This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa File: d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa (raw, json) Hash identifier: riVysjCWH6AdahitFwwpclY+ZCwriuopgUBZQg1hIvA= Subject key identifier: 79:DE:E8:1F:0D:40:89:6D:A4:A8:22:C9:74:FD:7A:DC:52:7D:E5:92 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BD7605EFEED286A0B63B6E280 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 8069 IP address blocks: 20.11.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:5e:fe:ed:28:6a:0b:63:b6:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=8333eae4-0a73-42c4-867a-99599b9942ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7e:41:14:30:fe:18:a0:b9:42:89:ee:80:21: bf:33:ce:b8:cc:15:01:64:a2:83:00:21:c0:ea:d5: ec:72:4e:db:19:3d:30:ec:ee:92:87:0f:9f:6f:7d: 17:1f:d5:54:85:64:83:f5:86:71:58:b2:0c:62:8a: 30:c1:4f:ac:c3:6c:08:b1:34:64:ac:36:21:80:f6: 52:c6:25:82:a5:51:57:03:87:b9:ec:3a:e6:7d:85: 1a:d0:5f:85:6b:60:98:51:47:2e:10:fc:28:79:59: 98:08:49:a8:0d:d2:dc:a6:7c:c9:da:f9:8a:f1:1e: 50:3f:c7:b7:6b:42:c3:47:fc:b4:88:68:60:20:77: 4e:87:2d:be:b8:b7:cb:79:b2:f9:8d:52:20:84:e8: fe:91:27:94:25:3a:6d:69:8c:b1:bd:7e:5b:32:31: fd:fb:71:23:13:27:78:73:85:06:25:b0:20:8b:83: 1d:b0:c5:38:0a:93:f0:92:69:b0:c3:9c:16:63:0b: 27:18:85:a5:55:54:89:85:af:89:fe:6d:28:dd:8a: 94:3b:51:a4:54:2e:c8:91:61:9d:51:b8:c6:33:be: 68:0f:03:29:81:73:f9:0a:a8:37:51:ea:8b:65:a6: d7:56:bf:a0:16:5e:6c:aa:21:2d:04:a4:96:b7:0c: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DE:E8:1F:0D:40:89:6D:A4:A8:22:C9:74:FD:7A:DC:52:7D:E5:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9441c3a-aac1-3bca-92fb-30618dd1f2ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.11.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:48:ae:de:41:dd:03:c0:21:a5:c7:15:e0:65:9f:fb:15:d7: a9:6b:e6:80:8a:69:fd:08:b0:84:63:f7:2f:ab:06:a4:7e:7e: 1a:1c:8c:ac:c4:cb:f2:bf:25:57:11:30:59:a4:bd:3b:6d:f5: 44:6e:d7:e7:0c:a0:dd:40:59:75:3e:23:ef:d6:5f:62:98:7b: f7:4e:af:aa:20:5f:bc:36:d5:49:d0:f4:97:b9:7c:95:e3:eb: c4:1c:ca:45:c1:e7:a1:a5:b6:4c:c2:2d:cf:31:d2:83:0c:8e: 79:be:54:88:4d:37:e7:20:fe:60:61:1e:fc:5e:6e:57:ab:2e: 74:9a:a4:4a:e1:ea:5f:8e:71:98:de:1f:a1:dc:26:d5:d1:1f: ab:65:bd:12:05:72:b1:63:23:d3:97:f6:ff:08:35:e1:47:8b: ac:ef:9d:25:1e:bf:1f:05:8e:2a:be:8a:22:66:ed:8c:9e:88: b5:5e:e5:df:0e:d0:e9:fa:6a:70:23:84:9f:a3:b5:30:79:b9: af:2d:35:05:6f:71:e5:32:b5:ef:1a:57:67:54:60:2f:90:00: 25:aa:94:68:ca:e9:29:94:1a:15:e8:ad:a2:dd:98:66:7b:62: c7:fc:95:d5:bb:1a:0f:ed:00:4a:fc:ba:a6:f3:2b:41:ae:a3: 40:59:e5:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvXYF7+7ShqC2O24oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk ODMzM2VhZTQtMGE3My00MmM0LTg2N2EtOTk1OTliOTk0MmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn5BFDD+GKC5QonugCG/M864zBUBZKKDACHA 6tXsck7bGT0w7O6Shw+fb30XH9VUhWSD9YZxWLIMYoowwU+sw2wIsTRkrDYhgPZS xiWCpVFXA4e57DrmfYUa0F+Fa2CYUUcuEPwoeVmYCEmoDdLcpnzJ2vmK8R5QP8e3 a0LDR/y0iGhgIHdOhy2+uLfLebL5jVIghOj+kSeUJTptaYyxvX5bMjH9+3EjEyd4 c4UGJbAgi4MdsMU4CpPwkmmww5wWYwsnGIWlVVSJha+J/m0o3YqUO1GkVC7IkWGd UbjGM75oDwMpgXP5Cqg3UeqLZabXVr+gFl5sqiEtBKSWtwxDLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHne6B8NQIltpKgiyXT9etxSfeWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDk0NDFjM2EtYWFjMS0z YmNhLTkyZmItMzA2MThkZDFmMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFAutMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRIrt5B3QPAIaXHFeBln/sV16lr5oCKaf0IsIRj9y+rBqR+fhocjKzE y/K/JVcRMFmkvTtt9URu1+cMoN1AWXU+I+/WX2KYe/dOr6ogX7w21UnQ9Je5fJXj 68QcykXB56GltkzCLc8x0oMMjnm+VIhNN+cg/mBhHvxeblerLnSapErh6l+OcZje H6HcJtXRH6tlvRIFcrFjI9OX9v8INeFHi6zvnSUevx8Fjiq+iiJm7YyeiLVe5d8O 0On6anAjhJ+jtTB5ua8tNQVvceUyte8aV2dUYC+QACWqlGjK6SmUGhXoraLdmGZ7 Ysf8ldW7Gg/tAEr8uqbzK0Guo0BZ5UU= -----END CERTIFICATE-----Generated at Sat Dec 6 14:07:24 2025 by rpki-client