This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa File: 0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa (raw, json) Hash identifier: +KL+yFAW8FaPX4XaXTGvLAf8mQDSl/vCBse4po/E4jc= Subject key identifier: A5:22:1E:1A:42:A0:20:44:5A:20:88:FA:6B:59:B6:58:01:FC:52:88 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE820872A57AB9A126623D340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa Signing time: Wed 19 Nov 2025 02:00:30 +0000 ROA not before: Wed 19 Nov 2025 02:00:30 +0000 ROA not after: Tue 17 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e8:20:87:2a:57:ab:9a:12:66:23:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 19 02:00:30 2025 GMT Not After : Feb 17 02:00:30 2026 GMT Subject: CN=15c6a392-eaea-4e1a-96a5-11b22b0b587b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:79:6e:42:d6:17:25:a0:60:43:df:ed:f4: de:10:f4:3e:5d:3b:4e:8e:a0:82:6a:6c:11:0e:99: 19:55:3c:b8:e5:11:41:a6:87:40:8a:72:e7:a7:84: ee:1c:ed:32:f2:f8:dd:d0:6c:10:36:07:ad:8f:b4: 8b:f9:ff:32:2a:9f:6f:44:45:96:0f:75:81:f1:a0: 24:c0:5c:fe:a9:3d:c5:d4:36:5e:b4:80:43:da:09: a6:fa:a6:78:f7:f2:68:45:8c:a4:12:76:5e:89:a6: 65:ee:2e:04:f0:a0:b9:10:2b:89:fd:59:ff:d7:0e: a9:11:69:39:62:99:d0:b1:e0:f0:f6:8e:a3:1a:31: 7b:aa:52:a2:4d:23:26:81:b7:ef:aa:d4:a8:78:f4: 93:1f:6e:b9:1d:ec:af:5e:6e:b1:bb:02:ff:80:aa: 1c:e2:d0:98:6b:7d:94:41:5d:78:e2:28:c0:c1:98: c1:a4:93:b9:d7:9c:1d:d3:93:05:b5:63:3b:8f:d7: d2:c7:a9:25:7b:56:77:1e:e8:bc:2c:af:72:9e:27: 06:d5:41:3a:79:7b:98:dd:b0:4e:72:ba:43:a0:43: 14:79:10:d7:ae:cd:47:9b:fb:c9:a1:99:75:e4:9f: b5:e8:9b:ad:8d:f6:80:f0:ad:91:93:ed:25:1c:bb: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:22:1E:1A:42:A0:20:44:5A:20:88:FA:6B:59:B6:58:01:FC:52:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0d49e71e-15ef-35d8-87b6-e8933f1ce4d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5e:53:ab:40:58:36:41:de:6b:a7:27:ba:79:10:7a:53:e0: 7a:82:f3:fd:8f:79:b7:24:7a:4b:23:75:85:f1:85:4a:a5:43: bd:db:52:7e:86:7b:fc:63:65:2d:a8:8e:ec:64:a6:4e:27:56: 02:c4:4a:06:74:1f:11:29:7e:69:d5:4b:ab:29:39:9e:f5:41: aa:91:dd:a8:58:15:82:2b:23:22:cd:db:1a:ae:e9:d7:21:b3: 8e:9c:3b:9d:f4:8e:54:b4:70:ab:54:79:7a:c6:a5:5e:3b:1d: b7:fd:75:a9:a7:d1:12:ee:f9:64:93:4f:3a:47:66:e6:7c:84: 82:c3:ba:b3:ad:10:d5:93:68:92:62:5c:13:97:e6:00:8c:eb: 52:bb:b3:73:3f:d6:01:de:e6:d2:d5:8f:6f:9e:40:87:85:5a: 0e:03:db:17:ab:dd:b8:7d:a8:88:cc:16:1b:d6:47:ea:a5:13: 89:e9:17:07:b9:24:1c:a9:10:2f:09:0a:a8:c1:1b:35:1f:1d: 60:35:55:5a:59:e2:e8:50:66:b7:73:98:77:27:94:98:47:05: ad:64:01:fb:28:04:48:da:8a:db:59:5c:4e:30:9f:1b:c6:63: 52:f4:43:ea:7f:22:4c:19:c4:21:ee:7c:e3:ff:8b:17:20:70: 29:d7:7f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvoIIcqV6uaEmYj00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExOTAyMDAzMFoXDTI2MDIxNzAyMDAzMFowLzEtMCsGA1UEAxMk MTVjNmEzOTItZWFlYS00ZTFhLTk2YTUtMTFiMjJiMGI1ODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZB5bkLWFyWgYEPf7fTeEPQ+XTtOjqCCamwR DpkZVTy45RFBpodAinLnp4TuHO0y8vjd0GwQNgetj7SL+f8yKp9vREWWD3WB8aAk wFz+qT3F1DZetIBD2gmm+qZ49/JoRYykEnZeiaZl7i4E8KC5ECuJ/Vn/1w6pEWk5 YpnQseDw9o6jGjF7qlKiTSMmgbfvqtSoePSTH265HeyvXm6xuwL/gKoc4tCYa32U QV144ijAwZjBpJO515wd05MFtWM7j9fSx6kle1Z3Hui8LK9ynicG1UE6eXuY3bBO crpDoEMUeRDXrs1Hm/vJoZl15J+16JutjfaA8K2Rk+0lHLsPLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUiHhpCoCBEWiCI+mtZtlgB/FKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMGQ0OWU3MWUtMTVlZi0z NWQ4LTg3YjYtZTg5MzNmMWNlNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFeU6tAWDZB3munJ7p5EHpT4HqC8/2PebckeksjdYXxhUqlQ73bUn6G e/xjZS2ojuxkpk4nVgLESgZ0HxEpfmnVS6spOZ71QaqR3ahYFYIrIyLN2xqu6dch s46cO530jlS0cKtUeXrGpV47Hbf9damn0RLu+WSTTzpHZuZ8hILDurOtENWTaJJi XBOX5gCM61K7s3M/1gHe5tLVj2+eQIeFWg4D2xer3bh9qIjMFhvWR+qlE4npFwe5 JBypEC8JCqjBGzUfHWA1VVpZ4uhQZrdzmHcnlJhHBa1kAfsoBEjaittZXE4wnxvG Y1L0Q+p/IkwZxCHufOP/ixcgcCnXf9o= -----END CERTIFICATE-----Generated at Sat Dec 6 17:54:36 2025 by rpki-client