This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fbba74b-58c0-3e62-9456-346889ccb84d.roa File: 1fbba74b-58c0-3e62-9456-346889ccb84d.roa (raw, json) Hash identifier: zXVLo0aWAZdVbPTShVt/y7kZGSwHpyg6n3s8dgybIMk= Subject key identifier: 41:41:6B:8B:E0:57:BB:83:55:1A:8E:CA:30:D1:1C:33:69:AC:70:74 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BEDB5E5D301E72607C7DDAF00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fbba74b-58c0-3e62-9456-346889ccb84d.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:e5:d3:01:e7:26:07:c7:dd:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=ff9d33b4-7796-45e4-8895-cb97348a23ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:fe:4f:f4:4c:c1:0c:f4:76:4b:f6:aa:1a: 29:cb:42:a5:6e:57:cb:f5:64:5a:5c:d2:70:88:b3: bb:28:25:89:50:0e:84:dc:84:51:46:d7:1c:35:a6: f3:ba:69:f1:54:48:61:b3:3a:ab:5a:e5:e3:01:8a: b1:97:66:c1:06:73:2a:d5:9c:26:07:47:e8:1b:77: 4f:b0:d3:b7:7d:ae:bc:16:0c:8b:2d:01:d7:c6:3c: db:db:2c:f1:e9:66:41:9f:d8:06:d6:48:8b:d0:3c: 58:99:2a:0f:e8:8f:83:6f:52:32:b7:96:b6:16:59: 2f:bf:86:03:77:42:55:59:af:3d:88:29:8f:50:02: 82:2d:8e:fb:8a:ec:09:72:a3:14:90:a8:f0:94:b8: 49:03:d9:58:ef:9b:f1:60:50:74:98:dc:22:7d:eb: 96:a3:e9:f1:85:35:c4:7e:a2:8a:ec:eb:15:01:94: 3e:44:51:f7:b3:08:32:99:07:47:57:f9:65:fa:ab: ac:ca:14:dc:1a:78:97:aa:21:5f:a7:e0:30:ca:e3: c1:c9:12:51:4e:97:bd:9b:bc:fe:59:a1:0a:95:97: 4a:f6:17:84:17:0e:68:b9:26:2c:51:27:0a:5c:6f: cd:e3:b1:a3:78:29:e9:ea:19:19:69:db:77:8c:cc: ba:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:41:6B:8B:E0:57:BB:83:55:1A:8E:CA:30:D1:1C:33:69:AC:70:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1fbba74b-58c0-3e62-9456-346889ccb84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e0:f4:4c:7c:38:56:a5:29:fe:73:e0:1f:e2:7d:5d:4e:16: 54:a4:ba:86:06:70:0e:3a:fb:1a:46:c4:01:00:3b:0f:90:32: 89:ae:2b:de:2e:64:b8:a5:f8:2c:84:79:69:4a:1e:63:1a:3f: 4f:64:c8:ad:da:70:98:5c:8d:2c:3b:d7:1e:ae:be:a6:c3:f2: e0:99:1d:3e:d1:e7:f9:f8:34:d3:a3:3c:f1:5d:ca:bf:a7:2e: d2:9c:38:02:c4:dd:c6:3e:ff:a8:f7:5b:c8:b3:30:73:08:61: 27:ec:c4:13:9e:1b:0a:4e:ba:8b:63:f5:ca:87:3f:10:e0:41: ad:0a:22:54:ce:3e:85:ea:a8:4e:49:a3:cd:0b:aa:c5:7a:f2: b9:29:ef:ec:49:9b:9f:d4:c7:b1:53:73:2d:4d:78:82:39:16: b9:de:31:e9:57:90:1d:4a:07:db:1e:f0:de:46:40:de:e4:f0: 9c:25:2d:4f:25:27:f9:9f:46:64:d9:4e:11:c9:6b:1f:5b:7d: 2c:f5:00:27:13:ae:50:e6:ca:93:3d:11:e3:d6:23:9d:8d:4f: 81:a9:51:25:f0:a1:04:0a:8d:2f:80:0f:14:f9:fe:98:3a:be: c7:92:9f:7e:4f:c0:0b:ed:e4:4d:ab:8d:07:61:d3:e6:91:fd: c4:c2:b9:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvtteXTAecmB8fdrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmY5ZDMzYjQtNzc5Ni00NWU0LTg4OTUtY2I5NzM0OGEyM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtH+T/RMwQz0dkv2qhopy0KlblfL9WRaXNJw iLO7KCWJUA6E3IRRRtccNabzumnxVEhhszqrWuXjAYqxl2bBBnMq1ZwmB0foG3dP sNO3fa68FgyLLQHXxjzb2yzx6WZBn9gG1kiL0DxYmSoP6I+Db1Iyt5a2Flkvv4YD d0JVWa89iCmPUAKCLY77iuwJcqMUkKjwlLhJA9lY75vxYFB0mNwifeuWo+nxhTXE fqKK7OsVAZQ+RFH3swgymQdHV/ll+qusyhTcGniXqiFfp+AwyuPByRJRTpe9m7z+ WaEKlZdK9heEFw5ouSYsUScKXG/N47GjeCnp6hkZadt3jMy6rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFBa4vgV7uDVRqOyjDRHDNprHB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWZiYmE3NGItNThjMC0z ZTYyLTk0NTYtMzQ2ODg5Y2NiODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7g9Ex8OFalKf5z4B/ifV1OFlSkuoYGcA46+xpGxAEAOw+QMomuK94u ZLil+CyEeWlKHmMaP09kyK3acJhcjSw71x6uvqbD8uCZHT7R5/n4NNOjPPFdyr+n LtKcOALE3cY+/6j3W8izMHMIYSfsxBOeGwpOuotj9cqHPxDgQa0KIlTOPoXqqE5J o80LqsV68rkp7+xJm5/Ux7FTcy1NeII5FrneMelXkB1KB9se8N5GQN7k8JwlLU8l J/mfRmTZThHJax9bfSz1ACcTrlDmypM9EePWI52NT4GpUSXwoQQKjS+ADxT5/pg6 vseSn35PwAvt5E2rjQdh0+aR/cTCuYE= -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:21 2025 by rpki-client