This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa File: c3371c2b-7822-371d-9068-6b89615d8f28.roa (raw, json) Hash identifier: Z9H2gpNnkOPVn976bX1c3TlJGtl4+r2boGei638PwTg= Subject key identifier: 66:D6:34:03:4A:82:C2:DE:0A:B2:28:87:9D:91:3C:B2:0D:00:A3:8A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584C0B0630E9E3D2E527C1C8FBC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:30:e9:e3:d2:e5:27:c1:c8:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=ea17e2b8-e3f1-4270-a6c1-8d4fe8eca89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:bc:17:96:0c:94:ed:c7:7c:3f:14:cc:47: 63:e3:01:e4:0d:5e:06:73:32:c4:ea:7a:7e:6d:ea: 06:d8:c9:26:f8:f1:f4:6b:12:3f:a8:8c:a7:17:e0: 4c:22:9f:a7:76:33:6c:16:bf:14:eb:89:36:50:7c: cc:9b:be:e4:76:0e:ff:67:e6:12:66:9d:ee:d3:1f: 16:95:22:ca:93:87:33:ae:8f:49:07:40:6b:07:97: c6:a1:2b:0d:3b:2b:0f:20:37:1d:a9:95:ab:fe:b1: 00:31:91:62:9b:94:74:95:98:6f:23:71:38:06:4a: 98:22:c6:37:dd:c4:bd:eb:33:b1:80:cf:ba:3a:d1: 2e:5c:1a:0a:ee:4d:45:5a:52:91:d7:fb:7e:ca:46: ba:36:b2:65:b2:9e:80:0b:1e:53:3d:36:72:52:26: c5:11:52:5f:58:c8:8a:78:c5:79:30:a8:0d:0d:2d: 60:c2:83:ce:d8:8e:b5:ca:7e:4b:4d:67:53:5f:f5: 1d:b8:ee:0f:3b:eb:a5:4c:7f:39:b6:64:dc:90:2f: 9e:6e:04:56:9a:7c:cc:33:3e:47:db:6c:2b:ba:3f: 22:b9:18:c3:30:a8:be:8e:f7:9a:22:b4:c7:a4:3f: e6:28:9c:a8:e5:16:28:c8:4a:0d:00:f1:d9:e7:63: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D6:34:03:4A:82:C2:DE:0A:B2:28:87:9D:91:3C:B2:0D:00:A3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c3371c2b-7822-371d-9068-6b89615d8f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:54:3e:81:64:71:0b:19:9c:78:a2:b9:cc:0f:f7:b3:be:0f: e5:8f:20:51:ca:c3:c1:63:68:bd:01:1f:40:64:9d:e0:5b:d8: 34:52:bf:bd:b2:2e:c2:5b:c7:2d:f5:33:80:1f:c7:1d:0e:0d: 31:1c:4f:a8:5f:0f:bb:cc:d2:0f:34:21:41:ac:24:0b:ca:f4: 0e:66:97:09:4e:4f:4d:58:20:32:3d:51:8e:57:90:6b:63:16: 94:6b:6c:38:ac:19:2b:fa:8a:52:10:26:71:d9:49:3b:ca:f4: 26:ad:f2:09:9e:af:8e:47:50:8c:71:c5:a3:f2:33:80:09:06: 7e:c8:ca:b4:39:c4:25:c9:02:e2:12:3c:89:79:80:cd:7b:62: 0f:bc:5e:41:50:7c:60:ba:e2:7d:03:5d:b6:ec:c2:82:11:1c: b8:3e:d3:eb:72:8d:7d:78:c8:43:e7:53:7e:06:1c:a7:27:c1: ef:af:77:02:33:54:b9:02:47:1f:06:cf:62:7b:96:7c:b7:57: 2b:19:2a:cd:27:7d:ef:9d:99:ce:57:f2:5e:97:c9:9c:57:de: 08:5b:77:aa:a2:21:b1:fa:c6:dd:f8:3f:12:c2:e3:3b:8f:3b: 94:2f:4c:d8:43:d0:d3:e1:e2:3f:27:83:b4:63:58:3d:57:9b: 97:3f:2f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBjDp49LlJ8HI+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk ZWExN2UyYjgtZTNmMS00MjcwLWE2YzEtOGQ0ZmU4ZWNhODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLW8F5YMlO3HfD8UzEdj4wHkDV4GczLE6np+ beoG2Mkm+PH0axI/qIynF+BMIp+ndjNsFr8U64k2UHzMm77kdg7/Z+YSZp3u0x8W lSLKk4czro9JB0BrB5fGoSsNOysPIDcdqZWr/rEAMZFim5R0lZhvI3E4BkqYIsY3 3cS96zOxgM+6OtEuXBoK7k1FWlKR1/t+yka6NrJlsp6ACx5TPTZyUibFEVJfWMiK eMV5MKgNDS1gwoPO2I61yn5LTWdTX/UduO4PO+ulTH85tmTckC+ebgRWmnzMMz5H 22wruj8iuRjDMKi+jveaIrTHpD/mKJyo5RYoyEoNAPHZ52OqhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbWNANKgsLeCrIoh52RPLINAKOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzMzNzFjMmItNzgyMi0z NzFkLTkwNjgtNmI4OTYxNWQ4ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVUPoFkcQsZnHiiucwP97O+D+WPIFHKw8FjaL0BH0BkneBb2DRSv72y LsJbxy31M4Afxx0ODTEcT6hfD7vM0g80IUGsJAvK9A5mlwlOT01YIDI9UY5XkGtj FpRrbDisGSv6ilIQJnHZSTvK9Cat8gmer45HUIxxxaPyM4AJBn7IyrQ5xCXJAuIS PIl5gM17Yg+8XkFQfGC64n0DXbbswoIRHLg+0+tyjX14yEPnU34GHKcnwe+vdwIz VLkCRx8Gz2J7lny3VysZKs0nfe+dmc5X8l6XyZxX3ghbd6qiIbH6xt34PxLC4zuP O5QvTNhD0NPh4j8ng7RjWD1Xm5c/Lw8= -----END CERTIFICATE-----Generated at Sat Dec 6 14:12:36 2025 by rpki-client