This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7cf87e-0f05-31d1-bce3-ed291d132616.roa File: 7c7cf87e-0f05-31d1-bce3-ed291d132616.roa (raw, json) Hash identifier: pOVQTnRN2K6VuF/avtYF6DGm7ZuOS2Ou6YZQn6jW4E0= Subject key identifier: 26:6B:A7:E3:50:B6:7A:B1:0C:71:EB:47:27:51:30:29:C4:62:46:18 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C0B062FE74A75BCBFE29926E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7cf87e-0f05-31d1-bce3-ed291d132616.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:2f:e7:4a:75:bc:bf:e2:99:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=24fbb344-9726-461e-8dff-b4a8d51d344c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fb:77:dd:35:f4:ca:ee:f2:29:2e:7d:0d:ec: 9f:25:c8:01:01:79:c2:16:45:70:c2:31:fb:c2:b7: 1d:a0:e2:e8:be:96:e0:70:ce:c9:58:ee:70:43:5e: b9:76:b1:6f:00:25:87:5e:d7:f3:5f:a5:f0:cc:02: 7a:13:c2:c1:20:9d:fd:2a:fd:f3:3f:30:f5:1a:7e: 07:18:99:ca:15:bd:37:97:fe:dc:e3:34:b3:67:d8: b9:25:7c:0b:50:e5:84:90:cb:22:a2:52:b7:14:5a: d6:c3:2e:67:9e:27:44:22:9f:17:a1:df:75:3d:c2: 91:77:4c:fb:86:16:51:66:2c:b9:78:ec:f6:d2:f1: 1a:82:fa:08:88:e6:ba:44:a2:75:22:2a:8b:d9:be: 7b:f2:74:92:d5:87:88:cd:f6:ed:d6:41:9a:f5:96: 8b:7a:02:81:5d:7c:b7:d8:56:5c:52:74:28:74:3c: 60:d8:d5:94:c5:f9:f5:e1:9e:12:42:1f:54:e9:18: b6:08:96:78:34:56:eb:5b:66:2c:f8:5d:0c:8c:ca: ff:1e:3c:9e:37:d4:ad:e3:d8:44:f8:ff:33:9d:73: 32:fe:05:d2:ca:55:4b:17:00:00:b0:cb:14:7c:30: b0:4f:50:2d:4d:a8:c3:79:58:dd:f7:b7:f3:83:26: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6B:A7:E3:50:B6:7A:B1:0C:71:EB:47:27:51:30:29:C4:62:46:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c7cf87e-0f05-31d1-bce3-ed291d132616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:47:ab:53:48:fa:3c:aa:95:e0:9c:3e:ad:b1:74:16:c3:61: 05:35:08:a3:12:c1:a5:7f:35:4d:e4:a1:ba:c5:54:6f:da:8e: 94:fc:df:d4:8d:1b:ae:1b:a5:0a:b1:e3:1f:94:5c:73:3e:01: cb:5f:61:25:33:a2:76:e6:9d:0e:68:56:a5:7a:c1:ef:c1:44: 9e:fd:48:73:fb:7b:ad:fb:d1:35:85:9c:6b:2b:3a:18:20:2d: 29:c7:53:d1:40:c3:86:e5:c9:35:b3:41:74:56:d9:2b:39:b0: 25:c1:14:33:d3:3a:18:d0:fc:1b:1f:e0:05:4b:67:cd:26:c5: 15:9b:dd:15:85:55:d2:e3:69:c9:9f:e8:20:f2:b7:26:0d:79: 20:5a:0a:41:72:33:c1:d1:d8:f8:5f:e0:2f:c9:63:96:9d:ef: f3:0c:0e:c2:e1:44:59:38:f8:7e:61:70:f9:8d:52:b3:d4:47: 09:2e:2f:4c:2a:ee:4a:07:1f:4c:56:5f:91:83:13:5c:5c:2b: 31:bd:2c:97:fa:29:2b:e2:4c:46:b1:c6:ab:03:df:37:75:5e: f8:bb:92:69:db:fd:13:b4:9f:a2:64:bc:41:ed:8f:56:5a:92: ff:39:a5:29:9c:90:a3:2b:71:67:f9:07:fe:81:10:ba:64:68: 58:b0:3e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBi/nSnW8v+KZJuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk MjRmYmIzNDQtOTcyNi00NjFlLThkZmYtYjRhOGQ1MWQzNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/t33TX0yu7yKS59DeyfJcgBAXnCFkVwwjH7 wrcdoOLovpbgcM7JWO5wQ165drFvACWHXtfzX6XwzAJ6E8LBIJ39Kv3zPzD1Gn4H GJnKFb03l/7c4zSzZ9i5JXwLUOWEkMsiolK3FFrWwy5nnidEIp8Xod91PcKRd0z7 hhZRZiy5eOz20vEagvoIiOa6RKJ1IiqL2b578nSS1YeIzfbt1kGa9ZaLegKBXXy3 2FZcUnQodDxg2NWUxfn14Z4SQh9U6Ri2CJZ4NFbrW2Ys+F0MjMr/HjyeN9St49hE +P8znXMy/gXSylVLFwAAsMsUfDCwT1AtTajDeVjd97fzgyYxaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZrp+NQtnqxDHHrRydRMCnEYkYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M3Y2Y4N2UtMGYwNS0z MWQxLWJjZTMtZWQyOTFkMTMyNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlHq1NI+jyqleCcPq2xdBbDYQU1CKMSwaV/NU3kobrFVG/ajpT839SN G64bpQqx4x+UXHM+ActfYSUzonbmnQ5oVqV6we/BRJ79SHP7e6370TWFnGsrOhgg LSnHU9FAw4blyTWzQXRW2Ss5sCXBFDPTOhjQ/Bsf4AVLZ80mxRWb3RWFVdLjacmf 6CDytyYNeSBaCkFyM8HR2Phf4C/JY5ad7/MMDsLhRFk4+H5hcPmNUrPURwkuL0wq 7koHH0xWX5GDE1xcKzG9LJf6KSviTEaxxqsD3zd1Xvi7kmnb/RO0n6JkvEHtj1Za kv85pSmckKMrcWf5B/6BELpkaFiwPl8= -----END CERTIFICATE-----Generated at Sat Dec 6 19:02:58 2025 by rpki-client