This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d41f4dac-10ca-3cf6-b3e8-1d999e152c03.roa File: d41f4dac-10ca-3cf6-b3e8-1d999e152c03.roa (raw, json) Hash identifier: LGws14axgvFeQrulHVJOxmFFv+b0l2EgM9A3nqhYRKc= Subject key identifier: 8A:BA:F4:A5:96:45:1A:0C:14:9B:21:66:7E:22:12:42:28:F7:26:3C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD7605EE82B4999C511EE0700 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d41f4dac-10ca-3cf6-b3e8-1d999e152c03.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:5e:e8:2b:49:99:c5:11:ee:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=a29226bc-543e-479e-a783-51dbb4c3d516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:49:b8:2f:12:83:a0:6d:29:a8:03:27:0a: 42:86:a8:fc:ec:c2:9f:31:83:7b:d7:26:82:f0:28: 83:64:36:ab:b6:73:90:63:b2:c9:8a:50:43:13:3d: ba:9d:60:8f:cb:41:e4:7d:0c:52:7c:8b:2f:2e:d5: 66:26:fb:60:16:14:90:05:2a:2c:dc:f9:9f:78:ac: 9d:bb:0a:d2:3f:4b:cf:f4:c5:15:0d:cc:8b:67:62: fe:8f:63:56:9b:c6:8d:87:71:b8:ae:66:8a:d9:35: e0:d4:64:cb:00:bc:06:2c:02:5d:f6:22:18:bc:cc: d3:c2:e6:f6:b8:be:8a:6a:1d:22:e1:e9:25:ff:64: 5a:f4:7e:a4:f4:f5:15:3a:a5:ba:b4:45:b4:22:0d: bd:cb:fe:10:e0:75:75:8e:51:4b:71:ca:d1:7e:b3: 8f:ea:2a:c7:1e:d1:c3:07:76:3d:ad:72:17:6a:f9: a2:69:8a:2f:e4:d8:df:87:32:00:5c:97:a9:4d:be: 21:6a:2c:3a:10:70:29:f5:74:8d:79:91:0d:d8:c2: b4:52:2c:0f:dd:3a:3f:98:fd:42:46:2e:03:ed:60: 7c:27:45:b2:1c:a6:63:39:67:5f:11:f0:62:88:00: 4a:6c:6b:e4:68:08:86:9a:94:92:d5:f7:e2:90:06: eb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BA:F4:A5:96:45:1A:0C:14:9B:21:66:7E:22:12:42:28:F7:26:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d41f4dac-10ca-3cf6-b3e8-1d999e152c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8c:eb:1d:b1:d8:f7:db:24:86:21:46:06:d1:f5:a8:59:75: b7:35:58:a2:30:cb:5b:f1:82:f8:7b:3a:88:7a:ed:0a:a4:cc: ff:83:32:91:8f:d9:81:8d:e6:97:65:78:e4:8b:41:3c:3d:91: 73:6e:97:20:9c:d5:7d:f1:38:22:91:8a:f3:e4:35:b7:a3:53: 67:4d:c4:91:77:bc:0d:aa:a2:90:ef:b8:54:fd:78:77:20:c0: d7:18:30:85:d5:95:61:b0:4e:84:65:a2:c2:57:25:b4:e3:65: 81:cd:12:be:a8:5b:29:da:7b:ae:10:be:b4:2d:af:08:dc:83: 63:26:a9:97:08:46:6c:53:93:33:6e:08:31:f8:8a:ff:bf:88: 53:29:83:8c:9a:3d:ac:df:1d:ce:5c:38:92:1e:24:f6:98:37: 99:0b:06:6f:01:37:91:41:59:33:b1:a8:76:e9:54:d7:3d:fe: 60:37:44:19:b5:93:4b:15:93:1b:02:22:a0:d5:4d:d7:83:23: 46:f8:bc:12:5a:ec:28:ac:ec:15:2c:7b:c7:11:83:a0:bb:4b: 69:7f:06:aa:ae:50:52:11:86:c8:ab:9f:e5:4d:54:9c:44:f4: 59:40:da:f6:55:f7:c7:7d:88:39:67:7b:3f:a0:ce:93:58:7a: 03:b9:de:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvXYF7oK0mZxRHuBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk YTI5MjI2YmMtNTQzZS00NzllLWE3ODMtNTFkYmI0YzNkNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwpJuC8Sg6BtKagDJwpChqj87MKfMYN71yaC 8CiDZDartnOQY7LJilBDEz26nWCPy0HkfQxSfIsvLtVmJvtgFhSQBSos3PmfeKyd uwrSP0vP9MUVDcyLZ2L+j2NWm8aNh3G4rmaK2TXg1GTLALwGLAJd9iIYvMzTwub2 uL6Kah0i4ekl/2Ra9H6k9PUVOqW6tEW0Ig29y/4Q4HV1jlFLccrRfrOP6irHHtHD B3Y9rXIXavmiaYov5NjfhzIAXJepTb4haiw6EHAp9XSNeZEN2MK0UiwP3To/mP1C Ri4D7WB8J0WyHKZjOWdfEfBiiABKbGvkaAiGmpSS1ffikAbrtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq69KWWRRoMFJshZn4iEkIo9yY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDQxZjRkYWMtMTBjYS0z Y2Y2LWIzZTgtMWQ5OTllMTUyYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmM6x2x2PfbJIYhRgbR9ahZdbc1WKIwy1vxgvh7Ooh67QqkzP+DMpGP 2YGN5pdleOSLQTw9kXNulyCc1X3xOCKRivPkNbejU2dNxJF3vA2qopDvuFT9eHcg wNcYMIXVlWGwToRlosJXJbTjZYHNEr6oWynae64QvrQtrwjcg2MmqZcIRmxTkzNu CDH4iv+/iFMpg4yaPazfHc5cOJIeJPaYN5kLBm8BN5FBWTOxqHbpVNc9/mA3RBm1 k0sVkxsCIqDVTdeDI0b4vBJa7Cis7BUse8cRg6C7S2l/BqquUFIRhsirn+VNVJxE 9FlA2vZV98d9iDlnez+gzpNYegO53uM= -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:44 2025 by rpki-client