This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa File: ea538004-6f2f-32c7-aa95-11998a593420.roa (raw, json) Hash identifier: be4kM+DgMpqQtNpg4UXCJvJR/AvfI+hawnE/n8FuixE= Subject key identifier: 02:55:B7:3A:3D:D6:61:1E:58:22:2F:1D:E0:1C:84:92:7D:D5:CB:44 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BF615DD81C738DB8ACC4B8C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 8069 IP address blocks: 20.153.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:dd:81:c7:38:db:8a:cc:4b:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=526e23da-1aa3-47ab-b5a6-0f3d05b55870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:11:28:24:20:f2:fd:4c:16:3f:e2:aa:e1: b6:77:3c:56:41:d7:ed:44:2a:30:50:55:0c:3c:ce: da:4a:4c:d7:d3:55:11:ab:23:4e:3b:1b:a2:63:d8: cf:86:7a:a2:a3:6c:07:27:d4:a9:f2:50:62:2f:37: 63:2b:c0:66:44:34:bd:60:77:d1:ca:10:be:b1:1b: b5:96:a8:f6:73:42:80:97:d7:36:fa:f7:c9:5c:f5: 4c:79:1a:03:2e:ff:54:a8:0a:60:13:30:fb:f6:57: c5:65:1e:99:d7:5c:f6:d8:2a:f6:c8:43:f9:33:97: 54:38:62:1d:52:12:34:e8:79:fa:62:21:2c:83:7a: 37:c6:9f:39:05:ae:96:24:fc:87:33:97:8f:9c:f0: 23:15:52:9a:32:ca:72:0c:31:50:dd:22:69:37:14: bd:db:a3:53:a6:0b:ac:9c:8c:38:5b:d3:c8:41:b9: 48:9c:f9:0d:2f:79:98:7a:0c:b3:d0:fc:2a:5b:20: 2a:96:8c:01:bc:98:81:be:53:90:77:6d:58:b7:64: 6a:87:f9:77:c2:2e:ee:98:0c:61:bd:05:b2:85:bd: 09:94:6c:eb:cf:ff:a7:bf:0e:cb:10:3e:5c:35:cf: af:60:a9:da:38:69:0b:93:d9:ca:20:d0:a2:96:22: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:55:B7:3A:3D:D6:61:1E:58:22:2F:1D:E0:1C:84:92:7D:D5:CB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ea538004-6f2f-32c7-aa95-11998a593420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:43:cd:f3:04:1e:95:39:f2:8e:47:78:d3:70:83:fe:d6:f7: 93:9c:d4:48:a4:a3:78:34:18:3d:c0:71:c4:ed:04:5e:47:ea: 2b:1b:39:9a:38:01:1f:c5:b0:b9:6f:00:c4:39:be:44:3e:21: 57:32:d7:1b:e1:05:24:7a:51:56:48:4c:55:3e:c1:ec:0c:93: 13:6f:66:97:f8:64:f9:2b:89:db:09:5e:74:b4:d3:14:9e:9d: 0a:98:83:42:a2:cc:92:a6:13:21:da:18:f5:67:5e:1d:c0:dc: a2:64:3b:21:58:b6:98:3d:3e:52:3b:42:a6:60:83:aa:f0:53: b6:2a:8b:89:d6:87:ab:ad:11:18:82:9e:81:5e:a0:57:5b:0e: 35:4a:ae:f8:93:5f:cb:4b:06:d2:15:2c:c1:0b:93:f8:3c:58: 64:e8:7d:97:ff:e0:23:70:ee:ef:23:03:fa:cf:1b:ab:47:14: 98:5b:70:6b:de:a7:37:66:0c:90:50:c3:47:7b:32:b2:43:5c: 41:b0:19:c6:f8:ee:3b:12:28:53:38:c6:4c:15:10:dd:71:64: 01:c1:bc:ea:c1:1c:f3:9d:14:1c:26:a4:1d:59:65:e7:fd:46: 13:25:8a:f3:b1:c9:b9:e1:73:f3:81:26:12:ea:87:73:97:e5: f4:f6:f5:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2Fd2BxzjbisxLjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk NTI2ZTIzZGEtMWFhMy00N2FiLWI1YTYtMGYzZDA1YjU1ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxERKCQg8v1MFj/iquG2dzxWQdftRCowUFUM PM7aSkzX01URqyNOOxuiY9jPhnqio2wHJ9Sp8lBiLzdjK8BmRDS9YHfRyhC+sRu1 lqj2c0KAl9c2+vfJXPVMeRoDLv9UqApgEzD79lfFZR6Z11z22Cr2yEP5M5dUOGId UhI06Hn6YiEsg3o3xp85Ba6WJPyHM5ePnPAjFVKaMspyDDFQ3SJpNxS926NTpgus nIw4W9PIQblInPkNL3mYegyz0PwqWyAqlowBvJiBvlOQd21Yt2Rqh/l3wi7umAxh vQWyhb0JlGzrz/+nvw7LED5cNc+vYKnaOGkLk9nKINCiliLcqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJVtzo91mEeWCIvHeAchJJ91ctEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWE1MzgwMDQtNmYyZi0z MmM3LWFhOTUtMTE5OThhNTkzNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1DzfMEHpU58o5HeNNwg/7W95Oc1Eiko3g0GD3AccTtBF5H6isbOZo4 AR/FsLlvAMQ5vkQ+IVcy1xvhBSR6UVZITFU+wewMkxNvZpf4ZPkridsJXnS00xSe nQqYg0KizJKmEyHaGPVnXh3A3KJkOyFYtpg9PlI7QqZgg6rwU7Yqi4nWh6utERiC noFeoFdbDjVKrviTX8tLBtIVLMELk/g8WGTofZf/4CNw7u8jA/rPG6tHFJhbcGve pzdmDJBQw0d7MrJDXEGwGcb47jsSKFM4xkwVEN1xZAHBvOrBHPOdFBwmpB1ZZef9 RhMlivOxybnhc/OBJhLqh3OX5fT29Ys= -----END CERTIFICATE-----Generated at Sat Dec 6 19:07:56 2025 by rpki-client