This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9ae85637-6c30-3806-85f8-d79f4af96d9e.roa File: 9ae85637-6c30-3806-85f8-d79f4af96d9e.roa (raw, json) Hash identifier: EMAWACu0cP5pjcj1bA/6Ws3f8QgZj9XCKOlP8AFiYcw= Subject key identifier: A9:FA:9E:84:E8:6D:2F:C8:F4:A4:B4:1D:33:85:00:09:46:7D:C3:D8 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584BFE76304A4DF71663D20DB480 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9ae85637-6c30-3806-85f8-d79f4af96d9e.roa Signing time: Thu 27 Nov 2025 02:00:31 +0000 ROA not before: Thu 27 Nov 2025 02:00:31 +0000 ROA not after: Wed 25 Feb 2026 02:00:31 +0000 asID: 33705 IP address blocks: 68.67.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fe:76:30:4a:4d:f7:16:63:d2:0d:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Nov 27 02:00:31 2025 GMT Not After : Feb 25 02:00:31 2026 GMT Subject: CN=8ca5eab7-e4fd-481f-96cc-9737e794600d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:79:52:c4:93:21:51:e0:1d:fa:55:17:ce: 45:9d:fe:48:e7:47:7f:89:bd:c3:f8:66:d2:16:5f: 79:74:e9:96:a9:ac:46:73:8a:83:89:d3:16:3b:69: d0:2d:78:de:4c:1b:60:16:0b:5f:a5:c9:17:a6:0a: a5:14:d0:3d:2d:2e:86:95:7e:b9:a0:e6:bc:02:d2: 70:a6:1a:18:5e:2b:65:ba:1f:57:ec:a4:30:be:37: 33:28:b1:06:fc:ef:0d:57:41:47:c8:a4:86:dc:ba: ff:f4:bd:85:ef:9d:b1:2c:ce:97:b4:bc:87:af:83: 05:51:97:67:61:df:cf:a2:42:24:ce:fd:b8:6a:bd: d3:a9:2c:e8:f5:e0:0e:8f:bd:a4:45:72:7e:27:db: af:51:05:c4:c8:db:ec:f8:cf:fa:cf:34:1e:e2:6f: 4e:19:be:1b:03:70:14:a2:9b:95:b0:26:24:d6:3d: 24:b1:9a:b8:d2:fb:ef:9e:f4:7e:25:10:c4:38:fc: 88:b7:6c:f1:2f:7c:6e:35:e8:38:f3:6c:fb:bb:9d: a7:a0:72:a6:74:c3:15:d9:67:9a:ec:35:63:b8:45: d2:36:eb:5a:02:e5:b3:c4:7d:69:a3:1e:9d:e4:77: 80:e4:25:93:9c:c2:ee:a0:64:65:04:ff:91:2c:bc: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FA:9E:84:E8:6D:2F:C8:F4:A4:B4:1D:33:85:00:09:46:7D:C3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9ae85637-6c30-3806-85f8-d79f4af96d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:13:74:23:f6:85:ac:35:7e:56:ac:b0:6b:64:c8:62:ab:62: b2:24:db:e3:c3:71:36:8e:2b:41:6c:fe:de:6e:41:5a:30:c6: ca:fd:68:3a:3b:17:45:57:d9:9b:cb:e0:03:51:34:da:2d:89: d9:61:46:b0:41:00:e0:7d:dd:e9:4b:81:78:76:05:c1:7f:f6: 78:31:74:75:94:6e:5c:0a:95:e5:d6:59:b0:91:59:6f:d8:08: e1:25:78:4a:53:ed:54:24:6f:21:8d:d8:0e:57:00:01:8b:96: 71:78:95:70:dd:9b:c8:6a:b0:6c:6a:c7:5e:bc:57:46:15:15: b6:22:fa:20:7a:39:3f:6e:4a:6a:44:7f:5d:54:ad:da:f4:71: e1:e8:fe:4d:f6:23:b6:d1:86:15:4f:d1:8d:84:68:50:c2:b5: 9c:73:a4:d1:63:e5:4d:cd:83:17:74:cc:8c:c2:4b:ae:82:1f: 9b:50:c0:e3:24:48:2e:1a:09:f2:8f:a2:be:74:b7:63:46:5e: 28:c8:94:9d:23:a8:8a:1f:d8:a6:4f:df:31:8a:05:e1:41:7c: d7:6a:6c:a6:3f:08:eb:1c:a7:3d:8f:e1:ed:03:b1:e5:88:bc: 14:ed:11:ab:05:dc:2f:c9:a6:69:5f:aa:b0:6b:58:65:17:b6: 72:aa:88:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv+djBKTfcWY9INtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MTEyNzAyMDAzMVoXDTI2MDIyNTAyMDAzMVowLzEtMCsGA1UEAxMk OGNhNWVhYjctZTRmZC00ODFmLTk2Y2MtOTczN2U3OTQ2MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/55UsSTIVHgHfpVF85Fnf5I50d/ib3D+GbS Fl95dOmWqaxGc4qDidMWO2nQLXjeTBtgFgtfpckXpgqlFNA9LS6GlX65oOa8AtJw phoYXitluh9X7KQwvjczKLEG/O8NV0FHyKSG3Lr/9L2F752xLM6XtLyHr4MFUZdn Yd/PokIkzv24ar3TqSzo9eAOj72kRXJ+J9uvUQXEyNvs+M/6zzQe4m9OGb4bA3AU opuVsCYk1j0ksZq40vvvnvR+JRDEOPyIt2zxL3xuNeg482z7u52noHKmdMMV2Wea 7DVjuEXSNutaAuWzxH1pox6d5HeA5CWTnMLuoGRlBP+RLLxOdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn6noTobS/I9KS0HTOFAAlGfcPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvOWFlODU2MzctNmMzMC0z ODA2LTg1ZjgtZDc5ZjRhZjk2ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwTdCP2haw1flassGtkyGKrYrIk2+PDcTaOK0Fs/t5uQVowxsr9aDo7 F0VX2ZvL4ANRNNotidlhRrBBAOB93elLgXh2BcF/9ngxdHWUblwKleXWWbCRWW/Y COEleEpT7VQkbyGN2A5XAAGLlnF4lXDdm8hqsGxqx168V0YVFbYi+iB6OT9uSmpE f11Urdr0ceHo/k32I7bRhhVP0Y2EaFDCtZxzpNFj5U3Ngxd0zIzCS66CH5tQwOMk SC4aCfKPor50t2NGXijIlJ0jqIof2KZP3zGKBeFBfNdqbKY/COscpz2P4e0DseWI vBTtEasF3C/JpmlfqrBrWGUXtnKqiFs= -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:40 2025 by rpki-client