This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa File: cd786728-d6f2-3414-abfc-112e58503c9a.roa (raw, json) Hash identifier: JTmLz5nUXgyPd2WTZVfevrNx8L1ddsO9qLifXQEq24s= Subject key identifier: 3D:35:8C:78:B7:75:D5:88:D1:63:07:46:24:25:F8:D0:C8:D7:7D:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD5FB322B9C62A30C59048C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.157.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:32:2b:9c:62:a3:0c:59:04:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=2342f22b-c234-4c92-bd37-d0575d7adec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:bb:1d:90:71:e7:c4:e3:b0:f0:9e:91:38: ef:e9:89:4c:8f:1e:0d:ed:9a:7d:35:71:f7:c2:65: b2:75:1f:d3:81:d6:71:ea:2b:02:1c:61:6a:26:75: 9c:da:51:01:c3:2c:3b:fc:18:52:2a:8e:04:7c:0b: 2d:da:1d:f6:d9:ee:9c:31:d7:7f:6e:36:59:24:c8: f2:0b:5e:a5:90:72:9b:59:13:51:d0:f2:57:73:17: 69:56:3d:10:36:cb:3c:b7:59:59:5d:cb:b5:38:7c: d5:ba:78:00:c3:06:49:51:be:37:3d:cf:46:0b:65: 0b:d8:76:80:cb:63:ee:14:91:23:71:ee:75:80:ef: d3:00:49:65:a1:52:7a:95:c2:da:d9:c2:80:d4:b7: 39:ca:b0:a7:e3:cd:86:cd:62:56:43:b3:eb:48:09: b6:13:80:01:9a:82:4a:a6:dd:66:23:a9:fe:ab:50: c5:04:7b:73:8d:f7:69:d3:56:f1:65:0b:bd:a2:1f: 87:aa:5d:60:16:b1:52:dc:db:78:d4:65:68:15:ad: 9b:82:a2:4e:e2:7e:44:29:18:8d:b7:ba:cd:78:82: 37:c5:22:2b:fe:0d:77:3c:55:0e:ce:23:cc:c0:2c: 0a:b8:b0:9b:2b:fb:37:a9:9e:a5:8d:ca:9f:1b:56: 2e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:35:8C:78:B7:75:D5:88:D1:63:07:46:24:25:F8:D0:C8:D7:7D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cd786728-d6f2-3414-abfc-112e58503c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:0b:18:ad:fd:16:c2:19:02:55:28:b0:58:a5:99:49:e6:3f: 55:da:31:b9:c1:a1:cf:c7:8c:b8:92:5a:75:b5:fa:95:a1:38: 9d:82:3d:ff:c4:94:0b:aa:69:02:f4:95:39:b9:88:b2:6a:02: 05:0f:cd:fc:c5:a1:ad:b8:b4:a8:62:5c:12:ef:3e:19:1b:a9: d8:eb:f0:2d:85:20:86:0f:56:44:5f:69:05:7e:d0:54:05:10: 75:6f:8d:39:4f:81:ca:0e:3d:de:49:ef:e9:d6:4f:bb:64:8d: ca:19:ab:cc:5c:1f:6b:03:7a:7c:ce:6b:e2:d9:15:5d:1a:d5: 9c:52:d3:b6:68:17:cf:ca:00:e2:1e:df:bc:73:f2:d8:c9:ce: ce:ec:dc:77:86:81:d0:74:a1:9e:da:e1:7d:1f:47:67:ae:84: 8b:69:ed:c7:97:99:04:1c:2e:23:af:24:0b:55:7d:e0:8b:e1: cb:85:ce:20:58:0c:e0:57:0f:a4:e5:d0:da:e9:7f:23:47:09: 01:e7:91:a1:1a:be:9f:5d:a0:ec:a0:d6:32:fe:cb:fd:ce:ad: b8:db:2e:ee:59:ab:bb:e0:3f:ce:c6:cd:23:45:78:2d:05:e7: 48:a0:bd:64:e1:b0:a8:fd:f9:59:0c:3b:5f:96:1a:9f:b8:15: b3:f5:18:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+zIrnGKjDFkEjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk MjM0MmYyMmItYzIzNC00YzkyLWJkMzctZDA1NzVkN2FkZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZa7HZBx58TjsPCekTjv6YlMjx4N7Zp9NXH3 wmWydR/TgdZx6isCHGFqJnWc2lEBwyw7/BhSKo4EfAst2h322e6cMdd/bjZZJMjy C16lkHKbWRNR0PJXcxdpVj0QNss8t1lZXcu1OHzVungAwwZJUb43Pc9GC2UL2HaA y2PuFJEjce51gO/TAElloVJ6lcLa2cKA1Lc5yrCn482GzWJWQ7PrSAm2E4ABmoJK pt1mI6n+q1DFBHtzjfdp01bxZQu9oh+Hql1gFrFS3Nt41GVoFa2bgqJO4n5EKRiN t7rNeII3xSIr/g13PFUOziPMwCwKuLCbK/s3qZ6ljcqfG1YufwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD01jHi3ddWI0WMHRiQl+NDI132dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2Q3ODY3MjgtZDZmMi0z NDE0LWFiZmMtMTEyZTU4NTAzYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoLGK39FsIZAlUosFilmUnmP1XaMbnBoc/HjLiSWnW1+pWhOJ2CPf/E lAuqaQL0lTm5iLJqAgUPzfzFoa24tKhiXBLvPhkbqdjr8C2FIIYPVkRfaQV+0FQF EHVvjTlPgcoOPd5J7+nWT7tkjcoZq8xcH2sDenzOa+LZFV0a1ZxS07ZoF8/KAOIe 37xz8tjJzs7s3HeGgdB0oZ7a4X0fR2euhItp7ceXmQQcLiOvJAtVfeCL4cuFziBY DOBXD6Tl0NrpfyNHCQHnkaEavp9doOyg1jL+y/3OrbjbLu5Zq7vgP87GzSNFeC0F 50igvWThsKj9+VkMO1+WGp+4FbP1GOA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:40 2025 by rpki-client