This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa File: ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa (raw, json) Hash identifier: Wc7F68zB9VU2KYbPLCqN6Z/tE8ZexjXHo0F1+hr6Ipg= Subject key identifier: 27:C4:59:23:05:78:AC:84:97:34:9C:6F:B1:22:38:40:78:74:73:86 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BEDB5E5F6C338C88FAD55F300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:e5:f6:c3:38:c8:8f:ad:55:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=ba8caf34-1258-48c5-b937-c6e4f4bedaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:a0:2c:ba:19:09:d8:52:72:a5:dc:c7:17: b9:a5:fe:25:42:7d:03:fe:f1:a6:92:fb:fc:95:be: 70:20:f4:e2:c7:38:a8:54:9d:40:0d:3f:41:47:d2: 74:af:27:20:c7:c0:78:1e:dd:6e:fb:f5:cc:12:69: 2e:d0:94:a4:fc:7e:6f:b8:27:4e:94:a5:8f:b1:b9: 6b:4f:e1:e4:48:dc:b3:e7:3f:1b:b4:49:b6:dd:7c: 24:22:51:9c:b0:24:4c:96:76:4d:53:fe:33:4c:ed: cf:7d:28:3a:be:5d:bc:19:e3:cb:d0:e0:81:26:9b: 65:0e:61:34:1a:e6:5f:43:e1:a5:da:80:d5:f4:6a: c4:4e:7d:c8:83:ba:b3:b8:c2:3f:95:7a:a1:c9:11: 95:1e:65:99:29:1d:cd:4a:6d:60:56:26:87:ff:99: d2:62:f6:40:9f:17:d9:c7:3e:1a:de:ee:22:d1:61: e9:a5:fb:ff:a8:7c:1e:56:b8:97:09:bc:36:ca:68: 62:49:de:1d:6c:01:3b:4d:4f:d2:d0:2e:a8:83:5a: e7:81:d6:fd:4e:a0:79:c9:e8:a2:61:b4:f8:5b:26: 97:91:d7:66:e3:1e:9b:c2:42:2b:0e:ee:36:04:2c: 2b:2d:19:9f:db:f7:3d:3f:27:fe:90:7a:35:3f:7b: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C4:59:23:05:78:AC:84:97:34:9C:6F:B1:22:38:40:78:74:73:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec1a8906-033b-3989-b1b1-0dfeb0948d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:42:c5:58:9f:a0:34:cd:5e:a2:a2:35:02:5c:b6:2f:6b:4a: e1:b8:61:0d:2e:12:ab:e4:fd:d2:34:00:64:bb:fd:ea:d2:f2: 62:29:d8:55:0e:b9:ab:ab:15:db:32:21:3f:90:b1:dd:cc:f8: 7f:e4:c5:d8:7f:75:09:7b:0c:bf:06:fe:61:3b:c2:af:cb:a0: 32:46:fe:df:de:f9:f5:19:dc:e5:59:bf:fd:0a:d8:14:9f:f5: 45:8e:e4:5a:84:98:6f:46:a0:c9:16:aa:dc:95:5c:ba:5c:be: 1f:5f:21:fc:9c:94:82:39:e5:f5:34:3e:45:a6:e5:9b:f0:5c: ad:e6:7c:42:44:94:9a:43:4e:b2:ae:92:29:07:bd:8e:0b:17: be:16:d8:b6:cf:20:9c:3d:fd:4b:58:4a:7d:09:d6:5f:07:d4: 65:c7:da:ab:19:1a:75:04:38:0d:63:38:7e:43:73:38:00:c8: b0:f0:87:99:63:0e:c9:19:4b:73:45:fd:d3:31:af:09:d6:12: 12:42:a8:b9:15:88:dc:63:41:1c:82:61:a2:2a:cc:48:7d:09: 6a:a8:09:17:e7:05:2b:f8:53:1b:f6:43:4b:8d:0f:52:3a:20: 92:7f:e7:d2:35:ab:93:3d:b2:a9:a9:84:53:09:70:76:2e:1e: d7:12:f9:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvtteX2wzjIj61V8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk YmE4Y2FmMzQtMTI1OC00OGM1LWI5MzctYzZlNGY0YmVkYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKmgLLoZCdhScqXcxxe5pf4lQn0D/vGmkvv8 lb5wIPTixzioVJ1ADT9BR9J0rycgx8B4Ht1u+/XMEmku0JSk/H5vuCdOlKWPsblr T+HkSNyz5z8btEm23XwkIlGcsCRMlnZNU/4zTO3PfSg6vl28GePL0OCBJptlDmE0 GuZfQ+Gl2oDV9GrETn3Ig7qzuMI/lXqhyRGVHmWZKR3NSm1gViaH/5nSYvZAnxfZ xz4a3u4i0WHppfv/qHweVriXCbw2ymhiSd4dbAE7TU/S0C6og1rngdb9TqB5yeii YbT4WyaXkddm4x6bwkIrDu42BCwrLRmf2/c9Pyf+kHo1P3tWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfEWSMFeKyElzScb7EiOEB4dHOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWMxYTg5MDYtMDMzYi0z OTg5LWIxYjEtMGRmZWIwOTQ4ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5CxVifoDTNXqKiNQJcti9rSuG4YQ0uEqvk/dI0AGS7/erS8mIp2FUO uaurFdsyIT+Qsd3M+H/kxdh/dQl7DL8G/mE7wq/LoDJG/t/e+fUZ3OVZv/0K2BSf 9UWO5FqEmG9GoMkWqtyVXLpcvh9fIfyclII55fU0PkWm5ZvwXK3mfEJElJpDTrKu kikHvY4LF74W2LbPIJw9/UtYSn0J1l8H1GXH2qsZGnUEOA1jOH5DczgAyLDwh5lj DskZS3NF/dMxrwnWEhJCqLkViNxjQRyCYaIqzEh9CWqoCRfnBSv4Uxv2Q0uND1I6 IJJ/59I1q5M9sqmphFMJcHYuHtcS+Tw= -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:07 2025 by rpki-client