This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa File: 250542c4-d296-36c5-89dd-5586e9f13223.roa (raw, json) Hash identifier: qtfjerJa4LxNHnbunrlTDWPKrCwK1+bKN6jG0VoqHiM= Subject key identifier: D3:58:58:D0:C9:89:89:9F:31:12:E9:E4:FF:48:7C:A0:74:7B:19:77 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C29BBAA6C503A1A6603D29400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 8069 IP address blocks: 20.33.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:aa:6c:50:3a:1a:66:03:d2:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=92e932ce-badf-466f-a4c7-6963e27bb75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:bb:42:d2:55:6f:5a:21:03:07:d5:38:ef: b6:d2:e9:d2:06:1f:e7:fc:3c:de:03:5a:44:fe:eb: 31:a5:59:27:4c:cf:58:25:95:f1:50:b9:ce:3e:13: 17:10:49:de:c0:ac:d8:33:40:b4:05:20:4e:b9:a2: 78:45:fc:a2:2c:45:21:8c:9c:92:79:f0:c3:38:fc: b6:85:cc:24:76:80:a4:ba:09:29:a6:eb:e3:ae:db: cc:1d:b7:69:80:48:1f:e4:24:40:ed:53:88:c4:30: d3:2f:d1:22:6c:87:55:cb:00:af:6e:b3:bf:11:03: de:3a:6e:d2:e7:15:b4:ae:55:c9:30:90:a5:15:cd: ba:ed:5d:8e:24:16:fc:bc:1b:1b:88:7e:2f:e8:42: 35:f6:a3:5d:37:65:63:b3:53:05:4e:a7:90:ba:fe: 9d:72:16:91:e9:8c:c7:c8:09:30:85:5e:db:ec:c0: 56:79:1b:1d:f9:98:c7:5b:8b:40:98:c0:00:85:79: 42:f6:6d:4f:d1:c1:74:77:23:89:f3:1c:4b:ec:aa: 2b:97:29:96:e7:7d:c4:9a:c1:88:c5:a7:ae:ed:c0: a2:20:05:c7:55:18:9a:09:57:2b:5d:6c:76:69:88: cd:af:31:32:0f:97:ef:5a:ba:d7:bd:59:02:95:60: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:58:D0:C9:89:89:9F:31:12:E9:E4:FF:48:7C:A0:74:7B:19:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/250542c4-d296-36c5-89dd-5586e9f13223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1c:93:5c:5b:a9:4d:80:82:f2:c1:f3:f4:9c:46:c8:00:a0: 8f:72:da:6e:87:83:10:c6:3d:66:41:a5:17:4f:4b:13:aa:11: 10:34:5b:d5:44:dd:ce:67:6b:fe:f8:64:91:e4:c6:a4:47:6f: 65:0a:f4:27:60:e9:a4:8b:12:32:e8:bb:58:1e:74:6c:15:b3: 36:1e:88:64:58:16:d0:fd:28:95:d9:4a:56:48:e1:32:7f:06: 3a:e0:b0:96:19:42:ad:19:06:9a:21:91:60:84:a8:1f:bd:d1: ed:33:97:3d:3a:a9:9d:e1:c2:29:88:e4:ba:00:02:a1:21:72: 7f:f6:3e:e9:18:a9:47:9a:0d:ba:1f:2e:41:d7:2b:c9:8e:bb: 18:89:5a:9c:ed:e3:e6:bd:bf:fc:63:0c:9a:8d:8c:32:8b:28: 90:b9:c6:b8:13:79:e0:de:89:d1:3a:35:46:e8:0e:77:3f:f1: 28:5e:b1:59:ac:69:0a:a9:e0:2b:97:a1:dd:49:71:bf:dc:1b: 23:2e:f9:51:1a:8c:f7:f5:09:d5:70:85:b9:42:8f:1a:d6:c2: 54:a3:82:00:40:53:af:bf:6a:3c:c1:eb:aa:15:41:b1:bc:b7: 5e:23:8b:1e:b2:f7:5f:13:f8:dd:5b:9c:8f:0f:bc:88:94:f5: c0:c7:b0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu6psUDoaZgPSlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk OTJlOTMyY2UtYmFkZi00NjZmLWE0YzctNjk2M2UyN2JiNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub27QtJVb1ohAwfVOO+20unSBh/n/DzeA1pE /usxpVknTM9YJZXxULnOPhMXEEnewKzYM0C0BSBOuaJ4RfyiLEUhjJySefDDOPy2 hcwkdoCkugkppuvjrtvMHbdpgEgf5CRA7VOIxDDTL9EibIdVywCvbrO/EQPeOm7S 5xW0rlXJMJClFc267V2OJBb8vBsbiH4v6EI19qNdN2Vjs1MFTqeQuv6dchaR6YzH yAkwhV7b7MBWeRsd+ZjHW4tAmMAAhXlC9m1P0cF0dyOJ8xxL7KorlymW533EmsGI xaeu7cCiIAXHVRiaCVcrXWx2aYjNrzEyD5fvWrrXvVkClWBTvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNYWNDJiYmfMRLp5P9IfKB0exl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjUwNTQyYzQtZDI5Ni0z NmM1LTg5ZGQtNTU4NmU5ZjEzMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcck1xbqU2AgvLB8/ScRsgAoI9y2m6HgxDGPWZBpRdPSxOqERA0W9VE 3c5na/74ZJHkxqRHb2UK9Cdg6aSLEjLou1gedGwVszYeiGRYFtD9KJXZSlZI4TJ/ BjrgsJYZQq0ZBpohkWCEqB+90e0zlz06qZ3hwimI5LoAAqEhcn/2PukYqUeaDbof LkHXK8mOuxiJWpzt4+a9v/xjDJqNjDKLKJC5xrgTeeDeidE6NUboDnc/8ShesVms aQqp4CuXod1Jcb/cGyMu+VEajPf1CdVwhblCjxrWwlSjggBAU6+/ajzB66oVQbG8 t14jix6y918T+N1bnI8PvIiU9cDHsP0= -----END CERTIFICATE-----Generated at Thu Dec 18 22:09:49 2025 by rpki-client