This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa File: edf37cc8-43ef-3f95-8478-5c871e14d557.roa (raw, json) Hash identifier: F/Ef5uV5rWObdqSDyxwCgBqO183ZYw+HG9s0+MEOeIM= Subject key identifier: B4:54:C8:E9:77:C6:16:A1:F2:FA:1F:A6:5E:90:D9:51:92:E0:C3:22 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C645C10C0300D72479A68D3F0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 8069 IP address blocks: 20.33.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:10:c0:30:0d:72:47:9a:68:d3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=d3611e3a-63f3-4c65-a69c-a7163392fed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:18:91:d0:53:ab:fa:9b:51:77:50:88:d4: 59:17:e4:7a:b6:2c:09:45:ce:89:2f:f6:1a:8f:8a: 56:32:2b:38:8a:0f:b9:ff:d1:17:70:69:38:62:21: 66:54:62:8f:53:12:bd:38:ed:4a:e3:14:12:8d:20: 64:04:ed:59:be:14:98:e7:e6:a0:01:61:d6:f1:05: 8d:0b:b4:86:64:4d:41:c3:4e:7f:eb:6e:7c:db:5c: 9b:e0:92:17:9f:c7:c1:a0:dc:2e:ef:c6:b3:3f:2e: c7:da:10:ea:65:34:f2:38:f6:77:74:b3:35:6e:13: fb:25:53:78:43:d4:47:a3:1d:79:d7:da:94:e5:3b: 84:02:aa:06:c9:e7:73:24:e9:e0:fe:b7:5b:6f:c4: c7:ea:f2:3a:95:53:fa:ef:bf:44:88:5a:76:f3:c4: 6c:0b:42:21:9c:50:ea:ef:32:15:5a:5e:00:ba:32: 42:5f:1c:7c:65:0a:05:e4:c9:33:4a:ac:58:76:e1: da:51:6a:89:05:76:b3:3c:0a:f2:5f:84:4d:c5:00: 1e:23:5b:2d:c9:d0:0d:06:09:09:f4:f3:37:31:02: 58:79:a1:a5:71:0a:6c:57:be:2e:89:76:ce:5d:3f: f1:7d:9d:c1:ea:9f:6f:4b:23:a2:a3:c8:18:c3:75: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:C8:E9:77:C6:16:A1:F2:FA:1F:A6:5E:90:D9:51:92:E0:C3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/edf37cc8-43ef-3f95-8478-5c871e14d557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d3:d3:6f:de:27:6b:d6:12:64:47:13:3d:22:3b:be:30:12: de:d7:5d:a0:ef:66:82:35:34:05:eb:44:a4:bd:04:1c:1f:a1: c1:d0:5a:c2:a6:d4:69:4d:55:fa:88:68:d3:ca:e3:29:02:2c: 45:1b:22:18:c7:c9:cf:ea:9e:d3:0e:a2:a8:13:d9:f2:9a:28: 2f:9d:82:27:3c:b9:b5:83:89:5d:4c:9f:6d:c6:d3:eb:56:d6: e3:8b:11:0f:91:e0:47:e4:e5:6b:91:b8:8d:e5:e8:d0:ec:98: e9:6c:82:d7:e8:f8:71:76:08:9b:96:c1:4d:34:a9:0c:fd:06: f4:32:2c:ae:c7:97:a1:9e:fc:8a:e6:61:1b:50:1f:fd:0a:c1: 51:c2:9b:ba:0a:2d:e8:bb:b6:d9:fe:9d:c4:c1:87:d0:e5:ad: 98:a1:21:39:70:1c:9d:69:e8:b4:e7:e3:cb:7b:08:a1:93:aa: a9:fa:2c:47:df:19:04:db:67:b0:b1:c3:cd:b5:44:b6:43:4a: eb:38:c0:8c:b2:2b:9a:64:30:96:58:0d:d6:df:df:b2:e8:e1: 6b:9e:35:48:99:27:1f:c3:96:c5:79:12:e3:3a:b0:4c:1d:20: c2:f1:42:47:ad:db:f7:e9:e1:4a:ef:db:ea:7c:f5:ce:ec:00: ee:1c:78:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExkXBDAMA1yR5po0/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk ZDM2MTFlM2EtNjNmMy00YzY1LWE2OWMtYTcxNjMzOTJmZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtsYkdBTq/qbUXdQiNRZF+R6tiwJRc6JL/Ya j4pWMis4ig+5/9EXcGk4YiFmVGKPUxK9OO1K4xQSjSBkBO1ZvhSY5+agAWHW8QWN C7SGZE1Bw05/625821yb4JIXn8fBoNwu78azPy7H2hDqZTTyOPZ3dLM1bhP7JVN4 Q9RHox1519qU5TuEAqoGyedzJOng/rdbb8TH6vI6lVP6779EiFp288RsC0IhnFDq 7zIVWl4AujJCXxx8ZQoF5MkzSqxYduHaUWqJBXazPAryX4RNxQAeI1stydANBgkJ 9PM3MQJYeaGlcQpsV74uiXbOXT/xfZ3B6p9vSyOio8gYw3VkDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRUyOl3xhah8vofpl6Q2VGS4MMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZWRmMzdjYzgtNDNlZi0z Zjk1LTg0NzgtNWM4NzFlMTRkNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHT02/eJ2vWEmRHEz0iO74wEt7XXaDvZoI1NAXrRKS9BBwfocHQWsKm 1GlNVfqIaNPK4ykCLEUbIhjHyc/qntMOoqgT2fKaKC+dgic8ubWDiV1Mn23G0+tW 1uOLEQ+R4Efk5WuRuI3l6NDsmOlsgtfo+HF2CJuWwU00qQz9BvQyLK7Hl6Ge/Irm YRtQH/0KwVHCm7oKLei7ttn+ncTBh9DlrZihITlwHJ1p6LTn48t7CKGTqqn6LEff GQTbZ7Cxw821RLZDSus4wIyyK5pkMJZYDdbf37Lo4WueNUiZJx/DlsV5EuM6sEwd IMLxQket2/fp4Urv2+p89c7sAO4ceMs= -----END CERTIFICATE-----Generated at Wed Jan 21 00:57:16 2026 by rpki-client