This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa File: d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa (raw, json) Hash identifier: oAhR6xSD+v3RdaG2kEhRpXvWyX0OEffp3YO9yPpJoDs= Subject key identifier: 43:D8:35:60:39:18:13:93:0A:D3:D3:E0:90:AA:FE:AE:04:82:1E:CD Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C5EC71928B1EB256135E86380 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 8069 IP address blocks: 20.33.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:19:28:b1:eb:25:61:35:e8:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=b762f3a7-41d5-48ce-b763-3d8aa5ba3016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:26:4f:5c:3c:8f:fe:4e:34:fe:d2:b3:33: 5f:d6:d6:5e:a5:96:56:c7:1e:68:4e:48:73:1a:98: d2:ed:00:19:99:41:8d:8e:64:f0:4f:9b:a8:33:b2: c1:5b:fc:2c:53:b9:f0:ee:63:b7:d7:67:a9:8f:cf: 54:0d:16:2f:39:c8:f2:19:d1:e2:c1:55:eb:3c:41: 88:10:8d:a2:e6:1f:45:c1:f0:ec:3c:92:a1:68:5c: de:2d:f3:32:cb:42:53:e5:f6:44:87:fa:60:06:ed: db:1e:df:19:bf:62:60:e9:d5:76:4b:49:05:f6:81: 20:78:a4:40:a0:81:1d:1d:28:cd:52:34:6c:d0:9b: de:9c:d9:2c:77:5e:e5:57:29:69:5f:e7:7a:19:5f: 84:43:18:e0:50:c5:e5:f1:14:ec:d4:b2:a3:a0:57: 8d:6f:59:9e:56:af:60:4e:de:31:cc:55:4e:65:4d: c3:60:f0:83:0e:b4:41:e4:ce:f9:c9:bb:9c:6e:44: 70:ba:86:42:94:90:c1:60:ab:a1:26:70:29:aa:23: 5f:4c:b4:66:3a:ee:94:73:25:dc:0c:20:06:f4:2e: 07:aa:95:6c:77:24:4f:3f:96:a2:bc:21:b6:c5:cd: 9b:0f:9d:5e:0e:56:a2:a8:0e:ac:61:44:f4:9a:7c: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D8:35:60:39:18:13:93:0A:D3:D3:E0:90:AA:FE:AE:04:82:1E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d851fbe8-225a-3c6f-8e78-4c283a99fd68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d2:6b:b0:ee:41:d2:cc:ed:41:87:4c:d3:b8:5e:e8:50:e9: f2:cf:6e:ce:44:19:2b:3d:d0:2d:4b:86:bf:03:e7:69:d6:4b: d5:86:04:60:ef:8f:cd:a4:92:dd:b3:ea:4f:bc:10:b8:8e:2a: 91:9e:1a:c2:d3:9d:ee:3a:28:da:72:54:fa:fe:43:89:aa:ad: 0d:37:f4:52:b7:b4:3f:91:00:13:9c:81:6d:24:98:87:fe:2d: 71:61:43:f3:68:06:6c:aa:c3:80:4a:cd:d6:21:21:66:14:40: 8a:f1:c4:13:ac:9c:99:a3:ea:dd:28:e5:0f:13:62:98:cf:47: aa:e6:9f:c1:2a:09:68:ba:6b:4f:f9:cc:f4:7b:56:d4:f2:e5: 44:20:87:8c:f7:d9:8c:e1:66:b9:7c:a0:07:e9:3b:1d:36:95: 6c:67:48:26:b9:c0:7e:3c:d7:57:92:3a:cd:40:ac:2a:d7:f1: 07:41:81:ea:35:55:a1:7f:a2:79:c2:1b:5b:a0:75:09:b7:80: 5f:29:b5:a0:30:81:52:35:d2:9e:c4:ca:05:5b:9d:6b:ec:0d: c2:9e:5a:b5:ac:01:b3:5e:54:20:3b:4a:ef:e9:4d:89:61:f1: 23:7a:e1:b0:7d:ac:62:e2:db:00:20:89:12:f2:08:0f:72:20: 59:d4:29:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexxkoseslYTXoY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk Yjc2MmYzYTctNDFkNS00OGNlLWI3NjMtM2Q4YWE1YmEzMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZcmT1w8j/5ONP7SszNf1tZepZZWxx5oTkhz GpjS7QAZmUGNjmTwT5uoM7LBW/wsU7nw7mO312epj89UDRYvOcjyGdHiwVXrPEGI EI2i5h9FwfDsPJKhaFzeLfMyy0JT5fZEh/pgBu3bHt8Zv2Jg6dV2S0kF9oEgeKRA oIEdHSjNUjRs0JvenNksd17lVylpX+d6GV+EQxjgUMXl8RTs1LKjoFeNb1meVq9g Tt4xzFVOZU3DYPCDDrRB5M75ybucbkRwuoZClJDBYKuhJnApqiNfTLRmOu6UcyXc DCAG9C4HqpVsdyRPP5aivCG2xc2bD51eDlaiqA6sYUT0mnzgiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPYNWA5GBOTCtPT4JCq/q4Egh7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDg1MWZiZTgtMjI1YS0z YzZmLThlNzgtNGMyODNhOTlmZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzSa7DuQdLM7UGHTNO4XuhQ6fLPbs5EGSs90C1Lhr8D52nWS9WGBGDv j82kkt2z6k+8ELiOKpGeGsLTne46KNpyVPr+Q4mqrQ039FK3tD+RABOcgW0kmIf+ LXFhQ/NoBmyqw4BKzdYhIWYUQIrxxBOsnJmj6t0o5Q8TYpjPR6rmn8EqCWi6a0/5 zPR7VtTy5UQgh4z32YzhZrl8oAfpOx02lWxnSCa5wH4811eSOs1ArCrX8QdBgeo1 VaF/onnCG1ugdQm3gF8ptaAwgVI10p7EygVbnWvsDcKeWrWsAbNeVCA7Su/pTYlh 8SN64bB9rGLi2wAgiRLyCA9yIFnUKVM= -----END CERTIFICATE-----Generated at Wed Jan 21 01:00:17 2026 by rpki-client