCuBOtA/I dX6/rRqr05biZN4BUY43HPa/tI6R3PE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:06 2025 by rpki-client