This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa File: c8980512-7775-361d-924e-d23443bde100.roa (raw, json) Hash identifier: rlzZ/cMbm/JVURLj/os+tMhtLtOpPJ7yJeXTUkqvZvY= Subject key identifier: A9:05:87:B3:7D:20:4A:3E:02:99:54:4C:F8:40:CE:64:2B:4C:C8:4B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD3307F46A9DFEE553B66C900 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 8069 IP address blocks: 20.33.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:7f:46:a9:df:ee:55:3b:66:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=d81027d5-55e4-408d-a2b3-979546e434a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:bf:a7:c4:da:49:3b:53:5a:93:a4:26:5e: b0:6f:36:52:74:57:f9:9f:31:34:e3:c5:fb:90:b3: d3:99:6e:4c:a3:b1:d2:3c:8e:d7:31:43:59:da:f0: 71:2a:f9:3f:cb:e9:84:70:61:61:22:d5:88:7d:79: 2b:92:f0:dd:8b:32:5b:41:3e:e0:64:05:2f:59:2c: 7b:52:a8:c3:32:08:09:67:e1:8e:56:78:6a:1a:0c: 34:bf:56:1f:04:42:d4:8b:d2:92:9a:53:e4:54:e2: a7:49:35:2e:2c:d5:bd:83:83:9a:a2:90:0d:16:93: 48:02:1b:e8:2f:0b:2c:0f:33:b4:7d:44:f7:8f:8f: 3c:dc:3e:5d:89:dc:30:6f:1c:0a:49:df:7a:60:29: 53:b8:61:e1:53:d2:a3:2f:b4:98:89:5b:7e:b3:49: 03:6f:ab:1b:f7:ec:04:87:6a:76:9e:aa:ab:6f:09: 52:16:72:e1:6c:e5:23:15:c3:36:8b:ff:9a:3e:2a: 10:8b:f4:3b:72:63:b2:a3:cd:79:10:b5:59:30:89: b6:a7:87:90:5d:b7:57:65:84:e3:b4:d0:a4:fc:ae: de:e6:b3:4c:c8:e6:90:bd:9b:67:07:9d:c5:4d:10: 03:86:b2:87:78:e8:a7:b8:71:cf:d7:65:7d:e4:f8: bd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:05:87:B3:7D:20:4A:3E:02:99:54:4C:F8:40:CE:64:2B:4C:C8:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8980512-7775-361d-924e-d23443bde100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:62:cc:ad:ef:47:63:6c:d9:c2:8b:2f:60:c8:27:f6:eb:a9: 13:9a:4a:b7:20:f4:ba:1d:4e:74:09:1f:65:10:3e:70:ff:44: 2e:1a:82:1e:93:a9:ba:11:30:54:af:fc:dc:57:cd:14:a5:af: 29:10:0b:e9:d1:cc:e4:e3:cd:d3:90:a8:f9:eb:0e:af:0f:af: 82:4f:ba:27:1f:bf:f3:50:34:7e:ad:91:3a:7c:09:54:0e:41: c9:bf:0e:1b:5d:cb:e1:14:cc:bd:ba:b3:36:37:44:db:de:3f: 9d:0b:f1:8f:b6:52:53:21:64:8c:65:6c:89:ae:c1:84:0b:4b: a6:3b:f1:9f:f0:ab:48:8c:38:a2:43:3b:0f:e6:44:f1:22:68: 97:f1:dd:ef:b5:7e:5c:b0:84:99:24:d4:15:e3:36:8e:31:98: 3b:5b:11:29:b3:fa:07:21:cc:09:c2:1e:05:10:2a:97:98:4e: f1:45:38:f1:b5:47:6f:95:8d:85:29:d9:d6:e3:45:91:0c:4e: a7:f9:6b:32:69:0c:5f:c8:3c:a5:53:f1:6a:70:34:83:bb:26: c4:ed:19:0a:0b:30:37:08:2d:1d:22:06:03:5c:e2:a5:2e:b3: 90:d3:37:17:a9:0b:fc:2a:9f:bd:3e:de:7a:fc:7c:db:95:eb: bf:d5:83:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMH9Gqd/uVTtmyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZDgxMDI3ZDUtNTVlNC00MDhkLWEyYjMtOTc5NTQ2ZTQzNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeC/p8TaSTtTWpOkJl6wbzZSdFf5nzE048X7 kLPTmW5Mo7HSPI7XMUNZ2vBxKvk/y+mEcGFhItWIfXkrkvDdizJbQT7gZAUvWSx7 UqjDMggJZ+GOVnhqGgw0v1YfBELUi9KSmlPkVOKnSTUuLNW9g4OaopANFpNIAhvo LwssDzO0fUT3j4883D5didwwbxwKSd96YClTuGHhU9KjL7SYiVt+s0kDb6sb9+wE h2p2nqqrbwlSFnLhbOUjFcM2i/+aPioQi/Q7cmOyo815ELVZMIm2p4eQXbdXZYTj tNCk/K7e5rNMyOaQvZtnB53FTRADhrKHeOinuHHP12V95Pi9awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkFh7N9IEo+AplUTPhAzmQrTMhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg5ODA1MTItNzc3NS0z NjFkLTkyNGUtZDIzNDQzYmRlMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRizK3vR2Ns2cKLL2DIJ/brqROaSrcg9LodTnQJH2UQPnD/RC4agh6T qboRMFSv/NxXzRSlrykQC+nRzOTjzdOQqPnrDq8Pr4JPuicfv/NQNH6tkTp8CVQO Qcm/Dhtdy+EUzL26szY3RNveP50L8Y+2UlMhZIxlbImuwYQLS6Y78Z/wq0iMOKJD Ow/mRPEiaJfx3e+1flywhJkk1BXjNo4xmDtbESmz+gchzAnCHgUQKpeYTvFFOPG1 R2+VjYUp2dbjRZEMTqf5azJpDF/IPKVT8WpwNIO7JsTtGQoLMDcILR0iBgNc4qUu s5DTNxepC/wqn70+3nr8fNuV67/VgzU= -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:07 2025 by rpki-client