This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa File: da1d564b-362d-3a9a-993d-48e4fe19b098.roa (raw, json) Hash identifier: OT0JlRJQJKK3+INiKTV4schO44slchBBiNZjqBODw8I= Subject key identifier: D2:21:F1:20:80:F9:6A:B2:04:D1:92:7D:1A:A2:9C:DD:12:8B:8B:04 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C8A0C5EAC0B72D2E8F6D18400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:5e:ac:0b:72:d2:e8:f6:d1:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=53bdcf6a-72ac-4352-9749-ea29997e4b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:d5:f0:b1:23:81:c5:40:cc:6a:38:d2:c5: c4:0d:e2:69:82:24:59:b0:c7:4b:5e:7c:07:95:7c: 8e:e2:ec:5d:eb:61:2d:f6:d9:6e:a5:f0:e0:f6:e3: 7a:7b:16:c6:ce:10:c7:7f:e5:0f:79:0c:3c:1d:7d: 7e:53:83:23:f4:bf:b9:80:37:c4:11:f0:24:6d:ba: d2:dd:0f:82:d4:a5:a3:00:7a:25:3c:e9:7a:32:78: 85:a3:07:ee:dd:f4:e5:26:64:b5:c2:5a:9f:24:0c: ee:8d:71:cd:fc:20:fd:d9:a3:c9:3a:fd:bd:a5:99: 46:d4:72:39:17:6b:b2:06:11:4c:48:8e:23:d1:ae: d5:b7:7a:8e:94:67:be:55:ec:3d:00:e7:bf:1b:e3: ec:cc:a8:83:a1:72:85:d1:2f:24:e1:86:9a:5d:ae: 9c:be:de:ae:eb:e6:6b:1b:ac:65:ce:41:98:64:52: cd:67:1d:3d:ad:23:02:36:ee:75:08:b2:8f:47:01: 65:b2:40:b2:a4:bc:a4:0a:26:10:17:ff:41:b2:a7: 74:1f:30:90:34:3f:79:7c:3f:d7:7f:d2:11:99:85: 85:af:92:24:7d:ea:77:3e:bd:7e:d0:84:da:8d:4e: 71:cd:36:ce:dd:f1:88:f4:29:f7:59:62:04:0b:86: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:21:F1:20:80:F9:6A:B2:04:D1:92:7D:1A:A2:9C:DD:12:8B:8B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/da1d564b-362d-3a9a-993d-48e4fe19b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e1:1e:32:58:54:bc:8c:fd:c2:b7:c3:62:3b:5e:bd:99:48: 14:92:36:dd:60:ea:5e:28:d4:2a:63:ef:ce:54:9e:f0:da:af: 29:5d:14:12:6f:04:e3:b7:61:6f:88:e1:c6:8f:d8:72:c5:96: 73:4e:4c:fa:bd:99:0d:bc:d7:a3:cf:51:d4:87:64:b8:1d:c1: c7:e0:77:31:4d:a1:d5:ce:c3:e6:48:3a:d2:b9:3a:df:53:bb: 56:0d:b2:d5:9a:2d:d5:49:d2:b1:21:bd:dc:c3:ed:6a:3e:b7: c0:6e:ff:d8:27:5b:6b:ac:98:f0:fb:ef:3f:67:95:03:30:82: 41:97:78:42:f6:4b:c8:c1:74:18:76:82:8f:66:fb:38:b0:68: da:59:71:56:5d:62:19:d0:e2:3b:43:44:5d:2b:e0:9d:5a:9c: bc:d3:07:90:ab:8a:1b:f5:09:63:34:e9:81:33:dc:45:bd:af: ce:58:fb:99:fb:a7:8d:23:97:96:15:b3:46:86:a9:d0:36:8b: a1:2f:cc:c5:90:98:3f:8c:80:c8:52:75:4c:da:8f:e7:12:5e: 77:23:fd:b6:46:13:56:88:41:35:15:63:57:95:56:9d:d5:d0: 41:00:4a:e1:29:db:c7:cc:4a:46:9f:aa:92:a2:5d:8b:1e:f6: 2c:f7:fa:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDF6sC3LS6PbRhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk NTNiZGNmNmEtNzJhYy00MzUyLTk3NDktZWEyOTk5N2U0Yjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hPV8LEjgcVAzGo40sXEDeJpgiRZsMdLXnwH lXyO4uxd62Et9tlupfDg9uN6exbGzhDHf+UPeQw8HX1+U4Mj9L+5gDfEEfAkbbrS 3Q+C1KWjAHolPOl6MniFowfu3fTlJmS1wlqfJAzujXHN/CD92aPJOv29pZlG1HI5 F2uyBhFMSI4j0a7Vt3qOlGe+Vew9AOe/G+PszKiDoXKF0S8k4YaaXa6cvt6u6+Zr G6xlzkGYZFLNZx09rSMCNu51CLKPRwFlskCypLykCiYQF/9Bsqd0HzCQND95fD/X f9IRmYWFr5Ikfep3Pr1+0ITajU5xzTbO3fGI9Cn3WWIEC4ZCxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIh8SCA+WqyBNGSfRqinN0Si4sEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGExZDU2NGItMzYyZC0z YTlhLTk5M2QtNDhlNGZlMTliMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEThHjJYVLyM/cK3w2I7Xr2ZSBSSNt1g6l4o1Cpj785UnvDaryldFBJv BOO3YW+I4caP2HLFlnNOTPq9mQ2816PPUdSHZLgdwcfgdzFNodXOw+ZIOtK5Ot9T u1YNstWaLdVJ0rEhvdzD7Wo+t8Bu/9gnW2usmPD77z9nlQMwgkGXeEL2S8jBdBh2 go9m+ziwaNpZcVZdYhnQ4jtDRF0r4J1anLzTB5Crihv1CWM06YEz3EW9r85Y+5n7 p40jl5YVs0aGqdA2i6EvzMWQmD+MgMhSdUzaj+cSXncj/bZGE1aIQTUVY1eVVp3V 0EEASuEp28fMSkafqpKiXYse9iz3+uQ= -----END CERTIFICATE-----Generated at Wed Jan 21 00:56:42 2026 by rpki-client