This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/acaf306a-f973-3686-b377-298a76888713.roa File: acaf306a-f973-3686-b377-298a76888713.roa (raw, json) Hash identifier: X9PK6CsAwJQCrCRJSlBRx+UwcNdMViu+k4WDcFYlmgw= Subject key identifier: 69:68:DA:BB:13:16:08:F8:B0:84:EC:ED:EB:E8:F1:65:2D:48:FD:C6 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD3307F28D728F68558F53580 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/acaf306a-f973-3686-b377-298a76888713.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:7f:28:d7:28:f6:85:58:f5:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=bef10642-1995-47f0-8462-f948da270dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:82:bb:e3:7f:80:a8:af:05:3e:e4:68:d9: 96:ca:98:fb:3e:33:09:c9:f1:3a:f0:7c:1c:45:a8: ff:84:fa:32:9a:10:e9:d9:44:0e:ad:41:dc:25:ce: 87:37:a0:47:ed:e8:a3:5c:5d:36:0a:50:88:ef:06: c9:2e:0e:6d:ed:6e:d3:9f:b9:34:b0:da:1a:a8:b0: 49:25:e7:df:09:71:51:be:f7:e3:ec:ee:de:6a:dc: 1a:a6:a6:aa:19:43:10:5b:8a:ef:44:ce:74:1f:46: 27:a9:6b:c0:df:65:c6:81:ee:75:58:f8:d9:6e:24: 08:93:6f:18:20:92:a8:00:33:4e:85:fc:05:d8:0a: f6:39:96:9d:a4:36:22:ff:fc:18:88:14:f6:31:70: 00:9a:e1:1f:ee:6f:1c:2e:ba:e0:e5:8b:b3:8a:99: 3a:ff:45:1e:91:79:91:48:31:bc:42:d7:56:bb:6c: 06:d5:89:7d:c6:5b:3f:d5:17:7b:36:ed:77:df:14: 80:30:34:ac:9d:02:0d:2e:4c:1a:e2:a9:40:24:1b: f3:03:3b:f2:65:fe:92:48:21:4d:04:1e:28:f3:b0: 86:62:f7:78:c3:4b:63:47:f2:63:89:cb:53:fe:55: 13:0b:3b:c7:5a:e6:71:f7:7c:ae:36:8a:7c:ff:3f: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:68:DA:BB:13:16:08:F8:B0:84:EC:ED:EB:E8:F1:65:2D:48:FD:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/acaf306a-f973-3686-b377-298a76888713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0c:98:02:42:4c:05:b1:62:f8:e4:e1:85:1e:eb:77:0b:d7: f3:ca:72:a3:de:68:d0:b4:b0:cc:31:b5:20:b9:83:9d:e5:fc: 03:40:fa:e3:0c:e5:89:04:c1:d9:e6:0c:88:e2:f3:7f:b6:72: d4:48:3a:cc:9a:cc:47:11:0c:a9:da:53:23:a4:8d:7a:a5:8c: 50:f4:d8:23:29:fb:ab:e0:40:02:a3:57:a1:c5:99:f2:8e:d6: 76:ae:bc:7d:56:ed:59:95:f3:cb:6c:f0:7a:ed:46:76:5d:c1: 82:a2:83:40:ad:b7:47:94:c8:13:71:ca:86:83:cd:e8:6e:a6: 95:ee:e1:7d:38:1a:fc:1f:98:da:26:62:b8:0e:53:94:c7:f5: 50:94:6d:b2:ef:f7:3c:72:15:4b:93:4c:c9:a0:5f:6b:a6:c8: 41:37:28:8e:40:66:57:fa:89:fd:fc:af:c2:d8:5c:bf:ea:7a: e7:5d:6d:12:88:d2:5c:63:82:21:54:46:d2:8d:cb:cc:b0:82: 42:64:89:09:94:65:dc:6f:cd:24:f2:37:84:59:53:dd:12:8c: 34:84:52:58:15:d0:b4:ee:2f:d9:77:9c:e1:67:0b:21:0a:02: 34:48:ce:24:1c:16:fd:4b:48:69:02:71:94:ac:ee:3f:cf:10: ed:a7:36:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMH8o1yj2hVj1NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk YmVmMTA2NDItMTk5NS00N2YwLTg0NjItZjk0OGRhMjcwZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzyCu+N/gKivBT7kaNmWypj7PjMJyfE68Hwc Raj/hPoymhDp2UQOrUHcJc6HN6BH7eijXF02ClCI7wbJLg5t7W7Tn7k0sNoaqLBJ JeffCXFRvvfj7O7eatwapqaqGUMQW4rvRM50H0YnqWvA32XGge51WPjZbiQIk28Y IJKoADNOhfwF2Ar2OZadpDYi//wYiBT2MXAAmuEf7m8cLrrg5Yuzipk6/0UekXmR SDG8QtdWu2wG1Yl9xls/1Rd7Nu133xSAMDSsnQINLkwa4qlAJBvzAzvyZf6SSCFN BB4o87CGYvd4w0tjR/JjictT/lUTCzvHWuZx93yuNop8/z/l2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlo2rsTFgj4sITs7evo8WUtSP3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWNhZjMwNmEtZjk3My0z Njg2LWIzNzctMjk4YTc2ODg4NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcMmAJCTAWxYvjk4YUe63cL1/PKcqPeaNC0sMwxtSC5g53l/ANA+uMM 5YkEwdnmDIji83+2ctRIOsyazEcRDKnaUyOkjXqljFD02CMp+6vgQAKjV6HFmfKO 1nauvH1W7VmV88ts8HrtRnZdwYKig0Ctt0eUyBNxyoaDzehuppXu4X04GvwfmNom YrgOU5TH9VCUbbLv9zxyFUuTTMmgX2umyEE3KI5AZlf6if38r8LYXL/qeuddbRKI 0lxjgiFURtKNy8ywgkJkiQmUZdxvzSTyN4RZU90SjDSEUlgV0LTuL9l3nOFnCyEK AjRIziQcFv1LSGkCcZSs7j/PEO2nNjk= -----END CERTIFICATE-----Generated at Sat Dec 6 17:23:29 2025 by rpki-client