This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa File: 609e63b1-2542-3de6-b833-b56dd677893b.roa (raw, json) Hash identifier: zni/tlA75h228G19rnc/ZYH/juUyXGs3Qa+zJ33hr+E= Subject key identifier: CA:33:57:D9:EE:7D:0E:B9:AD:8E:AC:E3:FD:BE:9C:0E:EF:60:81:48 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BF615F072E00C708B6D181900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 8069 IP address blocks: 20.153.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:f0:72:e0:0c:70:8b:6d:18:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=425890c0-f731-4180-8e3f-285b763bb788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b1:45:a7:42:95:cf:d8:ae:63:26:4d:d1:2c: e2:39:dd:4e:11:92:eb:1b:84:8f:ee:33:e7:a9:f4: 48:6e:65:cb:22:ef:12:c6:c9:9f:7b:73:a0:6f:bf: 00:26:47:6f:2c:8f:58:57:04:c9:55:e9:6a:79:ff: e7:2e:a2:f9:35:79:2b:66:35:60:7c:6c:cb:d5:47: c7:3a:b0:54:11:e6:fa:dd:9a:cc:6f:1a:58:bc:5b: 27:f3:78:39:5c:a9:3b:18:bb:7a:4a:c6:3c:67:0a: c7:0b:0d:88:17:63:1b:0f:64:84:cd:cc:62:44:5c: 9b:62:78:f9:88:2e:b7:d1:de:c3:4a:e8:21:f3:35: 35:24:e1:33:d3:3f:37:d9:38:82:75:33:7d:6f:f6: 26:45:9a:6f:59:9a:c8:24:2d:6c:16:45:d3:a2:73: 41:05:67:9f:35:f3:a1:5e:f8:9b:ad:b8:46:c7:af: 39:dd:a6:f2:f6:8a:3a:d6:09:3c:b3:6b:9c:8b:79: 5c:47:fc:3e:45:5c:da:db:67:65:ef:1d:b1:6f:4c: b8:6f:d4:ab:7e:4b:6e:e5:45:18:cb:49:18:e2:71: 57:fc:d7:d9:48:ce:3a:64:96:d1:8c:a1:bd:dd:75: fc:46:7a:d2:56:96:1d:6d:b7:b5:fe:bf:ff:6b:0a: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:33:57:D9:EE:7D:0E:B9:AD:8E:AC:E3:FD:BE:9C:0E:EF:60:81:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/609e63b1-2542-3de6-b833-b56dd677893b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:47:f2:67:7f:75:a4:4c:85:d0:4d:68:de:21:de:85:b3:ac: b2:7c:7b:ad:cd:cf:91:22:e4:4f:c2:e9:ea:64:82:44:1a:00: b9:9f:61:9b:11:f8:27:7a:89:2c:1c:b5:38:3d:ae:96:5d:0a: 60:9c:ec:0c:f1:21:f5:a8:b1:00:23:aa:b1:11:c5:39:16:d8: c3:97:1d:a0:11:d1:ea:0c:fd:1e:69:b7:06:4d:2e:82:71:7f: a4:09:3c:64:4a:01:98:b5:10:0a:aa:7e:18:e9:ea:2c:e0:3e: 6f:8e:b8:27:a2:94:26:1e:31:8f:25:9a:b3:56:42:15:ab:2b: 0f:ae:b8:ac:b4:c6:77:52:07:af:1f:22:83:4b:d2:50:09:a3: 3f:e5:ea:d6:ac:e0:b1:f4:2f:b7:1a:66:78:d3:7c:54:9a:aa: 96:29:eb:ab:9b:61:a2:c2:c3:aa:87:dd:33:2b:a1:03:81:d2: 14:f2:e0:a3:e3:2e:9c:72:90:cf:a3:fa:d1:b4:08:0f:f0:83: 22:05:6a:be:b8:f2:d7:d6:de:24:26:6c:4d:7c:5e:dc:70:65: 83:4b:30:f2:5f:fe:a3:5f:06:fa:91:e3:e1:71:77:9d:c9:a7: 7d:f8:42:46:da:5c:a0:d8:24:00:a4:78:51:9d:0e:e1:9e:8a: 3d:eb:5a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2FfBy4Axwi20YGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk NDI1ODkwYzAtZjczMS00MTgwLThlM2YtMjg1Yjc2M2JiNzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLFFp0KVz9iuYyZN0SziOd1OEZLrG4SP7jPn qfRIbmXLIu8Sxsmfe3Ogb78AJkdvLI9YVwTJVelqef/nLqL5NXkrZjVgfGzL1UfH OrBUEeb63ZrMbxpYvFsn83g5XKk7GLt6SsY8ZwrHCw2IF2MbD2SEzcxiRFybYnj5 iC630d7DSugh8zU1JOEz0z832TiCdTN9b/YmRZpvWZrIJC1sFkXTonNBBWefNfOh XvibrbhGx6853aby9oo61gk8s2uci3lcR/w+RVza22dl7x2xb0y4b9Srfktu5UUY y0kY4nFX/NfZSM46ZJbRjKG93XX8RnrSVpYdbbe1/r//awrRzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMozV9nufQ65rY6s4/2+nA7vYIFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjA5ZTYzYjEtMjU0Mi0z ZGU2LWI4MzMtYjU2ZGQ2Nzc4OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlH8md/daRMhdBNaN4h3oWzrLJ8e63Nz5Ei5E/C6epkgkQaALmfYZsR +Cd6iSwctTg9rpZdCmCc7AzxIfWosQAjqrERxTkW2MOXHaAR0eoM/R5ptwZNLoJx f6QJPGRKAZi1EAqqfhjp6izgPm+OuCeilCYeMY8lmrNWQhWrKw+uuKy0xndSB68f IoNL0lAJoz/l6tas4LH0L7caZnjTfFSaqpYp66ubYaLCw6qH3TMroQOB0hTy4KPj LpxykM+j+tG0CA/wgyIFar648tfW3iQmbE18XtxwZYNLMPJf/qNfBvqR4+Fxd53J p334QkbaXKDYJACkeFGdDuGeij3rWtI= -----END CERTIFICATE-----Generated at Sat Dec 6 16:08:56 2025 by rpki-client