This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa File: 3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa (raw, json) Hash identifier: sTGMUIot1d4IAZD6K9jY3B/DvekkX3majZBOEgMRCyU= Subject key identifier: A6:85:58:8A:7A:D0:1D:77:64:F4:03:2E:E4:AB:C8:16:2A:08:37:C8 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE6BB1F05AB8245B34CBEA580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa Signing time: Tue 18 Nov 2025 14:00:38 +0000 ROA not before: Tue 18 Nov 2025 14:00:38 +0000 ROA not after: Mon 16 Feb 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.153.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:bb:1f:05:ab:82:45:b3:4c:be:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 14:00:38 2025 GMT Not After : Feb 16 14:00:38 2026 GMT Subject: CN=b1891a68-72d4-4e22-9a24-c9715d9ac156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:ae:39:d6:33:02:96:8f:86:60:8b:c9:ce: b5:11:7a:fe:a3:99:a0:13:7d:01:17:8f:c1:a8:af: 4e:80:e5:31:91:9a:2d:b8:6e:50:f3:fa:d3:43:59: 80:bc:c2:76:a8:46:a8:36:b7:cc:d0:65:ae:12:0f: 60:d7:36:4a:13:e9:8a:5a:7b:47:3c:c0:69:82:ad: 8c:3c:ce:c4:a5:45:71:8f:4a:79:4a:10:d8:15:bb: b5:65:ca:86:45:c7:41:72:e8:0f:1c:80:70:9c:55: be:20:62:29:19:7c:bb:86:e1:79:d9:be:c9:23:63: fe:50:dd:a7:81:89:4c:2a:6e:7e:d8:fe:a0:97:9b: b1:6b:8d:5f:76:ff:05:50:db:b4:bf:94:96:08:3c: 1b:a7:40:93:1d:f3:af:01:12:a0:99:3c:2b:0f:12: 73:9e:ef:04:78:7f:b0:15:dd:0d:31:09:b9:3e:ed: 47:fc:5c:c7:9f:2b:74:ac:bc:c3:1c:8f:08:7c:1e: e9:9f:d2:20:39:b8:41:a2:c2:4b:ac:5c:b6:8f:ee: aa:c4:60:4b:ec:9e:26:66:1d:e0:cf:ff:58:05:89: 94:95:01:eb:c9:d5:c0:a3:91:d4:cc:be:e2:91:20: e8:4f:3f:eb:ef:4f:78:5c:28:74:04:52:fc:23:2e: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:85:58:8A:7A:D0:1D:77:64:F4:03:2E:E4:AB:C8:16:2A:08:37:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b42a036-18bc-3943-a55e-20be9e9bf9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:46:8b:a0:3d:5e:66:11:6f:9a:37:f6:d9:b0:da:1d:ab:df: 94:aa:25:24:86:70:5e:a6:8e:95:f2:64:95:3b:50:14:8e:a5: dd:93:21:cf:5d:2e:bb:be:cd:9d:8b:26:d8:2f:e2:b7:58:ae: 41:b0:5c:8f:c6:09:b6:89:38:ac:e2:d5:44:62:27:4f:2d:0f: a7:54:46:e7:19:f3:29:07:9e:3e:ec:71:1c:53:bb:40:94:47: 3f:87:83:93:04:c4:75:9e:62:f9:22:21:cd:e0:ea:7d:11:a1: aa:94:cf:42:30:c7:9c:be:72:8c:d7:75:c6:13:7c:1e:36:84: c4:a4:46:9d:c1:18:d2:76:a3:9d:e7:0a:14:02:b9:2c:9b:1e: b4:e2:49:15:c1:a3:e8:f8:54:31:67:d1:34:13:89:8d:33:38: 1f:7c:b4:e9:52:b6:40:51:0d:b9:1f:1e:df:36:3f:50:88:8f: 96:9b:9d:43:59:ea:36:81:e2:75:1f:08:5f:56:8b:66:9d:0f: 0e:2a:3b:80:c7:35:7f:2b:fb:90:c8:23:53:f0:dc:8a:55:4a: 72:18:ef:b7:09:55:bd:d3:91:dd:e8:06:f8:50:90:80:84:29: 93:3a:7a:f9:da:db:e7:4c:3a:fa:60:50:11:ec:a9:68:2c:8b: 71:c0:f6:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvmux8Fq4JFs0y+pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODE0MDAzOFoXDTI2MDIxNjE0MDAzOFowLzEtMCsGA1UEAxMk YjE4OTFhNjgtNzJkNC00ZTIyLTlhMjQtYzk3MTVkOWFjMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KeuOdYzApaPhmCLyc61EXr+o5mgE30BF4/B qK9OgOUxkZotuG5Q8/rTQ1mAvMJ2qEaoNrfM0GWuEg9g1zZKE+mKWntHPMBpgq2M PM7EpUVxj0p5ShDYFbu1ZcqGRcdBcugPHIBwnFW+IGIpGXy7huF52b7JI2P+UN2n gYlMKm5+2P6gl5uxa41fdv8FUNu0v5SWCDwbp0CTHfOvARKgmTwrDxJznu8EeH+w Fd0NMQm5Pu1H/FzHnyt0rLzDHI8IfB7pn9IgObhBosJLrFy2j+6qxGBL7J4mZh3g z/9YBYmUlQHrydXAo5HUzL7ikSDoTz/r7094XCh0BFL8Iy4GBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaFWIp60B13ZPQDLuSryBYqCDfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I0MmEwMzYtMThiYy0z OTQzLWE1NWUtMjBiZTllOWJmOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtGi6A9XmYRb5o39tmw2h2r35SqJSSGcF6mjpXyZJU7UBSOpd2TIc9d Lru+zZ2LJtgv4rdYrkGwXI/GCbaJOKzi1URiJ08tD6dURucZ8ykHnj7scRxTu0CU Rz+Hg5MExHWeYvkiIc3g6n0RoaqUz0Iwx5y+cozXdcYTfB42hMSkRp3BGNJ2o53n ChQCuSybHrTiSRXBo+j4VDFn0TQTiY0zOB98tOlStkBRDbkfHt82P1CIj5abnUNZ 6jaB4nUfCF9Wi2adDw4qO4DHNX8r+5DII1Pw3IpVSnIY77cJVb3Tkd3oBvhQkICE KZM6evna2+dMOvpgUBHsqWgsi3HA9q0= -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:29 2025 by rpki-client