This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa File: 70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa (raw, json) Hash identifier: 4nx2uMJVGYOmcqJVteFPhyT6f8Eo2+ETtme2IZX9/RQ= Subject key identifier: 76:7A:D9:D0:E9:86:0F:E3:32:50:B9:DB:58:76:8B:52:08:20:0F:CE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C8A0C5F211CD6FE016AE406C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 8069 IP address blocks: 20.153.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:5f:21:1c:d6:fe:01:6a:e4:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=461cb3db-3262-4567-bb00-3787df448f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:3c:12:23:48:bc:c9:d7:6b:a3:1a:c7:78: 23:d1:ef:1d:1e:40:fc:eb:3f:35:5d:00:48:38:b3: 3f:16:6b:23:3a:a1:f6:29:94:bd:63:b2:e1:55:4c: 75:48:87:f7:ab:d7:93:2c:6a:92:20:54:73:9e:63: 7d:d7:9d:32:11:d1:2d:fc:3d:84:4a:97:73:01:93: 05:53:92:3e:cb:0a:ae:3b:d7:08:96:16:b1:64:08: cf:61:4b:61:e3:9f:51:83:19:31:12:7d:0e:0f:12: b5:92:c4:e9:30:1d:0d:ea:b9:15:d2:8b:40:9c:02: 9c:d9:26:9b:72:5c:68:61:51:ad:c9:ac:48:76:3d: 41:f4:dd:f9:83:d6:5c:33:f5:03:ae:46:6f:12:ef: 9f:95:22:3e:e3:03:a4:18:dd:5a:53:a7:ab:a6:85: 1f:c5:f3:4d:e6:db:c1:9e:65:25:69:4c:ca:2d:73: 97:32:e0:c1:08:ac:de:4f:a5:4a:7d:2d:8b:cb:63: 68:54:ff:20:1c:b8:f4:70:f9:ac:77:03:1c:a4:7b: 23:d1:38:f4:f0:65:ae:54:6b:80:92:2a:3e:59:5c: a0:1e:be:8f:0b:45:60:9b:22:62:0e:53:de:63:c5: ee:ce:66:be:b9:ff:2d:03:32:0b:1d:53:bc:38:e7: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7A:D9:D0:E9:86:0F:E3:32:50:B9:DB:58:76:8B:52:08:20:0F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70d7d4f6-bf66-36b0-9c7f-d14083a36a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e5:32:a7:28:c0:fa:be:94:4d:bc:91:9c:74:a9:6e:3f:89: f2:40:d1:e4:3e:25:02:bb:63:8a:d2:e8:df:2a:7b:b7:e7:31: 03:67:bc:95:99:39:a0:62:ec:83:b3:b3:3c:4f:a4:bf:bd:60: 64:80:fe:ca:90:3e:73:5b:9d:93:c4:e0:ec:39:d4:66:b2:32: 98:da:da:06:d3:f5:bf:d2:19:b5:a2:8a:22:98:9c:07:27:5f: d6:ee:69:80:fa:e6:4d:26:04:cb:79:cb:02:fd:07:ce:86:b9: dd:89:e7:21:71:38:de:b5:0a:99:62:fe:72:15:b8:ff:a3:86: 0b:05:d5:de:6c:d7:19:63:93:ae:74:5e:03:c3:27:d1:56:10: 64:aa:ad:e0:66:d1:e7:7c:20:57:ae:58:83:e2:23:bf:74:e2: 47:f2:c4:6f:5b:59:8c:11:38:d3:6c:7c:c0:5a:d5:4d:1c:41: 86:80:13:31:47:bb:e0:fc:4e:43:83:e5:45:87:f7:99:a7:32: 94:ff:05:57:ac:49:a1:b7:56:54:47:ed:e2:02:91:1c:e6:d3: 16:ef:96:d0:79:64:93:a5:78:f0:de:fe:4b:8c:6f:0b:fd:e9: 41:43:18:14:fe:85:70:b7:ed:af:9a:b9:ff:12:17:33:6c:24: 47:60:f5:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDF8hHNb+AWrkBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk NDYxY2IzZGItMzI2Mi00NTY3LWJiMDAtMzc4N2RmNDQ4ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRk8EiNIvMnXa6Max3gj0e8dHkD86z81XQBI OLM/FmsjOqH2KZS9Y7LhVUx1SIf3q9eTLGqSIFRznmN9150yEdEt/D2ESpdzAZMF U5I+ywquO9cIlhaxZAjPYUth459RgxkxEn0ODxK1ksTpMB0N6rkV0otAnAKc2Sab clxoYVGtyaxIdj1B9N35g9ZcM/UDrkZvEu+flSI+4wOkGN1aU6erpoUfxfNN5tvB nmUlaUzKLXOXMuDBCKzeT6VKfS2Ly2NoVP8gHLj0cPmsdwMcpHsj0Tj08GWuVGuA kio+WVygHr6PC0VgmyJiDlPeY8Xuzma+uf8tAzILHVO8OOfdIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZ62dDphg/jMlC521h2i1IIIA/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNzBkN2Q0ZjYtYmY2Ni0z NmIwLTljN2YtZDE0MDgzYTM2YTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHblMqcowPq+lE28kZx0qW4/ifJA0eQ+JQK7Y4rS6N8qe7fnMQNnvJWZ OaBi7IOzszxPpL+9YGSA/sqQPnNbnZPE4Ow51GayMpja2gbT9b/SGbWiiiKYnAcn X9buaYD65k0mBMt5ywL9B86Gud2J5yFxON61Cpli/nIVuP+jhgsF1d5s1xljk650 XgPDJ9FWEGSqreBm0ed8IFeuWIPiI7904kfyxG9bWYwRONNsfMBa1U0cQYaAEzFH u+D8TkOD5UWH95mnMpT/BVesSaG3VlRH7eICkRzm0xbvltB5ZJOlePDe/kuMbwv9 6UFDGBT+hXC37a+auf8SFzNsJEdg9bs= -----END CERTIFICATE-----Generated at Sun Jan 25 16:47:51 2026 by rpki-client