This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35020f1b-66f6-38ce-b296-a8a736d9ba08.roa File: 35020f1b-66f6-38ce-b296-a8a736d9ba08.roa (raw, json) Hash identifier: MTskDKp1XaNUDIPwb3svu2DV0rTMx2KyVWB7yQw8Hv4= Subject key identifier: DE:44:E8:81:F4:89:60:BB:BC:DC:14:CD:34:B5:43:32:8A:C5:26:09 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584BFE76305B9BC9DE745F415934 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35020f1b-66f6-38ce-b296-a8a736d9ba08.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 54137 IP address blocks: 68.67.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:76:30:5b:9b:c9:de:74:5f:41:59:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=38d91f24-3aa1-4850-aa3a-043139fab881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:06:f7:8f:73:61:44:04:f6:c4:85:f4:51: a2:b7:5f:6c:bc:86:e0:4c:f1:3d:9d:7d:00:a9:03: 5f:52:ae:48:b2:30:c8:ca:31:c9:10:2e:d3:e2:6b: 92:a7:e9:82:b2:5d:23:23:4b:30:48:5a:12:16:29: 50:50:a5:39:05:02:46:86:b9:ce:be:7a:8b:6d:42: 19:9c:a7:39:8e:51:ef:b2:7c:5c:e5:bb:67:ef:1e: f3:76:fb:87:37:e4:89:16:6b:3d:90:99:51:69:7d: 2a:eb:c3:6f:59:fb:cb:15:b7:87:17:cf:a2:17:e2: 83:35:87:ac:de:1a:b8:b1:d9:3e:e8:77:06:47:20: 8c:57:84:52:29:df:5a:46:be:33:d3:a7:0d:31:bc: 99:e4:dd:32:ad:72:c1:df:c1:09:97:3f:4c:e7:93: 77:77:1b:bc:b0:7c:f9:96:f0:95:98:4c:07:00:d7: e0:d1:d9:44:b4:15:aa:d0:b1:e0:bf:47:aa:6a:db: 8b:07:16:c9:1b:7c:db:cd:e5:d5:ae:d5:a2:e7:4e: f5:25:ed:42:37:fa:6b:5f:ed:ee:4a:20:b7:82:8d: b6:02:08:7b:fb:a7:a2:d6:70:3c:51:a2:5c:5f:ed: 8a:d7:6a:49:aa:1d:20:53:ec:67:5a:2d:ae:b4:c5: d5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:44:E8:81:F4:89:60:BB:BC:DC:14:CD:34:B5:43:32:8A:C5:26:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35020f1b-66f6-38ce-b296-a8a736d9ba08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b5:68:63:ac:d9:2d:55:d9:97:3f:a8:9d:19:b7:f7:f4:65: 11:b9:47:d7:63:c1:57:81:dd:c8:a2:5b:66:0d:cc:68:a8:16: 08:80:59:74:93:bf:5b:92:40:be:f7:60:fa:ba:3c:75:b5:7f: 0a:af:3f:e9:52:03:6d:09:0c:82:d4:74:db:7a:59:e3:fc:e1: b8:d8:8f:8a:bb:57:f8:fa:da:f6:43:80:c5:d7:80:20:db:9b: f1:3c:6b:75:b0:5b:8a:b6:82:c3:47:bd:6d:cc:f9:ad:c5:f1: d2:15:1c:b3:ec:75:74:57:6f:41:f5:29:d4:17:87:ab:dc:2f: e2:ef:ba:d7:09:bf:57:3f:b6:6a:d5:f0:6a:c4:c3:1b:d2:8b: b9:7a:b5:76:2c:bc:b5:dc:28:e7:28:ec:a0:5d:b2:b9:4d:10: 79:9c:b6:02:1e:c0:d0:d8:3a:1b:f1:23:5f:be:e6:a9:2d:45: 99:5b:0a:3a:02:93:7b:e2:6e:96:cf:c5:82:e2:d2:24:f3:cf: bf:33:61:b7:cc:f6:89:3b:a7:22:f8:ab:b4:76:c5:95:e6:1c: e3:b4:d1:29:bd:79:fe:55:30:d7:e0:50:00:37:36:91:95:b8: 4e:1a:27:0d:c8:9a:af:97:d8:e0:68:a6:c9:6b:c5:c9:47:68: 9f:4e:3f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+djBbm8nedF9BWTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk MzhkOTFmMjQtM2FhMS00ODUwLWFhM2EtMDQzMTM5ZmFiODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzIG949zYUQE9sSF9FGit19svIbgTPE9nX0A qQNfUq5IsjDIyjHJEC7T4muSp+mCsl0jI0swSFoSFilQUKU5BQJGhrnOvnqLbUIZ nKc5jlHvsnxc5btn7x7zdvuHN+SJFms9kJlRaX0q68NvWfvLFbeHF8+iF+KDNYes 3hq4sdk+6HcGRyCMV4RSKd9aRr4z06cNMbyZ5N0yrXLB38EJlz9M55N3dxu8sHz5 lvCVmEwHANfg0dlEtBWq0LHgv0eqatuLBxbJG3zbzeXVrtWi5071Je1CN/prX+3u SiC3go22Agh7+6ei1nA8UaJcX+2K12pJqh0gU+xnWi2utMXVwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5E6IH0iWC7vNwUzTS1QzKKxSYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzUwMjBmMWItNjZmNi0z OGNlLWIyOTYtYThhNzM2ZDliYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREMlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm1aGOs2S1V2Zc/qJ0Zt/f0ZRG5R9djwVeB3ciiW2YNzGioFgiAWXST v1uSQL73YPq6PHW1fwqvP+lSA20JDILUdNt6WeP84bjYj4q7V/j62vZDgMXXgCDb m/E8a3WwW4q2gsNHvW3M+a3F8dIVHLPsdXRXb0H1KdQXh6vcL+LvutcJv1c/tmrV 8GrEwxvSi7l6tXYsvLXcKOco7KBdsrlNEHmctgIewNDYOhvxI1++5qktRZlbCjoC k3vibpbPxYLi0iTzz78zYbfM9ok7pyL4q7R2xZXmHOO00Sm9ef5VMNfgUAA3NpGV uE4aJw3Imq+X2OBopslrxclHaJ9OP3k= -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:01 2025 by rpki-client