This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa File: 8dea440f-3599-3031-bd25-4f82936b64f4.roa (raw, json) Hash identifier: 0YiArliQQRO1qpPOY2QbabFx6qqgPe869DmsS/XNgk0= Subject key identifier: B1:5C:14:37:C0:D4:38:B3:36:20:DF:71:26:B0:7D:D6:9F:CB:5A:5D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD5FB32732959F9A45C232340 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.157.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:32:73:29:59:f9:a4:5c:23:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=aef5d1a8-e43d-4068-aba1-2f6d21f2b969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:c5:30:0e:d8:c4:34:9f:83:f3:5a:30:f9: c2:fc:c3:46:f4:a8:f6:de:11:4c:36:c5:33:bb:dd: 9a:3d:f2:8c:7a:1f:c2:b5:1f:b7:15:83:9d:bc:f3: 80:87:02:19:de:07:f7:a4:2a:17:9e:2e:8b:74:6f: 1e:ca:f9:fb:7d:39:5b:cb:b9:cd:8d:ca:5b:e8:72: 9f:35:82:34:bf:50:1c:5a:80:c6:03:a3:da:4d:2f: 98:9c:6a:3b:61:67:1c:11:1b:1c:17:65:21:4d:38: 87:de:9a:d4:06:0a:a7:f5:e5:2e:44:0a:5f:28:63: 83:1f:a1:70:a9:4b:4a:93:11:af:71:63:34:a1:a1: f2:75:0e:99:e0:16:aa:34:80:44:da:91:f4:66:71: 5b:ad:d4:be:4e:f3:0a:74:d1:e7:61:13:b8:37:ad: c8:ee:96:34:79:91:9e:27:56:ab:14:d8:d3:56:77: 6b:76:5d:46:73:f9:e7:a3:ba:0a:ee:89:ed:a8:39: e5:8a:ff:20:22:44:87:9f:78:42:c7:c7:7e:01:f0: 45:73:fc:7c:82:12:ec:62:b7:74:66:40:04:6e:9b: fb:dd:79:11:25:4c:c2:7d:3f:20:e4:93:5d:93:cb: f8:37:ff:61:6d:2d:22:48:7a:e9:48:d8:4d:bc:b4: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5C:14:37:C0:D4:38:B3:36:20:DF:71:26:B0:7D:D6:9F:CB:5A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8dea440f-3599-3031-bd25-4f82936b64f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:35:5c:59:7c:6a:81:7a:56:8b:14:fc:53:a0:b1:8f:5d:68: 88:d7:44:9e:33:b9:4e:ba:40:bb:f6:bb:54:19:b3:60:c8:18: 92:ee:c9:a8:2d:66:07:78:59:eb:61:45:3e:52:5b:78:91:be: e8:b4:4f:e3:62:7d:6e:f7:3b:84:45:44:76:10:9f:9c:40:6d: 5d:66:5c:6c:be:67:43:52:08:84:53:22:6b:8c:d6:dd:7c:8d: c8:0a:21:c9:36:8f:7f:f6:88:bf:c6:43:bf:d3:cb:eb:f6:85: 71:25:af:88:86:e3:54:b2:b8:cd:3a:01:2d:ad:d1:fb:c2:c2: 8d:80:6f:78:01:2d:1e:31:5a:12:6d:82:98:ca:0d:4a:9d:f3: 0b:bd:4c:4e:36:61:2f:e4:7d:3f:9c:c4:2b:d5:6d:f6:92:7c: 28:65:95:95:dd:a9:4a:32:83:eb:29:7f:96:10:5d:b5:56:18: fe:2f:1a:52:59:ba:cb:27:50:8e:99:cf:71:b4:41:f4:2d:9e: b4:8a:f8:ff:9b:6d:58:17:ba:c2:37:c6:e6:e2:99:3b:c3:5e: f3:59:60:26:98:eb:cf:7a:a3:e9:85:d7:96:5f:07:1d:79:ca: d7:9f:87:28:5a:21:f5:1f:a1:fe:8e:f9:f2:a2:34:90:1d:b0: ff:a3:c0:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+zJzKVn5pFwjI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk YWVmNWQxYTgtZTQzZC00MDY4LWFiYTEtMmY2ZDIxZjJiOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP/FMA7YxDSfg/NaMPnC/MNG9Kj23hFMNsUz u92aPfKMeh/CtR+3FYOdvPOAhwIZ3gf3pCoXni6LdG8eyvn7fTlby7nNjcpb6HKf NYI0v1AcWoDGA6PaTS+YnGo7YWccERscF2UhTTiH3prUBgqn9eUuRApfKGODH6Fw qUtKkxGvcWM0oaHydQ6Z4BaqNIBE2pH0ZnFbrdS+TvMKdNHnYRO4N63I7pY0eZGe J1arFNjTVndrdl1Gc/nno7oK7ontqDnliv8gIkSHn3hCx8d+AfBFc/x8ghLsYrd0 ZkAEbpv73XkRJUzCfT8g5JNdk8v4N/9hbS0iSHrpSNhNvLTmKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFcFDfA1DizNiDfcSawfdafy1pdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOGRlYTQ0MGYtMzU5OS0z MDMxLWJkMjUtNGY4MjkzNmI2NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk1XFl8aoF6VosU/FOgsY9daIjXRJ4zuU66QLv2u1QZs2DIGJLuyagt Zgd4WethRT5SW3iRvui0T+NifW73O4RFRHYQn5xAbV1mXGy+Z0NSCIRTImuM1t18 jcgKIck2j3/2iL/GQ7/Ty+v2hXElr4iG41SyuM06AS2t0fvCwo2Ab3gBLR4xWhJt gpjKDUqd8wu9TE42YS/kfT+cxCvVbfaSfChllZXdqUoyg+spf5YQXbVWGP4vGlJZ ussnUI6Zz3G0QfQtnrSK+P+bbVgXusI3xubimTvDXvNZYCaY6896o+mF15ZfBx15 ytefhyhaIfUfof6O+fKiNJAdsP+jwHg= -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:35 2025 by rpki-client