This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa File: deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa (raw, json) Hash identifier: lAM8fA6EyEZccpROVj7qbl7o7tb4+7XvT8gtxfYNqvg= Subject key identifier: 1B:7E:EB:8D:C2:6C:29:FE:21:69:0A:40:F2:5B:54:BF:BF:66:9D:AF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD7605ED6D4B82F34AA3A7B80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.153.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:5e:d6:d4:b8:2f:34:aa:3a:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=c6b30021-89fb-4826-9fba-ff6b1d67efec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:4b:2e:27:d8:6e:b0:e0:18:58:09:c9:8f:4d: a1:db:2a:7c:60:73:d5:87:a4:9d:d2:ae:f6:03:78: 8e:6a:fd:0a:36:e3:f0:2b:00:1a:03:20:6e:b4:cf: f3:44:b8:5a:18:fe:16:3f:ee:ae:3b:f0:25:4b:70: df:54:db:4b:4a:1e:28:25:69:f7:15:ad:29:ea:f1: 60:d0:f6:a0:54:58:cf:cc:b7:d7:30:e2:1d:02:c5: b8:31:51:63:fe:fb:9b:f1:0d:32:98:8c:34:c6:ff: 70:42:f3:51:88:4b:7d:01:b8:eb:d6:a7:c2:62:ca: ca:a0:8a:27:c0:82:a2:f0:b5:82:35:85:c1:3c:cb: aa:8b:11:3d:19:54:27:b0:e4:e4:11:57:2e:d2:16: ae:b6:e3:3f:ee:1c:bd:96:3f:be:16:dc:62:33:03: 2b:34:f9:26:c6:91:da:07:de:d5:1b:71:fd:39:c7: 67:ad:e2:80:19:f7:d2:fd:fd:8f:b9:61:48:ac:e1: de:09:58:e8:06:03:23:f9:77:f6:84:65:01:4b:e5: 56:94:ef:77:a4:58:8f:be:5e:78:a5:25:a9:6c:4a: 62:87:82:9f:6f:83:67:f8:04:7e:99:73:2e:83:25: fc:c3:0f:6f:a0:17:ad:8d:89:88:db:ac:e9:86:a4: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7E:EB:8D:C2:6C:29:FE:21:69:0A:40:F2:5B:54:BF:BF:66:9D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/deeaeb46-1ee2-33a1-b2d5-73c9327fd2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:54:fb:a9:14:a2:9f:ae:e3:c6:bf:a9:74:e7:cb:47:5d:cd: 9e:e4:36:87:3b:51:ad:ad:9e:a4:6a:8d:d4:e0:1d:cc:e3:4b: 93:59:e7:7e:57:69:99:d0:71:e7:2f:ea:c6:70:79:95:88:14: dd:cd:e1:60:35:9d:87:65:46:20:1e:63:b1:19:09:a3:50:ab: 96:5e:03:4a:6a:61:e3:f2:b9:84:0e:bf:c1:df:b7:eb:10:b9: 7b:a6:90:8d:a1:9d:b5:cc:89:04:ee:8f:52:54:7a:d2:fc:5e: 2c:7c:84:25:d3:a5:9f:11:9b:fb:d4:c6:08:a2:95:85:13:af: c9:72:32:3e:4e:9e:cc:44:04:b5:09:a1:8c:ea:e7:6f:07:22: 42:57:ae:61:39:e5:82:8e:16:07:49:08:f0:72:32:e0:5b:21: 79:97:df:6b:bb:99:d3:ea:31:b0:2c:e4:f5:29:76:55:75:bf: 26:88:62:3b:d9:aa:74:0f:0d:43:fc:23:2b:24:10:45:3b:cb: 9c:29:55:2d:15:aa:7d:97:aa:79:38:c0:4d:44:18:1e:49:58: a2:8b:45:73:d4:f2:7d:c3:72:d6:5e:75:7f:36:8c:f5:72:47: 93:d8:be:3a:a2:c2:6f:f0:75:9a:e7:35:a1:ff:1f:ab:74:d5: c2:4a:7b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvXYF7W1LgvNKo6e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk YzZiMzAwMjEtODlmYi00ODI2LTlmYmEtZmY2YjFkNjdlZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0suJ9husOAYWAnJj02h2yp8YHPVh6Sd0q72 A3iOav0KNuPwKwAaAyButM/zRLhaGP4WP+6uO/AlS3DfVNtLSh4oJWn3Fa0p6vFg 0PagVFjPzLfXMOIdAsW4MVFj/vub8Q0ymIw0xv9wQvNRiEt9Abjr1qfCYsrKoIon wIKi8LWCNYXBPMuqixE9GVQnsOTkEVcu0hautuM/7hy9lj++FtxiMwMrNPkmxpHa B97VG3H9OcdnreKAGffS/f2PuWFIrOHeCVjoBgMj+Xf2hGUBS+VWlO93pFiPvl54 pSWpbEpih4Kfb4Nn+AR+mXMugyX8ww9voBetjYmI26zphqTLrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt+643CbCn+IWkKQPJbVL+/Zp2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGVlYWViNDYtMWVlMi0z M2ExLWIyZDUtNzNjOTMyN2ZkMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdU+6kUop+u48a/qXTny0ddzZ7kNoc7Ua2tnqRqjdTgHczjS5NZ535X aZnQcecv6sZweZWIFN3N4WA1nYdlRiAeY7EZCaNQq5ZeA0pqYePyuYQOv8Hft+sQ uXumkI2hnbXMiQTuj1JUetL8Xix8hCXTpZ8Rm/vUxgiilYUTr8lyMj5OnsxEBLUJ oYzq528HIkJXrmE55YKOFgdJCPByMuBbIXmX32u7mdPqMbAs5PUpdlV1vyaIYjvZ qnQPDUP8IyskEEU7y5wpVS0Vqn2Xqnk4wE1EGB5JWKKLRXPU8n3DctZedX82jPVy R5PYvjqiwm/wdZrnNaH/H6t01cJKezk= -----END CERTIFICATE-----Generated at Sat Dec 6 17:54:50 2025 by rpki-client