This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6971e7c6-56d7-3030-b030-6795db8d5437.roa File: 6971e7c6-56d7-3030-b030-6795db8d5437.roa (raw, json) Hash identifier: 1P+nvcExXrNb/lHvFkFjTxSeyCXu/4PkhjO/ZS5zCkU= Subject key identifier: E9:66:B3:CA:9C:AA:B2:9E:06:7A:D6:7E:20:E9:3E:EF:3F:C4:10:6F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C0B063AF741836A7530F29D00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6971e7c6-56d7-3030-b030-6795db8d5437.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.153.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:3a:f7:41:83:6a:75:30:f2:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=782182ad-411e-4cd6-bca2-24113eeb8b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e1:f8:34:92:d9:40:47:da:21:2f:c6:8b:67: 9c:e4:db:59:f3:7a:1c:70:d6:27:6d:7f:80:f6:12: d9:42:cb:7a:78:0b:8e:07:d3:c4:5f:0f:a7:4d:51: f7:12:97:26:a0:23:9b:d4:d6:f1:48:67:6e:b7:d9: 92:3d:58:85:b1:5b:6b:54:02:ed:a0:83:06:76:2a: 88:9a:b8:81:8d:d1:f9:cd:07:a9:d6:c1:65:64:72: 15:48:31:f1:68:61:23:bc:c0:f9:0b:66:99:ef:2e: 8c:20:e3:66:82:45:64:14:61:b3:b4:09:3c:4c:18: c9:40:7d:66:73:eb:cb:99:ec:de:08:a6:c4:f6:83: 2e:df:29:19:c7:09:26:d6:3a:5e:00:ab:45:9a:f6: 01:9c:6e:23:09:0a:d0:6e:29:86:a9:60:ab:14:fd: c1:0b:7c:b9:67:a8:78:89:68:a4:79:89:2b:3b:01: e8:a4:66:23:a3:99:58:eb:de:e6:25:5e:e9:25:78: a7:e5:94:d7:8f:54:79:d4:66:82:d2:35:a7:36:34: 78:c5:24:be:7c:e2:63:09:46:2c:1f:c5:15:89:4a: 6c:35:84:be:57:47:39:9c:13:ec:ba:3a:c7:24:2c: 50:0a:b6:e2:4d:4b:89:b1:a7:0c:20:2d:f9:85:17: 31:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:66:B3:CA:9C:AA:B2:9E:06:7A:D6:7E:20:E9:3E:EF:3F:C4:10:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6971e7c6-56d7-3030-b030-6795db8d5437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:df:c7:aa:39:39:58:37:2c:a5:19:ad:1b:1c:1d:7f:fd:27: 88:c3:15:28:b5:84:1a:53:56:54:70:34:02:d1:ea:ab:03:e2: 0a:66:8d:bb:7c:f7:67:35:1f:62:47:d2:9c:5f:35:38:f5:4f: e4:44:5d:3d:3f:58:9c:46:f3:26:3b:f3:a9:bd:65:ec:1d:8c: 2d:f4:e7:6e:48:cc:49:6d:65:a8:9b:7d:d2:14:27:da:c6:b4: f3:18:a4:39:b2:78:a7:6d:4a:c2:0f:55:d6:b6:c2:2b:a1:9f: 65:fd:60:e1:c0:1f:03:5b:45:fa:3d:86:ef:7e:6d:e6:3e:44: 0f:8d:d9:a0:56:28:d5:87:7e:34:0d:09:41:e1:02:8c:25:44: 69:51:93:62:74:cb:62:54:2c:2f:73:dc:56:0b:ee:9e:ab:26: 86:0a:27:9b:96:74:d5:7b:da:4d:7f:7a:ed:0a:06:34:6d:46: 29:03:4a:02:31:14:6c:dd:f9:5b:34:de:c3:8c:6b:99:81:6a: ab:39:ed:6e:b8:2c:2f:fa:a9:80:94:1e:98:ae:b2:04:77:21: f3:f4:4c:33:68:e3:01:f3:4e:85:9c:b8:da:b5:a3:e1:2b:6f: ba:7d:93:74:40:c0:7b:fe:5f:b5:21:28:93:a2:cc:00:74:90: 08:16:0a:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBjr3QYNqdTDynQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk NzgyMTgyYWQtNDExZS00Y2Q2LWJjYTItMjQxMTNlZWI4YjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+H4NJLZQEfaIS/Gi2ec5NtZ83occNYnbX+A 9hLZQst6eAuOB9PEXw+nTVH3EpcmoCOb1NbxSGdut9mSPViFsVtrVALtoIMGdiqI mriBjdH5zQep1sFlZHIVSDHxaGEjvMD5C2aZ7y6MIONmgkVkFGGztAk8TBjJQH1m c+vLmezeCKbE9oMu3ykZxwkm1jpeAKtFmvYBnG4jCQrQbimGqWCrFP3BC3y5Z6h4 iWikeYkrOwHopGYjo5lY697mJV7pJXin5ZTXj1R51GaC0jWnNjR4xSS+fOJjCUYs H8UViUpsNYS+V0c5nBPsujrHJCxQCrbiTUuJsacMIC35hRcxCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlms8qcqrKeBnrWfiDpPu8/xBBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk3MWU3YzYtNTZkNy0z MDMwLWIwMzAtNjc5NWRiOGQ1NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJlaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3fx6o5OVg3LKUZrRscHX/9J4jDFSi1hBpTVlRwNALR6qsD4gpmjbt8 92c1H2JH0pxfNTj1T+REXT0/WJxG8yY786m9ZewdjC30525IzEltZaibfdIUJ9rG tPMYpDmyeKdtSsIPVda2wiuhn2X9YOHAHwNbRfo9hu9+beY+RA+N2aBWKNWHfjQN CUHhAowlRGlRk2J0y2JULC9z3FYL7p6rJoYKJ5uWdNV72k1/eu0KBjRtRikDSgIx FGzd+Vs03sOMa5mBaqs57W64LC/6qYCUHpiusgR3IfP0TDNo4wHzToWcuNq1o+Er b7p9k3RAwHv+X7UhKJOizAB0kAgWCgE= -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:42 2025 by rpki-client