This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa File: 99262335-e4d0-30ea-8231-d57c9635e705.roa (raw, json) Hash identifier: xZP8H/uzkMfp8ye2NervoHQdEcDPL7WLIFQbAMB5pl8= Subject key identifier: 1B:7A:73:22:D7:A6:57:0D:7F:FF:BD:45:09:71:94:65:3E:F3:CF:D4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD5FB3295563D3A14DC5AFD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.157.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:32:95:56:3d:3a:14:dc:5a:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=a64d58d5-c59d-437e-92b3-fa322be66100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:97:0d:b8:11:fd:f7:d9:a8:55:de:92:ed:89: d6:7f:e0:24:bc:c3:e8:e0:51:23:73:ef:1c:b2:00: e2:93:2e:1d:4c:2e:fb:b1:06:39:ca:22:a9:43:a6: b4:2c:d3:1d:19:d1:d3:d7:7b:6b:e2:b3:ab:a0:4e: 29:70:38:94:ce:77:c0:66:89:29:1b:a9:52:07:00: bd:e6:9d:9b:53:7d:76:ca:41:44:b5:29:c9:23:d6: 68:68:50:f2:3f:3a:29:ca:78:04:1b:53:0b:61:78: b2:14:74:a2:ce:6c:18:f9:b1:af:f1:3b:f6:8c:bf: c8:65:04:81:fe:6c:7d:da:e3:ae:f0:6c:9a:69:87: 31:ee:12:da:77:c4:01:94:40:03:9c:9b:69:e0:ed: 8c:cc:83:2f:95:43:52:3f:e3:a3:b3:a9:2e:4e:e6: ce:f2:98:45:28:ac:f7:ab:b9:54:ee:3b:a1:ca:61: 18:8e:6d:9b:c8:cf:da:10:d9:4b:e7:68:3c:11:e8: 74:b4:a0:97:c2:79:a2:c5:ba:14:f0:a8:10:bc:7c: 0b:58:56:01:3c:bf:ef:13:8c:e2:8a:98:b9:27:90: 6e:47:33:ea:94:b5:7c:d7:6e:96:c1:d7:7e:82:c1: dd:db:87:cc:24:06:fc:1d:a5:76:47:12:4a:15:db: e8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7A:73:22:D7:A6:57:0D:7F:FF:BD:45:09:71:94:65:3E:F3:CF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/99262335-e4d0-30ea-8231-d57c9635e705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:50:e9:0d:0c:c2:14:bf:df:72:96:fd:3d:4e:c1:ff:25:b1: 08:b7:8c:24:30:81:1e:5d:d0:90:1e:05:e0:35:83:6d:1a:64: 88:cc:72:19:66:a2:6a:7e:6e:f0:76:eb:87:f8:7c:4f:25:64: e6:a4:5b:bc:60:f3:5b:f5:ba:32:5b:12:cc:9e:87:bf:b6:1c: 19:b1:54:29:af:d8:f7:13:5b:8e:b5:6d:d2:32:39:42:43:1d: c4:5f:5a:19:44:34:6d:8a:34:fb:fe:0e:db:6d:95:64:47:4d: 22:d0:2e:c2:35:15:2f:95:74:65:4f:38:af:21:87:96:ca:e6: 7e:b9:f7:ed:06:b1:e9:1c:e6:bc:f1:4e:0d:9c:47:7e:0e:bd: 8a:a9:a4:e1:d1:50:36:39:e2:94:54:3f:28:f1:41:c9:15:16: 54:5e:6c:2c:69:56:68:7d:63:54:4b:07:bc:93:d3:17:1f:00: ed:17:f3:c0:3b:50:d7:94:26:d1:54:7a:96:16:c8:63:37:51: c4:d6:ce:bc:2a:0d:e1:d4:47:21:c7:bf:ea:92:50:15:fe:84: 99:ef:56:77:d6:63:c3:b6:2f:7d:38:02:36:e4:8d:94:fe:0e: 69:98:f7:fa:e6:4c:96:ad:8b:bb:eb:34:14:1b:97:6c:d6:69: 81:6f:ed:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+zKVVj06FNxa/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk YTY0ZDU4ZDUtYzU5ZC00MzdlLTkyYjMtZmEzMjJiZTY2MTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJcNuBH999moVd6S7YnWf+AkvMPo4FEjc+8c sgDiky4dTC77sQY5yiKpQ6a0LNMdGdHT13tr4rOroE4pcDiUznfAZokpG6lSBwC9 5p2bU312ykFEtSnJI9ZoaFDyPzopyngEG1MLYXiyFHSizmwY+bGv8Tv2jL/IZQSB /mx92uOu8GyaaYcx7hLad8QBlEADnJtp4O2MzIMvlUNSP+Ojs6kuTubO8phFKKz3 q7lU7juhymEYjm2byM/aENlL52g8Eeh0tKCXwnmixboU8KgQvHwLWFYBPL/vE4zi ipi5J5BuRzPqlLV8126Wwdd+gsHd24fMJAb8HaV2RxJKFdvoMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt6cyLXplcNf/+9RQlxlGU+88/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvOTkyNjIzMzUtZTRkMC0z MGVhLTgyMzEtZDU3Yzk2MzVlNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Q6Q0MwhS/33KW/T1Owf8lsQi3jCQwgR5d0JAeBeA1g20aZIjMchlm omp+bvB264f4fE8lZOakW7xg81v1ujJbEsyeh7+2HBmxVCmv2PcTW461bdIyOUJD HcRfWhlENG2KNPv+DtttlWRHTSLQLsI1FS+VdGVPOK8hh5bK5n659+0Gsekc5rzx Tg2cR34OvYqppOHRUDY54pRUPyjxQckVFlRebCxpVmh9Y1RLB7yT0xcfAO0X88A7 UNeUJtFUepYWyGM3UcTWzrwqDeHURyHHv+qSUBX+hJnvVnfWY8O2L304AjbkjZT+ DmmY9/rmTJati7vrNBQbl2zWaYFv7Z8= -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:56 2025 by rpki-client