This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/0fc08716-5f4c-3d86-a021-eff5ff2ebb02.roa File: 0fc08716-5f4c-3d86-a021-eff5ff2ebb02.roa (raw, json) Hash identifier: hhH6x1M2tBOPb018y4OSIanpxeLTmUQWx8oblJp8Dtg= Subject key identifier: D0:26:F3:2D:23:9B:2A:CE:87:57:21:A6:FC:B5:18:FE:A7:B5:76:0B Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584BF1E5ED589A4D44992D86C080 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/0fc08716-5f4c-3d86-a021-eff5ff2ebb02.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 22612 IP address blocks: 68.65.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:ed:58:9a:4d:44:99:2d:86:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=3089b470-9c80-4fd1-924d-c0c1bf0c3f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:17:8e:97:1b:d4:96:44:cd:9f:b9:8a:d6: d1:4b:bc:72:46:0d:07:d2:30:d3:16:ad:5a:9c:e8: 59:40:95:00:bc:2d:ac:c4:a9:cf:74:55:f0:6d:ec: 82:ad:43:43:5b:c5:c3:ff:8c:ec:d8:e8:9a:a0:7e: e3:c5:4f:51:93:38:b5:10:ee:25:70:0a:31:55:b1: af:a5:1f:18:c0:79:e4:b3:0a:25:6c:f6:f1:e2:0f: f7:c6:5f:36:60:35:21:c3:39:19:3d:05:2c:d1:23: 33:23:2a:68:d1:5b:87:e0:37:ef:9d:72:c9:f6:3f: b4:10:1c:88:52:bf:71:04:8d:37:d9:10:fc:c3:4c: 40:d8:e0:b3:16:e7:b6:71:47:cf:ca:eb:95:99:67: da:c8:75:72:0a:30:a3:b3:ea:64:6f:b7:74:52:c9: 0b:72:e8:0b:09:0e:70:48:3f:e2:a3:49:d6:26:30: f6:f9:1e:4a:11:54:21:ad:d9:26:b4:19:1d:b9:86: d2:86:df:40:3d:11:24:4d:83:c9:bd:18:19:e0:12: 6d:7d:ea:c0:95:bf:6d:46:2b:39:03:9d:96:80:b1: a2:7e:70:61:81:d1:c3:91:4b:c3:92:91:32:0b:19: d9:ea:ce:a6:18:7e:00:14:8e:16:bc:16:6d:8a:d1: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:26:F3:2D:23:9B:2A:CE:87:57:21:A6:FC:B5:18:FE:A7:B5:76:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/0fc08716-5f4c-3d86-a021-eff5ff2ebb02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 68.65.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:9a:c2:71:92:82:cb:4c:04:c7:d0:ee:b4:34:39:61:af:4c: bc:50:c9:08:3c:3d:c1:81:83:dd:c4:36:96:35:cc:c9:c0:fc: f6:36:81:02:57:87:aa:5d:e8:8f:28:7d:74:20:20:0b:76:af: 50:3a:eb:b1:37:66:d9:c2:14:d0:ab:07:39:70:25:83:5c:84: 6d:41:10:bc:b8:3e:f2:28:94:24:d7:c8:92:37:a2:26:16:15: d6:a5:25:6a:61:b5:92:78:d2:76:91:52:5e:da:24:bd:d7:fa: 9e:06:3c:ee:37:fa:d9:4e:ab:1c:70:33:44:7a:4c:bd:83:c1: 59:8e:d4:e3:d5:6b:03:c8:38:6c:0b:28:1a:3c:5b:b1:43:ea: 46:0a:6f:5e:57:50:fd:33:39:c7:52:32:55:24:d9:fb:98:b9: f7:44:e4:71:73:3e:4b:d6:a4:09:64:89:cb:79:fc:cf:0d:73: 18:48:c6:3a:4f:60:6d:01:68:ea:2b:08:23:ca:0c:d4:76:71: 52:24:4b:02:26:52:04:8c:c2:49:42:23:53:a7:3c:41:96:23: 78:ca:fb:65:5b:44:e7:a0:ce:87:08:b2:5a:65:1c:c4:dc:6b: e7:aa:d5:f8:58:2d:02:b3:8f:eb:ca:f3:39:87:43:73:05:c9: a1:5a:11:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5e1Ymk1EmS2GwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk MzA4OWI0NzAtOWM4MC00ZmQxLTkyNGQtYzBjMWJmMGMzZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/cXjpcb1JZEzZ+5itbRS7xyRg0H0jDTFq1a nOhZQJUAvC2sxKnPdFXwbeyCrUNDW8XD/4zs2OiaoH7jxU9Rkzi1EO4lcAoxVbGv pR8YwHnkswolbPbx4g/3xl82YDUhwzkZPQUs0SMzIypo0VuH4DfvnXLJ9j+0EByI Ur9xBI032RD8w0xA2OCzFue2cUfPyuuVmWfayHVyCjCjs+pkb7d0UskLcugLCQ5w SD/io0nWJjD2+R5KEVQhrdkmtBkduYbSht9APREkTYPJvRgZ4BJtferAlb9tRis5 A52WgLGifnBhgdHDkUvDkpEyCxnZ6s6mGH4AFI4WvBZtitFiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAm8y0jmyrOh1chpvy1GP6ntXYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMGZjMDg3MTYtNWY0Yy0z ZDg2LWEwMjEtZWZmNWZmMmViYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyawnGSgstMBMfQ7rQ0OWGvTLxQyQg8PcGBg93ENpY1zMnA/PY2gQJX h6pd6I8ofXQgIAt2r1A667E3ZtnCFNCrBzlwJYNchG1BELy4PvIolCTXyJI3oiYW FdalJWphtZJ40naRUl7aJL3X+p4GPO43+tlOqxxwM0R6TL2DwVmO1OPVawPIOGwL KBo8W7FD6kYKb15XUP0zOcdSMlUk2fuYufdE5HFzPkvWpAlkict5/M8NcxhIxjpP YG0BaOorCCPKDNR2cVIkSwImUgSMwklCI1OnPEGWI3jK+2VbROegzocIslplHMTc a+eq1fhYLQKzj+vK8zmHQ3MFyaFaEdE= -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:34 2025 by rpki-client