This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa File: d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa (raw, json) Hash identifier: Fvbwh501colx/w4tc1FaQpx8GPp0KKi8btxwgVYTu1c= Subject key identifier: 22:00:0B:13:8A:97:A7:C6:9A:1C:54:CF:1D:9C:1D:C4:EB:92:81:6F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C3381496276C4175EB6EC46A0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:49:62:76:c4:17:5e:b6:ec:46:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=ffbb06c9-997e-4050-9039-0e273053f1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:20:a0:62:cc:4c:5e:ba:16:67:12:a4:28: 4b:5b:77:2e:0f:fa:7f:19:59:70:7d:22:e5:a8:92: 67:b9:40:3e:a6:8a:bc:a7:e7:16:9f:bc:8a:e2:39: 71:73:ea:9f:11:81:b9:6e:25:95:10:ac:3f:14:a6: ae:de:05:db:5d:93:30:ba:22:06:14:94:ab:56:e6: 36:19:c8:e6:6a:45:43:e1:89:bd:3e:fe:dd:76:61: bc:27:2a:18:a5:14:11:63:37:55:52:84:2c:5a:f7: 75:8b:0d:0d:8f:73:45:11:29:7e:19:22:20:94:bf: 83:86:eb:31:f0:ad:e2:13:e0:c6:c9:30:72:b5:6e: 82:bf:e0:c1:78:e5:0a:3a:54:5e:54:c7:d9:7d:88: 1f:d3:97:b7:20:2d:06:3e:a5:b7:26:1f:50:4c:9b: 84:29:d3:3c:a7:f0:10:16:db:b5:43:1e:85:d5:c9: 1a:e5:14:9d:71:a3:68:98:9a:1f:49:98:28:3e:c6: 5a:ad:81:a4:30:13:05:f7:7c:00:9c:fe:23:bc:81: dc:7f:50:da:60:e0:6b:4d:fa:a7:6e:4d:6d:05:2b: e9:37:0f:23:e9:74:b2:9d:91:5a:0e:b1:46:34:36: ba:17:2a:48:57:a9:49:0d:63:6d:82:10:2e:84:43: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:00:0B:13:8A:97:A7:C6:9A:1C:54:CF:1D:9C:1D:C4:EB:92:81:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d3b3996d-ee87-3075-8bef-f09d1f7b233e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1a:02:ea:0a:fc:ee:ae:22:62:e9:3c:14:e2:90:23:cf:68: 2c:95:ff:e1:e0:ed:2b:e4:7f:6a:3b:08:96:b9:07:bb:c7:73: 62:bb:ff:bb:d7:6d:d9:84:22:a6:14:bf:4e:3e:ce:1b:48:3f: a6:57:5d:c1:1b:51:d4:01:09:ac:68:30:cb:25:13:65:b4:47: ed:5a:d7:e0:e0:75:a5:37:9c:46:a3:db:44:5e:f1:5e:d5:56: 95:98:4a:df:03:01:b8:93:32:4f:e1:34:6c:c9:ce:3f:10:cf: 9a:7c:3c:c2:10:fb:67:b1:32:ab:e3:9e:35:1d:44:9e:6c:20: 7a:35:73:b5:6f:64:a5:01:25:30:17:cf:ca:65:cb:ed:91:f1: 7f:1b:70:a9:b3:ba:1f:e5:cd:15:51:33:16:7c:e7:ce:15:bd: 83:48:09:f4:9e:75:bf:ad:2f:02:d3:37:cb:6e:69:d3:fc:0c: be:15:f5:6e:79:9d:0e:41:42:1f:aa:18:e1:91:c4:1c:99:1a: 60:da:ed:e9:11:46:70:88:63:54:ff:42:28:6f:a6:91:38:aa: ae:b1:21:65:fd:8f:17:01:49:be:68:28:f7:97:cc:f8:8b:21: 9c:4c:e0:71:20:c2:7c:87:1d:b3:42:dc:fd:5f:dc:1d:5d:ad: 7c:f9:5d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgUlidsQXXrbsRqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk ZmZiYjA2YzktOTk3ZS00MDUwLTkwMzktMGUyNzMwNTNmMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV0goGLMTF66FmcSpChLW3cuD/p/GVlwfSLl qJJnuUA+poq8p+cWn7yK4jlxc+qfEYG5biWVEKw/FKau3gXbXZMwuiIGFJSrVuY2 GcjmakVD4Ym9Pv7ddmG8JyoYpRQRYzdVUoQsWvd1iw0Nj3NFESl+GSIglL+Dhusx 8K3iE+DGyTBytW6Cv+DBeOUKOlReVMfZfYgf05e3IC0GPqW3Jh9QTJuEKdM8p/AQ Ftu1Qx6F1cka5RSdcaNomJofSZgoPsZarYGkMBMF93wAnP4jvIHcf1DaYOBrTfqn bk1tBSvpNw8j6XSynZFaDrFGNDa6FypIV6lJDWNtghAuhENKmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIACxOKl6fGmhxUzx2cHcTrkoFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDNiMzk5NmQtZWU4Ny0z MDc1LThiZWYtZjA5ZDFmN2IyMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIaAuoK/O6uImLpPBTikCPPaCyV/+Hg7Svkf2o7CJa5B7vHc2K7/7vX bdmEIqYUv04+zhtIP6ZXXcEbUdQBCaxoMMslE2W0R+1a1+DgdaU3nEaj20Re8V7V VpWYSt8DAbiTMk/hNGzJzj8Qz5p8PMIQ+2exMqvjnjUdRJ5sIHo1c7VvZKUBJTAX z8ply+2R8X8bcKmzuh/lzRVRMxZ8584VvYNICfSedb+tLwLTN8tuadP8DL4V9W55 nQ5BQh+qGOGRxByZGmDa7ekRRnCIY1T/QihvppE4qq6xIWX9jxcBSb5oKPeXzPiL IZxM4HEgwnyHHbNC3P1f3B1drXz5Xbc= -----END CERTIFICATE-----Generated at Wed Jan 21 00:58:56 2026 by rpki-client