This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa File: 340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa (raw, json) Hash identifier: rIjU1w3bCHln1jsjMDloosA9Qnd239xlngoWQxqmMLQ= Subject key identifier: E9:65:B3:57:E7:7E:DB:28:D8:38:E7:F7:1D:DF:D0:C6:67:2D:98:8B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C0B06301A47110EB30C111E80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:30:1a:47:11:0e:b3:0c:11:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=9dc99979-da64-4cf2-a1b9-58912a625879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:9c:70:26:ea:37:be:18:43:e9:e6:90:de: ed:de:a0:c2:4e:92:85:0c:54:ac:c1:51:6e:15:50: 02:aa:53:45:0b:20:97:9b:6f:2a:4e:92:ed:90:d4: d9:16:ce:1c:96:4a:66:cc:a4:c3:d8:eb:77:59:f4: 6e:8c:d0:b0:28:3c:74:50:ef:ba:99:4a:b0:14:3f: ac:c5:c9:5c:82:53:f8:61:ea:f0:b8:c4:e0:97:ad: bc:f0:c1:5e:43:64:e2:5a:a6:c8:55:09:a6:b3:37: 0e:5e:b9:e8:f9:84:d8:83:fa:0b:8d:5b:a6:97:8a: 4b:ed:ec:1a:f1:fa:38:7f:a8:4d:57:d5:c3:a9:72: 7b:80:41:a1:d4:10:68:14:90:8a:38:7c:02:e1:f6: 67:d7:1a:34:17:93:6e:93:c7:70:18:1d:08:a9:44: c4:d1:d1:58:71:ab:18:ee:5f:0b:b8:df:6b:78:49: 59:75:01:4f:a5:a5:5f:41:07:05:b7:b6:8b:14:c2: f2:37:e5:1f:a8:79:a5:a4:a3:da:8d:bc:b0:56:45: b5:88:02:7a:bb:dd:87:fc:1f:8f:b2:18:7b:d6:ed: 82:96:d0:11:0c:bb:d6:d8:b9:10:a3:f5:c9:61:7e: 46:79:74:8b:55:77:61:f6:22:3c:a2:e9:da:15:f1: 6d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:65:B3:57:E7:7E:DB:28:D8:38:E7:F7:1D:DF:D0:C6:67:2D:98:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e3:bb:af:69:9d:2c:e5:0b:c8:2f:2d:d0:ff:91:4f:da:d6: d9:69:04:0c:82:d1:f1:b9:d1:30:0c:59:e8:20:a1:45:4d:63: 97:1c:98:41:5f:a5:ba:58:ac:7d:89:9e:31:db:92:a0:1e:8f: d2:2b:ce:a6:78:d5:0f:11:96:c9:c6:7f:1d:5d:80:8f:2f:6d: bb:f9:76:ae:cb:43:8d:9a:3a:3e:a1:3a:dd:b0:a7:57:6a:8a: dc:94:03:c3:ee:96:c7:d2:8b:e5:27:5f:c4:dd:01:30:54:07: 37:5d:bd:7e:ca:81:57:35:df:38:7f:fe:6c:ea:02:90:f4:ed: 26:5b:ae:0e:be:d6:0d:8e:86:44:19:09:97:08:70:3e:5e:e4: 07:a2:28:cf:25:cb:38:25:60:52:94:ca:de:a3:c1:1a:88:b3: 3a:47:86:1d:e3:d9:9c:c4:e8:db:a3:c3:10:b4:4c:f9:2a:e8: c4:0d:ca:74:65:fa:fc:ff:7e:08:73:4c:a0:c5:46:4a:d1:f8: 0a:07:1a:27:20:15:22:50:26:d3:48:43:85:55:e6:4b:81:c7: 36:b0:1d:12:0a:5b:1c:e3:d2:ec:dc:ab:53:4e:fe:12:f2:be: 90:11:1a:39:cf:17:c8:f3:b8:47:a4:9f:c1:10:23:45:a0:f5: 0d:27:37:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBjAaRxEOswwRHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk OWRjOTk5NzktZGE2NC00Y2YyLWExYjktNTg5MTJhNjI1ODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwyccCbqN74YQ+nmkN7t3qDCTpKFDFSswVFu FVACqlNFCyCXm28qTpLtkNTZFs4clkpmzKTD2Ot3WfRujNCwKDx0UO+6mUqwFD+s xclcglP4YerwuMTgl6288MFeQ2TiWqbIVQmmszcOXrno+YTYg/oLjVuml4pL7ewa 8fo4f6hNV9XDqXJ7gEGh1BBoFJCKOHwC4fZn1xo0F5Nuk8dwGB0IqUTE0dFYcasY 7l8LuN9reElZdQFPpaVfQQcFt7aLFMLyN+UfqHmlpKPajbywVkW1iAJ6u92H/B+P shh71u2CltARDLvW2LkQo/XJYX5GeXSLVXdh9iI8ounaFfFtWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlls1fnftso2Djn9x3f0MZnLZiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzQwZDQ1ZDQtMTc0OS0z NGUzLWFjZWEtNGM1YjJjYjZkOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXju69pnSzlC8gvLdD/kU/a1tlpBAyC0fG50TAMWeggoUVNY5ccmEFf pbpYrH2JnjHbkqAej9IrzqZ41Q8RlsnGfx1dgI8vbbv5dq7LQ42aOj6hOt2wp1dq ityUA8PulsfSi+UnX8TdATBUBzddvX7KgVc13zh//mzqApD07SZbrg6+1g2OhkQZ CZcIcD5e5AeiKM8lyzglYFKUyt6jwRqIszpHhh3j2ZzE6NujwxC0TPkq6MQNynRl +vz/fghzTKDFRkrR+AoHGicgFSJQJtNIQ4VV5kuBxzawHRIKWxzj0uzcq1NO/hLy vpARGjnPF8jzuEekn8EQI0Wg9Q0nNwE= -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:59 2025 by rpki-client