This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f2865812-96b6-3483-9dce-a517a79d34c3.roa File: f2865812-96b6-3483-9dce-a517a79d34c3.roa (raw, json) Hash identifier: JdEoSdtgknonOOh7L9BvkD0W2eX5xplk2twAomd6H4s= Subject key identifier: 27:2E:F4:5B:02:6B:47:74:1B:1E:38:4D:C3:9D:22:60:78:38:02:02 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C338146C9E1A9596751F6D200 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f2865812-96b6-3483-9dce-a517a79d34c3.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:46:c9:e1:a9:59:67:51:f6:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=72b4334e-e328-489a-81c6-169c94a270b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:a6:9e:09:13:8f:90:19:fc:07:c2:b3:19: 81:74:62:27:1d:27:33:d8:59:7e:00:72:b9:42:13: 11:2c:d8:1e:fb:0a:77:2e:3b:72:1b:33:9b:17:e6: ae:e0:b3:d0:02:c8:a9:27:05:a3:4d:4e:81:91:d9: 78:c9:34:f1:9a:f6:0c:fb:95:84:9c:12:04:36:60: d0:13:0c:35:c4:18:e5:87:5f:f6:09:bb:4d:06:90: 45:85:a7:a5:ec:11:cc:28:64:5d:cb:4a:00:1d:61: 6c:64:3d:7f:fe:43:7c:2c:7d:b8:19:f8:e0:4a:19: fa:77:2e:fd:ab:c1:11:12:2c:83:69:02:c7:82:fd: ea:2d:0e:4b:20:77:c0:e6:12:0c:d4:8a:76:95:f2: 74:ca:cf:9c:3c:82:8c:98:d7:1f:24:18:b0:6a:75: 26:cd:72:32:98:d1:42:55:d3:87:29:cf:13:c0:14: 62:10:e6:fa:b7:c5:ba:42:f2:70:f8:37:e3:0f:da: d6:9c:d8:02:18:c1:6a:e9:96:07:a7:22:b2:f7:b2: 54:42:3b:d5:02:c1:c2:03:6f:5b:33:ba:1f:1e:5c: 89:d3:80:ec:7f:9a:b6:99:da:cc:e8:72:3f:df:32: 31:b6:a3:af:6e:91:a2:3c:91:31:17:c0:b1:4c:18: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2E:F4:5B:02:6B:47:74:1B:1E:38:4D:C3:9D:22:60:78:38:02:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f2865812-96b6-3483-9dce-a517a79d34c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:15:c4:cd:1e:af:55:85:8c:d1:3e:cc:ac:9e:95:4e:30:b0: 9a:05:6c:6c:30:74:5b:e7:79:92:d7:aa:25:da:7a:58:04:18: 3b:40:09:38:9a:d0:c6:6d:d2:6c:0a:de:4e:14:47:af:aa:30: 0a:41:64:20:32:32:70:37:d2:fa:29:df:85:c8:c3:74:dc:ee: 07:05:f5:9d:eb:cf:a3:2c:50:59:2f:ba:19:5c:b4:cd:c4:67: e9:bc:3f:17:2a:c0:d7:cc:d9:d5:4b:ce:97:4a:c1:d2:b7:95: e8:bb:a3:aa:bf:69:ba:cf:c3:de:58:17:db:3d:80:78:a6:c4: 73:a4:07:45:d5:97:00:81:07:dc:74:80:9c:05:ed:8c:c6:54: 27:54:1e:e7:d6:a2:b5:d7:85:df:49:cd:88:4b:92:86:42:92: c8:1f:15:1d:56:d3:36:b4:51:ac:a6:fe:54:78:2a:95:af:d9: fd:85:00:8f:7f:3b:28:ae:b4:76:57:1b:f6:2e:a3:1a:68:c2: 88:d7:a0:78:57:d4:ce:85:59:34:0a:4b:e1:41:de:12:12:78: d3:ea:00:45:81:ea:a6:01:0d:ae:91:7a:ef:b2:32:3a:61:6d: 42:86:7e:bf:b0:3f:b9:74:1a:40:91:32:ed:61:2f:70:59:17: ef:0f:72:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgUbJ4alZZ1H20gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk NzJiNDMzNGUtZTMyOC00ODlhLTgxYzYtMTY5Yzk0YTI3MGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhOmngkTj5AZ/AfCsxmBdGInHScz2Fl+AHK5 QhMRLNge+wp3LjtyGzObF+au4LPQAsipJwWjTU6Bkdl4yTTxmvYM+5WEnBIENmDQ Eww1xBjlh1/2CbtNBpBFhael7BHMKGRdy0oAHWFsZD1//kN8LH24GfjgShn6dy79 q8EREiyDaQLHgv3qLQ5LIHfA5hIM1Ip2lfJ0ys+cPIKMmNcfJBiwanUmzXIymNFC VdOHKc8TwBRiEOb6t8W6QvJw+DfjD9rWnNgCGMFq6ZYHpyKy97JUQjvVAsHCA29b M7ofHlyJ04Dsf5q2mdrM6HI/3zIxtqOvbpGiPJExF8CxTBjSZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcu9FsCa0d0Gx44TcOdImB4OAICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjI4NjU4MTItOTZiNi0z NDgzLTlkY2UtYTUxN2E3OWQzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4VxM0er1WFjNE+zKyelU4wsJoFbGwwdFvneZLXqiXaelgEGDtACTia 0MZt0mwK3k4UR6+qMApBZCAyMnA30vop34XIw3Tc7gcF9Z3rz6MsUFkvuhlctM3E Z+m8PxcqwNfM2dVLzpdKwdK3lei7o6q/abrPw95YF9s9gHimxHOkB0XVlwCBB9x0 gJwF7YzGVCdUHufWorXXhd9JzYhLkoZCksgfFR1W0za0Uaym/lR4KpWv2f2FAI9/ OyiutHZXG/YuoxpowojXoHhX1M6FWTQKS+FB3hISeNPqAEWB6qYBDa6Reu+yMjph bUKGfr+wP7l0GkCRMu1hL3BZF+8Pcm8= -----END CERTIFICATE-----Generated at Wed Jan 21 01:00:42 2026 by rpki-client