This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f081f46-2233-3f19-bdcf-278e9ec1d95c.roa File: 1f081f46-2233-3f19-bdcf-278e9ec1d95c.roa (raw, json) Hash identifier: ITyDclkXAAdM0xt8OZS7esu0Fh1Ts4b+4kX8aIQFy2U= Subject key identifier: FB:86:E6:20:7E:84:9E:E4:32:29:8A:59:A4:99:48:BD:1D:5C:9E:C9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C33814910120CD63967B27300 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f081f46-2233-3f19-bdcf-278e9ec1d95c.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:49:10:12:0c:d6:39:67:b2:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=65676fce-642f-4d63-b75a-300cc9a4d770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:bc:6f:7f:e7:fa:7a:c9:d2:1d:a9:8f:7f: 35:5c:1b:d4:51:e4:46:b6:5e:38:18:99:d8:9c:77: 86:b9:b0:14:b0:65:52:03:e4:b3:ef:9b:5a:56:dd: d7:60:bb:3b:e4:32:5b:cc:3e:58:8b:c5:15:85:ce: 3e:99:f5:a5:50:45:8e:04:be:30:40:03:96:9c:21: d9:da:dc:54:ea:0d:77:1f:31:7a:b2:c3:5c:c9:ca: 17:76:71:43:3f:31:1e:f2:f6:e7:fc:c1:62:c5:41: 4c:82:dc:4c:e4:db:3d:c9:1e:a0:31:86:4d:38:d6: bb:78:4f:2d:c5:e6:bd:09:b3:63:28:a3:68:b4:6f: 16:fd:e9:fc:28:bb:5c:02:33:5c:f5:f3:d6:2c:b0: 63:fa:47:31:a5:36:ab:0a:fd:9e:fa:d5:b1:e9:1c: 70:a5:26:c6:74:3a:41:a9:1a:eb:f2:a4:49:22:8f: 72:16:97:03:0f:5d:c3:b5:12:5b:f0:0a:78:86:13: 67:e4:14:d8:ee:88:31:72:af:a1:9d:eb:e1:38:f7: 98:6d:b2:0d:b6:db:15:9a:2d:9e:c1:6b:1b:a1:dc: 9e:44:e2:85:90:b0:08:43:7b:f3:79:c0:1f:70:0e: 86:98:22:49:dd:cc:5c:67:91:5b:d6:a3:0f:f8:09: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:86:E6:20:7E:84:9E:E4:32:29:8A:59:A4:99:48:BD:1D:5C:9E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f081f46-2233-3f19-bdcf-278e9ec1d95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:66:f2:9c:89:b9:9a:e1:b3:b5:50:3b:c5:3f:80:5b:99:50: 67:42:c6:49:07:15:20:ca:8d:e7:81:86:41:8b:11:d1:dc:f0: d6:b6:2d:0b:56:79:65:22:0a:80:05:61:2a:b9:f2:90:30:6c: 9d:cd:94:6a:9f:f3:40:cc:8c:ff:26:2c:43:af:a9:d5:c6:45: 7a:14:7e:17:b4:e8:24:01:38:6d:a3:db:6b:d4:bf:73:b3:45: e6:00:3e:ba:56:fe:6f:73:72:00:f7:4a:f5:ba:01:f1:b5:b9: 60:77:d6:a0:83:ab:34:ae:76:83:50:f1:db:17:9d:47:3e:c8: 91:5e:7d:c2:48:f5:e9:65:61:b2:6c:33:f1:cb:8b:5f:8d:2b: 32:58:95:3e:b4:20:d3:05:73:e6:7b:dd:dd:33:a7:3d:f9:30: 1e:31:4e:4a:9b:f3:56:4f:a9:c6:43:a1:52:85:1f:19:d8:3d: 12:02:49:7c:f8:b9:3b:81:37:01:2f:1d:cf:5c:b7:bd:7b:d3: f5:c2:8f:bf:91:5d:33:fc:df:ed:ba:f1:25:e1:58:b8:71:02: 3c:f0:9d:3f:ae:c6:55:69:54:9a:6a:44:c1:b0:3a:ec:e3:69: 20:8e:ba:67:1e:c6:3e:5e:62:e2:ba:fa:64:53:f7:23:de:18: b0:b6:a9:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgUkQEgzWOWeycwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk NjU2NzZmY2UtNjQyZi00ZDYzLWI3NWEtMzAwY2M5YTRkNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvi8b3/n+nrJ0h2pj381XBvUUeRGtl44GJnY nHeGubAUsGVSA+Sz75taVt3XYLs75DJbzD5Yi8UVhc4+mfWlUEWOBL4wQAOWnCHZ 2txU6g13HzF6ssNcycoXdnFDPzEe8vbn/MFixUFMgtxM5Ns9yR6gMYZNONa7eE8t xea9CbNjKKNotG8W/en8KLtcAjNc9fPWLLBj+kcxpTarCv2e+tWx6RxwpSbGdDpB qRrr8qRJIo9yFpcDD13DtRJb8Ap4hhNn5BTY7ogxcq+hnevhOPeYbbINttsVmi2e wWsbodyeROKFkLAIQ3vzecAfcA6GmCJJ3cxcZ5Fb1qMP+An4oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuG5iB+hJ7kMimKWaSZSL0dXJ7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWYwODFmNDYtMjIzMy0z ZjE5LWJkY2YtMjc4ZTllYzFkOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJllMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9m8pyJuZrhs7VQO8U/gFuZUGdCxkkHFSDKjeeBhkGLEdHc8Na2LQtW eWUiCoAFYSq58pAwbJ3NlGqf80DMjP8mLEOvqdXGRXoUfhe06CQBOG2j22vUv3Oz ReYAPrpW/m9zcgD3SvW6AfG1uWB31qCDqzSudoNQ8dsXnUc+yJFefcJI9ellYbJs M/HLi1+NKzJYlT60INMFc+Z73d0zpz35MB4xTkqb81ZPqcZDoVKFHxnYPRICSXz4 uTuBNwEvHc9ct7170/XCj7+RXTP83+268SXhWLhxAjzwnT+uxlVpVJpqRMGwOuzj aSCOumcexj5eYuK6+mRT9yPeGLC2qfc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:19:03 2026 by rpki-client