This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c28b8968-a78b-3ae4-ac6d-961f2dc682ae.roa File: c28b8968-a78b-3ae4-ac6d-961f2dc682ae.roa (raw, json) Hash identifier: mIu0oo3XScR/m+NZO38pp3FWuxwjwouaVBxSIJwuEI0= Subject key identifier: CA:BD:EB:3A:87:74:BB:95:AE:2A:4E:2C:46:1B:AE:40:CE:26:BE:E5 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE555DCBB99E8E151FD52DBA0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c28b8968-a78b-3ae4-ac6d-961f2dc682ae.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:dc:bb:99:e8:e1:51:fd:52:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=79f2bb4d-27e1-4ad5-afe1-afde8e656d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:74:1c:6f:f3:7a:0a:c6:21:f7:22:a0:a6:05: 9b:dc:7e:3e:04:30:16:2a:db:a0:a5:22:a3:64:4f: 33:38:03:82:dc:da:7a:28:cc:72:01:37:86:0d:b1: 02:11:5c:76:95:bf:84:df:ca:5c:2d:2d:81:79:0f: dc:e2:52:6a:12:b3:c7:80:0a:6d:80:da:36:73:3f: da:d1:3a:7d:09:b7:f1:e5:f2:65:c2:69:34:b6:f8: 26:90:17:e0:02:e8:a9:fe:d7:1e:ce:e5:9d:95:69: 77:9f:3e:f3:06:48:bb:73:08:2c:80:2c:9f:34:d6: 00:ec:1b:45:f8:91:a3:ef:b5:18:fe:8e:76:ec:26: 56:fc:21:35:90:8a:94:2a:49:25:b8:de:a7:91:ad: 52:08:31:a0:dd:4f:3d:e1:8e:78:73:e4:0a:7b:8b: 96:ba:c6:57:a4:a4:74:09:ed:b0:52:06:37:03:84: 81:04:03:d3:64:f4:93:fc:7b:bc:c5:06:62:d5:b6: 6d:4e:8b:d8:8d:0f:f2:e7:85:50:20:9a:26:b3:fc: 83:d1:28:7f:e5:01:aa:88:b3:7b:07:5d:ab:19:39: fd:53:f3:5b:e2:97:94:20:81:84:24:9d:81:7b:f9: 23:ed:6f:67:61:aa:5d:bd:ef:6f:3d:f8:95:86:52: 35:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BD:EB:3A:87:74:BB:95:AE:2A:4E:2C:46:1B:AE:40:CE:26:BE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c28b8968-a78b-3ae4-ac6d-961f2dc682ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a1:53:63:9f:51:7e:14:a4:ad:1a:4c:69:51:ab:9d:84:32: e0:5d:32:e4:e0:2d:73:25:39:83:e6:31:2f:07:68:49:c2:95: d2:20:63:3d:58:54:c4:6c:51:c7:49:69:a1:28:5e:ea:f7:ee: e9:4e:06:d3:06:50:22:df:7d:86:d8:44:ca:87:30:00:28:80: bd:a6:26:94:a6:bf:a0:07:0b:07:e3:5c:cb:36:7d:0b:9a:f3: 71:10:0f:ce:3c:5f:ee:c3:d6:44:50:3d:a9:f1:4a:56:5b:bf: 58:6d:ce:52:02:eb:09:59:3f:13:4e:b5:08:c0:c8:ab:61:26: 32:c7:a4:58:39:97:b4:1c:37:10:2d:a4:96:61:2a:dc:66:f6: 68:3e:47:94:8b:95:5e:04:53:f3:b4:48:58:e9:25:ae:7e:df: 78:1d:ab:4f:34:17:ed:df:d3:5b:a9:19:da:76:3c:bf:a9:45: d2:3e:8c:5b:ef:8a:87:fe:e1:15:d6:bd:ca:d3:d9:1a:ef:61: 2b:2b:f1:a6:f0:42:d4:bc:eb:88:43:a8:46:2c:be:5a:19:6c: d6:e3:b5:b8:97:38:07:7b:29:84:d4:a4:7a:8c:9e:1e:f8:a0: 74:89:33:52:58:61:5f:7b:f1:91:08:6d:5f:e2:f2:73:c8:be: 65:ad:77:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVdy7mejhUf1S26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk NzlmMmJiNGQtMjdlMS00YWQ1LWFmZTEtYWZkZThlNjU2ZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXQcb/N6CsYh9yKgpgWb3H4+BDAWKtugpSKj ZE8zOAOC3Np6KMxyATeGDbECEVx2lb+E38pcLS2BeQ/c4lJqErPHgAptgNo2cz/a 0Tp9Cbfx5fJlwmk0tvgmkBfgAuip/tcezuWdlWl3nz7zBki7cwgsgCyfNNYA7BtF +JGj77UY/o527CZW/CE1kIqUKkkluN6nka1SCDGg3U894Y54c+QKe4uWusZXpKR0 Ce2wUgY3A4SBBAPTZPST/Hu8xQZi1bZtTovYjQ/y54VQIJoms/yD0Sh/5QGqiLN7 B12rGTn9U/Nb4peUIIGEJJ2Be/kj7W9nYapdve9vPfiVhlI1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq96zqHdLuVripOLEYbrkDOJr7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzI4Yjg5NjgtYTc4Yi0z YWU0LWFjNmQtOTYxZjJkYzY4MmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACahU2OfUX4UpK0aTGlRq52EMuBdMuTgLXMlOYPmMS8HaEnCldIgYz1Y VMRsUcdJaaEoXur37ulOBtMGUCLffYbYRMqHMAAogL2mJpSmv6AHCwfjXMs2fQua 83EQD848X+7D1kRQPanxSlZbv1htzlIC6wlZPxNOtQjAyKthJjLHpFg5l7QcNxAt pJZhKtxm9mg+R5SLlV4EU/O0SFjpJa5+33gdq080F+3f01upGdp2PL+pRdI+jFvv iof+4RXWvcrT2RrvYSsr8abwQtS864hDqEYsvloZbNbjtbiXOAd7KYTUpHqMnh74 oHSJM1JYYV978ZEIbV/i8nPIvmWtd1Y= -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:04 2025 by rpki-client