This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28d91d14-0e2e-3866-8eda-06232954e8f9.roa File: 28d91d14-0e2e-3866-8eda-06232954e8f9.roa (raw, json) Hash identifier: YepX6hGaZ0iTKvSqFvJnyqTNX1rWPnHKRGxZ8/c6Tf0= Subject key identifier: E4:10:54:3A:9B:25:A2:87:B3:B5:5F:D0:08:9D:7D:15:9A:41:65:F7 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE555DDE1727D72DBD1196C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28d91d14-0e2e-3866-8eda-06232954e8f9.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:dd:e1:72:7d:72:db:d1:19:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=0bef25aa-9cff-44eb-98df-55803ef753aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:4d:63:65:77:fe:2a:6d:c6:f3:0f:90:5f: e2:7a:4d:89:84:42:5c:5b:65:79:a7:0d:e4:8f:9c: 61:5f:26:1a:e8:c2:87:9a:47:c2:44:7a:3e:54:53: 84:56:75:0b:ad:94:a3:a3:64:0a:13:30:31:1e:bb: fb:57:85:ea:73:93:01:6c:31:8e:7b:a0:0c:56:e5: 14:e0:17:e7:ae:f9:a7:73:60:60:d1:10:e8:d9:3c: 67:43:03:e1:62:80:db:7e:db:77:67:eb:61:48:a8: 67:06:62:22:54:c1:64:5f:d9:1d:5b:8c:86:ff:b5: c7:d2:f3:6e:be:5b:a7:b2:3a:1a:66:03:34:fe:6a: f3:e1:e5:bb:54:ca:af:17:2b:7b:ec:81:84:62:12: fb:32:d5:09:41:ba:a9:26:2c:ef:ea:fa:84:ba:ba: 87:42:2a:37:8c:94:12:66:f3:e2:e8:89:82:10:0b: bc:24:7c:73:1d:6b:ce:a3:47:bc:72:81:00:cb:07: 05:5e:33:66:01:02:43:b3:03:56:0d:39:57:93:08: 5b:93:0c:ba:ba:d9:e1:f8:37:f7:74:43:39:24:e4: 7d:11:11:9e:60:91:86:f3:d7:92:9a:32:db:05:b0: ac:b1:97:43:12:4c:bd:8d:23:59:f2:6e:4d:bd:91: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:10:54:3A:9B:25:A2:87:B3:B5:5F:D0:08:9D:7D:15:9A:41:65:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/28d91d14-0e2e-3866-8eda-06232954e8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0d:19:19:bf:f6:61:4b:0c:54:86:f8:93:c4:81:1b:fe:37: 1e:e1:dc:db:d7:70:68:c7:d0:3a:85:93:47:a4:ec:73:65:6f: da:26:71:f4:5e:12:04:a0:78:6b:15:3e:0c:b9:22:43:79:a1: 69:76:fa:d4:f6:4c:e1:9a:c6:0c:56:4b:a9:20:77:fa:45:12: 0b:cd:5c:b6:c9:ab:71:7d:9e:d2:a4:2f:6a:94:59:b7:8d:92: 03:ff:2a:9b:6a:26:f3:a2:ec:97:23:7c:71:2a:b5:e7:cf:56: b8:4a:9a:f3:ae:3d:ff:81:10:c1:16:74:bd:2e:f4:41:b8:e5: 3c:80:f1:30:fb:48:6d:32:10:a0:2d:79:00:63:f4:9e:66:87: 65:87:04:a8:bf:7f:a8:8d:a2:d4:d5:61:33:4b:49:ae:3a:73: a2:d4:24:85:36:6b:12:66:a4:63:df:02:53:3d:bc:f1:70:a7: f3:93:9a:10:cb:36:e4:21:ef:df:f2:22:71:f0:d4:ed:1f:8c: 76:1b:54:83:e5:48:11:58:1d:10:01:c3:83:17:71:37:62:72: 5b:80:27:a1:cb:54:e5:d4:0b:f2:7b:63:b5:f0:73:a6:e3:70: e7:ba:f6:e4:c4:6c:bc:2e:65:ef:42:7d:d5:0c:8d:a0:63:1b: 83:c1:1e:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVd3hcn1y29EZbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk MGJlZjI1YWEtOWNmZi00NGViLTk4ZGYtNTU4MDNlZjc1M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1BNY2V3/iptxvMPkF/iek2JhEJcW2V5pw3k j5xhXyYa6MKHmkfCRHo+VFOEVnULrZSjo2QKEzAxHrv7V4Xqc5MBbDGOe6AMVuUU 4Bfnrvmnc2Bg0RDo2TxnQwPhYoDbftt3Z+thSKhnBmIiVMFkX9kdW4yG/7XH0vNu vlunsjoaZgM0/mrz4eW7VMqvFyt77IGEYhL7MtUJQbqpJizv6vqEurqHQio3jJQS ZvPi6ImCEAu8JHxzHWvOo0e8coEAywcFXjNmAQJDswNWDTlXkwhbkwy6utnh+Df3 dEM5JOR9ERGeYJGG89eSmjLbBbCssZdDEky9jSNZ8m5NvZF76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQQVDqbJaKHs7Vf0AidfRWaQWX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjhkOTFkMTQtMGUyZS0z ODY2LThlZGEtMDYyMzI5NTRlOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCE5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcNGRm/9mFLDFSG+JPEgRv+Nx7h3NvXcGjH0DqFk0ek7HNlb9omcfRe EgSgeGsVPgy5IkN5oWl2+tT2TOGaxgxWS6kgd/pFEgvNXLbJq3F9ntKkL2qUWbeN kgP/KptqJvOi7JcjfHEqtefPVrhKmvOuPf+BEMEWdL0u9EG45TyA8TD7SG0yEKAt eQBj9J5mh2WHBKi/f6iNotTVYTNLSa46c6LUJIU2axJmpGPfAlM9vPFwp/OTmhDL NuQh79/yInHw1O0fjHYbVIPlSBFYHRABw4MXcTdicluAJ6HLVOXUC/J7Y7Xwc6bj cOe69uTEbLwuZe9CfdUMjaBjG4PBHhw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:23 2025 by rpki-client