This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa File: 2799286e-a51a-3044-bd67-9ee123f7108f.roa (raw, json) Hash identifier: J/KVQ+2K/WsPOxsF71hcyF4QyYwulY2tdsUX8ppW1U0= Subject key identifier: D5:48:8F:40:15:51:5D:89:50:0D:0F:29:A6:58:00:99:1A:2A:6A:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE6BB22B467E84217E5C28C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa Signing time: Tue 18 Nov 2025 14:00:38 +0000 ROA not before: Tue 18 Nov 2025 14:00:38 +0000 ROA not after: Mon 16 Feb 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.153.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:bb:22:b4:67:e8:42:17:e5:c2:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 14:00:38 2025 GMT Not After : Feb 16 14:00:38 2026 GMT Subject: CN=9e04d436-7a4d-4888-a112-ff6f4f5d7208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:49:f3:53:9c:36:65:ef:d4:58:fa:c2:0b: 5b:ba:e0:6e:39:37:0a:18:6d:3f:17:9a:ae:2f:ff: 89:f4:e9:24:66:d9:13:f4:f6:07:67:92:02:20:2a: bb:2d:18:4c:17:f9:13:52:5a:31:21:9f:f2:0d:18: cd:e8:d8:76:70:70:1b:16:85:ba:49:a7:8c:89:f6: b7:d6:e8:8a:c2:e9:4f:e9:50:02:97:86:1c:ca:52: a4:be:fa:d5:6b:cd:7d:e2:f1:2a:89:00:05:84:16: a7:2b:e2:55:58:2f:b2:c0:39:02:08:aa:5b:83:e9: fc:ad:6b:f9:9e:c2:45:50:4a:1e:97:6c:fd:7d:51: 70:c1:52:65:d7:ed:d7:0e:1a:97:91:f5:b4:73:08: a4:f9:9e:d1:cb:63:8b:d3:43:2d:e6:e5:f1:07:e3: 37:dc:19:60:5f:81:be:d7:bc:c6:0d:16:77:72:3b: 77:ee:a2:d0:08:aa:21:2a:01:c1:6c:83:9a:f5:36: 20:a6:31:77:de:e9:56:fd:64:cb:7f:f2:2a:fb:03: 76:7b:b5:3e:a6:bb:b1:88:42:6e:cc:3c:47:95:50: 7a:a6:af:08:26:6d:56:37:94:4d:ce:de:28:f1:fd: d8:c7:0e:30:3e:a0:2c:8b:13:0d:53:18:ab:29:89: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:48:8F:40:15:51:5D:89:50:0D:0F:29:A6:58:00:99:1A:2A:6A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b4:20:ad:ce:5c:fe:66:be:46:01:46:b9:78:3d:3c:50:d0: 91:53:ca:ae:b5:00:ba:e0:e0:e5:f4:7e:c4:08:35:85:b3:2a: 5b:b1:40:c6:80:d0:e8:83:6b:59:38:fb:5f:20:87:5e:89:37: 18:05:86:48:60:5d:5f:62:60:0e:c6:e9:7f:52:9c:fa:d0:3b: 30:e7:71:9d:87:c7:d2:f4:50:ab:52:da:3b:5d:6f:a4:26:77: 63:8f:a1:52:f8:ed:cb:b3:05:3d:be:6b:73:98:04:dc:6d:65: e1:b7:17:6e:b4:0e:60:36:03:f5:a0:6a:38:3d:2b:95:88:23: 42:9f:1f:54:33:78:3d:e1:8e:5f:fb:f6:99:b5:05:5e:52:61: c3:86:15:a9:64:b3:af:70:e5:56:19:ca:44:d7:a4:96:93:2b: 7b:56:ba:42:55:33:d0:84:28:6e:ea:ad:c4:98:68:8e:27:a8: 20:6f:00:fc:09:39:d2:85:51:c5:68:46:fe:43:fa:eb:1d:6e: ac:34:11:95:5f:5f:ab:cf:89:fc:ba:db:5d:8a:bf:1a:a8:09: c5:5b:bb:eb:82:06:ab:af:ab:60:7b:9e:f5:ce:fe:41:a3:0f: ac:c5:82:20:02:5d:52:f6:51:ff:b7:c7:78:89:0f:b1:12:43: ba:cb:9a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvmuyK0Z+hCF+XCjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODE0MDAzOFoXDTI2MDIxNjE0MDAzOFowLzEtMCsGA1UEAxMk OWUwNGQ0MzYtN2E0ZC00ODg4LWExMTItZmY2ZjRmNWQ3MjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl85J81OcNmXv1Fj6wgtbuuBuOTcKGG0/F5qu L/+J9OkkZtkT9PYHZ5ICICq7LRhMF/kTUloxIZ/yDRjN6Nh2cHAbFoW6SaeMifa3 1uiKwulP6VACl4YcylKkvvrVa8194vEqiQAFhBanK+JVWC+ywDkCCKpbg+n8rWv5 nsJFUEoel2z9fVFwwVJl1+3XDhqXkfW0cwik+Z7Ry2OL00Mt5uXxB+M33BlgX4G+ 17zGDRZ3cjt37qLQCKohKgHBbIOa9TYgpjF33ulW/WTLf/Iq+wN2e7U+pruxiEJu zDxHlVB6pq8IJm1WN5RNzt4o8f3Yxw4wPqAsixMNUxirKYlunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVIj0AVUV2JUA0PKaZYAJkaKmrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc5OTI4NmUtYTUxYS0z MDQ0LWJkNjctOWVlMTIzZjcxMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJn7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq0IK3OXP5mvkYBRrl4PTxQ0JFTyq61ALrg4OX0fsQINYWzKluxQMaA 0OiDa1k4+18gh16JNxgFhkhgXV9iYA7G6X9SnPrQOzDncZ2Hx9L0UKtS2jtdb6Qm d2OPoVL47cuzBT2+a3OYBNxtZeG3F260DmA2A/Wgajg9K5WII0KfH1QzeD3hjl/7 9pm1BV5SYcOGFalks69w5VYZykTXpJaTK3tWukJVM9CEKG7qrcSYaI4nqCBvAPwJ OdKFUcVoRv5D+usdbqw0EZVfX6vPify6212KvxqoCcVbu+uCBquvq2B7nvXO/kGj D6zFgiACXVL2Uf+3x3iJD7ESQ7rLmpk= -----END CERTIFICATE-----Generated at Sat Dec 6 21:53:53 2025 by rpki-client