This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa File: dd987b5e-3883-33aa-beed-2bb079da51c0.roa (raw, json) Hash identifier: nZgV5ccF4JcTqpMToncxBltpIFXgFIHB/34c5XVIdOY= Subject key identifier: 6F:59:9F:0F:53:01:D3:FF:62:DA:5B:A7:97:34:78:D8:2A:A1:05:C3 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE555DD8777EFFA52D6743180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:dd:87:77:ef:fa:52:d6:74:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=eb05b867-5e63-4765-842d-1a1164f0b361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1d:6a:61:6c:69:4b:30:ef:d6:e9:ea:f8:9b: fd:3e:0d:4a:43:dc:0b:12:25:5c:5d:8e:ea:cf:36: 3a:14:5d:c5:8a:d3:f8:e6:7e:b2:8c:b9:67:b0:2b: 90:a6:a4:38:9f:c1:f4:b5:9f:3c:f2:2f:14:62:8e: 62:69:82:f3:e5:88:ec:3e:21:3d:3a:a7:b6:ac:cd: 14:a2:bf:27:0d:68:ef:d1:eb:5d:13:3c:be:1c:c9: 10:db:47:81:f5:98:59:7d:f3:9d:05:1b:65:36:31: 33:45:2e:43:ea:3e:7b:66:93:68:e5:dc:0c:82:7e: 92:7a:2e:34:02:52:1b:64:c0:d9:fc:5d:03:38:0d: a1:70:2b:7d:ae:b0:4f:6a:92:71:7d:ed:cf:5e:0e: 7e:ea:49:3c:6f:d3:b2:da:d3:82:a0:ec:98:59:22: 1c:c5:24:4f:7f:d2:fa:5d:ad:1a:5a:88:90:09:9c: ea:d0:5d:ef:31:30:b7:95:d9:f0:ba:26:1d:d4:9b: cb:37:30:e0:4b:fd:7e:a1:01:af:9b:5e:12:1d:a1: cb:12:a2:da:7d:c1:4e:44:ca:f6:6e:99:13:0b:c7: 04:34:88:cb:ad:2b:82:72:f5:8d:f3:18:2c:8a:88: fb:e0:11:80:89:67:04:f1:71:fb:5d:9c:80:51:b2: d3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:59:9F:0F:53:01:D3:FF:62:DA:5B:A7:97:34:78:D8:2A:A1:05:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dd987b5e-3883-33aa-beed-2bb079da51c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fe:c8:a1:99:85:cc:3a:13:71:b6:ac:e4:54:b3:07:e4:3b: ea:b7:d8:fc:5e:70:58:4a:a0:43:09:8c:a5:49:bc:8b:22:a3: 0b:fb:02:0b:eb:c6:97:1a:fa:60:eb:fd:3f:7b:30:06:6f:fe: d1:45:de:d3:80:13:cb:4f:3c:dd:40:53:05:3d:c7:0a:5b:75: 79:df:4e:c1:56:42:85:0d:56:ba:b5:06:ee:d5:8d:c1:97:06: b8:e0:87:f5:34:a9:61:3b:42:38:97:67:ce:d2:58:54:c6:4b: 6f:c2:6e:d2:cc:fa:53:b2:64:01:ba:2d:90:b4:82:ca:3a:ad: ca:1c:19:f7:67:6e:6b:18:71:90:e8:c6:50:14:8b:70:ef:09: 93:84:32:9c:1c:8b:24:7f:db:60:56:24:83:d5:31:90:16:3a: 9c:3b:fa:14:44:f3:1a:08:3f:82:36:a4:f4:84:e4:f8:b6:45: ce:ae:2b:8f:96:cb:0b:b6:28:15:21:ab:ac:ad:f5:c5:61:8c: 5b:b1:7f:09:a7:a5:60:d4:45:48:26:d9:7e:8a:a4:bb:3f:d2: e9:d6:c2:33:34:10:b4:da:32:ba:e9:b7:d4:ce:75:25:94:2e: 61:fd:ef:4f:74:26:a8:e7:9e:9f:79:c2:b5:e9:bf:5a:e0:c4: 5e:ce:94:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVd2Hd+/6UtZ0MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk ZWIwNWI4NjctNWU2My00NzY1LTg0MmQtMWExMTY0ZjBiMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB1qYWxpSzDv1unq+Jv9Pg1KQ9wLEiVcXY7q zzY6FF3FitP45n6yjLlnsCuQpqQ4n8H0tZ888i8UYo5iaYLz5YjsPiE9Oqe2rM0U or8nDWjv0etdEzy+HMkQ20eB9ZhZffOdBRtlNjEzRS5D6j57ZpNo5dwMgn6Sei40 AlIbZMDZ/F0DOA2hcCt9rrBPapJxfe3PXg5+6kk8b9Oy2tOCoOyYWSIcxSRPf9L6 Xa0aWoiQCZzq0F3vMTC3ldnwuiYd1JvLNzDgS/1+oQGvm14SHaHLEqLafcFORMr2 bpkTC8cENIjLrSuCcvWN8xgsioj74BGAiWcE8XH7XZyAUbLTpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9Znw9TAdP/Ytpbp5c0eNgqoQXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGQ5ODdiNWUtMzg4My0z M2FhLWJlZWQtMmJiMDc5ZGE1MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7+yKGZhcw6E3G2rORUswfkO+q32PxecFhKoEMJjKVJvIsiowv7Agvr xpca+mDr/T97MAZv/tFF3tOAE8tPPN1AUwU9xwpbdXnfTsFWQoUNVrq1Bu7VjcGX Brjgh/U0qWE7QjiXZ87SWFTGS2/CbtLM+lOyZAG6LZC0gso6rcocGfdnbmsYcZDo xlAUi3DvCZOEMpwciyR/22BWJIPVMZAWOpw7+hRE8xoIP4I2pPSE5Pi2Rc6uK4+W ywu2KBUhq6yt9cVhjFuxfwmnpWDURUgm2X6KpLs/0unWwjM0ELTaMrrpt9TOdSWU LmH97090Jqjnnp95wrXpv1rgxF7OlMo= -----END CERTIFICATE-----Generated at Sat Dec 6 16:59:41 2025 by rpki-client