This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa File: db7d766b-51b9-32a6-aae1-08e7427132fc.roa (raw, json) Hash identifier: XzoNN98mBb3uPuM+Q7Wp95EHsbgLVoP899iH3HarJnI= Subject key identifier: 24:77:2A:BA:4D:62:6B:C3:05:DC:CE:BD:21:D4:44:53:A6:FC:41:47 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BE820876EA37ADDF2C8C69D80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa Signing time: Wed 19 Nov 2025 02:00:30 +0000 ROA not before: Wed 19 Nov 2025 02:00:30 +0000 ROA not after: Tue 17 Feb 2026 02:00:30 +0000 asID: 8069 IP address blocks: 20.33.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e8:20:87:6e:a3:7a:dd:f2:c8:c6:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 19 02:00:30 2025 GMT Not After : Feb 17 02:00:30 2026 GMT Subject: CN=8d8b166d-edb1-408f-a227-758ac937abf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:ea:4a:e5:58:57:48:b1:b4:dd:3f:5c:0b: 18:4f:3e:4d:b9:89:fd:bf:c2:29:62:31:a3:50:27: 25:19:47:fe:59:5e:e0:70:9c:b4:a7:1d:c4:94:49: 8d:03:6d:7e:75:34:b7:9c:2a:c0:8b:d7:c7:4b:c1: 8c:12:ac:1e:8e:46:84:d5:24:29:ad:86:72:10:4d: 46:cd:65:98:77:62:1a:ec:cd:91:5a:90:70:8a:77: 9c:c0:44:5a:ac:ef:a6:2d:37:22:1c:a2:ab:71:2c: 95:1a:3a:da:f5:0e:69:90:e5:90:98:19:82:57:d8: 84:07:2c:9b:03:de:34:04:0d:f1:fa:11:ab:dd:54: 0e:f5:d3:82:de:a2:bb:75:33:1f:61:a8:96:6d:37: 69:7a:fc:40:7b:8f:c8:36:dd:49:dd:a8:8a:71:38: 36:a7:b9:4f:2d:37:28:bb:36:2b:69:98:30:b6:69: 95:20:82:78:08:6e:59:6a:8f:53:ef:42:6e:6f:86: 31:cb:ab:d6:bc:7b:82:38:85:13:d2:18:19:40:b7: fb:4e:09:43:76:0b:86:a2:a1:fc:92:3f:e4:19:7f: a0:9c:b3:f8:24:4d:f6:d6:36:3d:ba:b6:8c:6a:76: 92:32:e2:bc:d9:b6:f0:b0:8c:bf:76:3f:4f:9a:59: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:77:2A:BA:4D:62:6B:C3:05:DC:CE:BD:21:D4:44:53:A6:FC:41:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/db7d766b-51b9-32a6-aae1-08e7427132fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:90:b4:16:03:a6:35:df:31:4b:7f:9c:47:d3:dd:f7:41:56: 22:66:74:62:49:b1:d7:1a:0b:ec:0d:56:41:12:e2:ae:c9:2f: 7b:df:cc:ba:0d:cc:7f:19:22:d1:71:04:7d:1a:51:db:16:8e: d0:ff:33:2b:e5:01:01:49:eb:bf:62:8e:7d:28:2a:8a:2a:61: 9c:d2:01:31:f8:2f:b8:bd:cb:a5:8b:26:c4:ab:82:c1:cb:f8: 0f:16:14:70:16:8a:3d:10:94:c2:66:b4:f0:c5:e1:56:39:89: 6f:75:f9:66:78:07:2a:03:c9:44:92:55:c3:5f:80:9c:2c:34: 6a:32:0a:9d:27:6a:0a:53:e8:af:4c:fc:f8:3e:d7:5c:9a:e1: 48:eb:d3:bc:13:c4:aa:13:22:6f:95:09:ab:19:46:84:e5:24: cf:34:55:8e:35:43:20:7a:3f:7f:5f:1c:db:53:2b:a9:3c:b1: 33:ee:0b:3f:09:ed:5c:98:eb:f6:72:d6:6e:45:6e:92:3b:b7: fd:09:6b:bb:7a:d6:c9:d3:f5:16:80:37:27:dc:73:e6:b6:5c: 84:37:42:b3:97:92:66:3b:be:a8:87:aa:76:89:b3:a2:bf:24: 50:8a:65:18:f0:fc:a9:e6:fd:32:3b:c5:d1:00:3d:19:02:0e: ca:6d:1f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvoIIduo3rd8sjGnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTExOTAyMDAzMFoXDTI2MDIxNzAyMDAzMFowLzEtMCsGA1UEAxMk OGQ4YjE2NmQtZWRiMS00MDhmLWEyMjctNzU4YWM5MzdhYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2erqSuVYV0ixtN0/XAsYTz5NuYn9v8IpYjGj UCclGUf+WV7gcJy0px3ElEmNA21+dTS3nCrAi9fHS8GMEqwejkaE1SQprYZyEE1G zWWYd2Ia7M2RWpBwinecwERarO+mLTciHKKrcSyVGjra9Q5pkOWQmBmCV9iEByyb A940BA3x+hGr3VQO9dOC3qK7dTMfYaiWbTdpevxAe4/INt1J3aiKcTg2p7lPLTco uzYraZgwtmmVIIJ4CG5Zao9T70Jub4Yxy6vWvHuCOIUT0hgZQLf7TglDdguGoqH8 kj/kGX+gnLP4JE321jY9uraManaSMuK82bbwsIy/dj9Pmll4FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR3KrpNYmvDBdzOvSHURFOm/EFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGI3ZDc2NmItNTFiOS0z MmE2LWFhZTEtMDhlNzQyNzEzMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuQtBYDpjXfMUt/nEfT3fdBViJmdGJJsdcaC+wNVkES4q7JL3vfzLoN zH8ZItFxBH0aUdsWjtD/MyvlAQFJ679ijn0oKooqYZzSATH4L7i9y6WLJsSrgsHL +A8WFHAWij0QlMJmtPDF4VY5iW91+WZ4ByoDyUSSVcNfgJwsNGoyCp0nagpT6K9M /Pg+11ya4Ujr07wTxKoTIm+VCasZRoTlJM80VY41QyB6P39fHNtTK6k8sTPuCz8J 7VyY6/Zy1m5FbpI7t/0Ja7t61snT9RaANyfcc+a2XIQ3QrOXkmY7vqiHqnaJs6K/ JFCKZRjw/Knm/TI7xdEAPRkCDsptH8k= -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:34 2025 by rpki-client