This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa File: 85a501f7-6576-30eb-bae9-089a76033a22.roa (raw, json) Hash identifier: Cjl83NI/52KPVEurCaYyaYK25JAO0uji4YEkbDcID6E= Subject key identifier: 7F:A0:19:14:63:97:01:16:B4:A5:00:87:30:9B:F9:AD:14:5E:3F:41 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD7605E776B814FACCBA32080 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.33.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:5e:77:6b:81:4f:ac:cb:a3:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=39e92ab8-1dcf-453e-b2f3-9908465eda7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:95:59:ae:7a:4c:e9:59:47:f9:35:aa:be: e8:2d:fe:aa:83:20:41:0a:e3:db:9f:c0:b9:02:92: 7b:10:ec:24:5b:ea:38:c2:e4:59:0f:72:c6:3d:55: 1f:97:ab:8b:29:31:4f:f8:f0:8e:33:12:8d:e4:94: c9:1c:5e:10:25:a2:33:da:c6:68:c4:ed:ae:15:93: 2f:7b:ba:eb:3c:75:fc:54:a4:a1:31:02:d7:76:d1: 46:48:a7:87:47:8b:34:ac:83:a6:f3:e5:9a:b0:d7: 23:10:6a:59:7b:08:f7:94:d7:19:60:fa:f9:4f:84: f3:28:8e:ee:3e:1e:16:16:01:4f:dd:54:07:a5:2a: 58:cd:95:cc:5c:38:1d:61:da:ba:72:8f:fa:48:e2: d2:6d:2e:a9:f5:ae:1f:af:7c:cb:f6:7d:07:5e:48: 47:f8:88:9b:d9:b8:b3:fb:aa:e7:31:f8:85:bc:f5: f2:83:4f:93:8e:99:4d:42:0b:4e:fd:25:af:a7:8f: 23:9a:31:26:59:24:a7:c3:40:ca:2f:40:c3:7c:2e: 89:52:22:b7:0a:d2:4e:46:20:69:f6:7c:36:b7:3e: 12:ef:d7:01:fb:1d:35:c5:ef:b9:fc:41:7f:1f:a0: 4d:0e:12:55:2a:96:d1:c7:64:13:be:5d:10:83:67: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A0:19:14:63:97:01:16:B4:A5:00:87:30:9B:F9:AD:14:5E:3F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/85a501f7-6576-30eb-bae9-089a76033a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:97:0c:d0:6f:ee:a2:cf:2b:35:7e:fc:9e:9f:89:c2:13:36: 4a:8b:30:02:23:58:1c:24:28:62:42:c9:5b:28:2c:42:34:00: ac:b9:e3:c0:35:2e:3d:7f:42:c8:40:cc:95:c2:5d:45:f3:5e: a9:d8:61:3a:ad:9e:c8:67:f3:04:9e:9d:be:30:f1:f8:a3:d4: 13:de:83:01:32:5d:ed:76:d1:13:a8:cc:24:85:da:57:5a:a9: 12:03:9d:be:65:42:5d:00:b6:9c:d0:75:f2:8f:cf:0b:43:82: cb:76:28:20:94:f1:6b:b1:d4:7c:99:1a:fb:8c:e6:45:f2:c5: 03:ca:72:a5:13:10:ad:d3:cf:cf:92:22:75:fb:3e:b7:a7:d2: d6:de:f6:0c:41:93:d3:53:32:80:0f:42:a3:ba:c2:34:d4:a3: bd:14:6a:d0:3f:f5:18:5f:24:d4:fd:5b:31:eb:14:be:21:b4: 41:54:ee:68:e1:96:dd:e3:94:7c:0b:25:59:1f:8e:91:25:cc: 29:7d:79:3e:65:43:53:53:ae:cb:91:dc:45:34:10:87:3a:c7: 60:c3:69:da:76:c7:5d:ca:ed:1f:a9:51:ce:f6:1e:be:3a:fd: aa:28:af:38:4f:6b:e7:2b:d9:af:c7:04:5f:33:b7:85:e0:5c: d6:1f:b7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvXYF53a4FPrMujIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk MzllOTJhYjgtMWRjZi00NTNlLWIyZjMtOTkwODQ2NWVkYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0iVWa56TOlZR/k1qr7oLf6qgyBBCuPbn8C5 ApJ7EOwkW+o4wuRZD3LGPVUfl6uLKTFP+PCOMxKN5JTJHF4QJaIz2sZoxO2uFZMv e7rrPHX8VKShMQLXdtFGSKeHR4s0rIOm8+WasNcjEGpZewj3lNcZYPr5T4TzKI7u Ph4WFgFP3VQHpSpYzZXMXDgdYdq6co/6SOLSbS6p9a4fr3zL9n0HXkhH+Iib2biz +6rnMfiFvPXyg0+TjplNQgtO/SWvp48jmjEmWSSnw0DKL0DDfC6JUiK3CtJORiBp 9nw2tz4S79cB+x01xe+5/EF/H6BNDhJVKpbRx2QTvl0Qg2d1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+gGRRjlwEWtKUAhzCb+a0UXj9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODVhNTAxZjctNjU3Ni0z MGViLWJhZTktMDg5YTc2MDMzYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqXDNBv7qLPKzV+/J6ficITNkqLMAIjWBwkKGJCyVsoLEI0AKy548A1 Lj1/QshAzJXCXUXzXqnYYTqtnshn8wSenb4w8fij1BPegwEyXe120ROozCSF2lda qRIDnb5lQl0AtpzQdfKPzwtDgst2KCCU8Wux1HyZGvuM5kXyxQPKcqUTEK3Tz8+S InX7Pren0tbe9gxBk9NTMoAPQqO6wjTUo70UatA/9RhfJNT9WzHrFL4htEFU7mjh lt3jlHwLJVkfjpElzCl9eT5lQ1NTrsuR3EU0EIc6x2DDadp2x13K7R+pUc72Hr46 /aoorzhPa+cr2a/HBF8zt4XgXNYft7Q= -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:03 2025 by rpki-client