This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa File: dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa (raw, json) Hash identifier: vDGngY7kXpYiG8Ddkll7ZNvKvLGn7KZ7T9pZqO7Txoo= Subject key identifier: CF:0F:90:0B:C3:04:56:14:DD:27:2A:91:C1:32:D8:A3:78:5B:89:6F Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584BFD10C7CFF4452D10D8AFE830 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 8069 IP address blocks: 20.33.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:c7:cf:f4:45:2d:10:d8:af:e8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=a0016271-8cc0-4a4b-b0f6-47ac36046789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9a:d0:b0:ac:e1:f8:fa:16:2b:c8:bf:e6:3d: a0:6a:5a:1b:ef:09:03:6e:fc:4d:66:13:f3:bb:0c: 5f:6e:fe:67:04:d8:7e:eb:07:11:c3:b0:b8:99:c6: 6e:ca:0a:3e:78:26:b3:4f:6a:d5:d5:e4:d5:d2:99: 1d:b7:9f:d7:99:73:fa:c6:12:42:bd:50:f6:21:75: ba:18:9b:d1:c9:21:0e:1e:9d:45:de:db:bc:3d:ce: ef:d5:74:7d:a8:af:e2:41:d9:96:c1:00:1d:a2:e2: c9:83:ff:5e:97:94:d2:2e:69:06:72:97:e2:d1:a8: df:76:d2:ce:eb:8f:67:5b:52:09:99:3a:b4:c5:b9: c0:7c:c6:8c:5d:d2:96:e8:fe:27:bb:1f:d5:0e:dc: dc:71:de:28:70:81:20:94:49:75:fa:ff:64:4e:43: 6b:a9:0f:b1:78:91:19:da:63:54:dd:9e:57:2c:05: 94:83:f6:ff:11:5f:2a:d5:e1:2f:ad:04:26:b7:38: 11:1e:2d:1a:a5:99:11:fb:0d:7e:2c:24:cb:68:6e: 5a:83:ad:37:9c:0f:a9:69:b7:38:f7:e5:8e:6c:9e: f2:15:5a:46:c4:5f:0f:5f:8f:cc:06:b6:dc:bf:58: 81:fe:a7:1e:a4:7b:f6:31:94:4f:a9:41:88:97:59: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0F:90:0B:C3:04:56:14:DD:27:2A:91:C1:32:D8:A3:78:5B:89:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbf8d407-3c97-34a9-bd7e-e142d9f47946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bc:70:bb:83:ab:41:60:83:ec:ce:b2:8e:2a:29:ac:36:39: 68:1c:fd:73:3e:7b:3f:5f:d6:23:17:14:8e:32:58:ef:29:6a: 76:ce:7a:f3:30:0f:2c:38:e6:3d:8a:e5:36:66:74:a7:3d:c7: 61:f6:d5:d6:0e:20:9d:4b:b9:a7:0f:2d:28:2b:72:1a:09:32: b6:30:9c:03:0f:d3:fb:f9:c4:c6:2e:f3:a2:b0:df:f8:ba:71: b7:35:25:16:3b:02:09:13:00:eb:09:48:b9:d3:b6:68:5a:7d: f4:2c:42:91:42:db:ae:9f:bd:da:fe:c6:55:c2:88:c4:29:d4: 16:4c:b2:76:da:d1:96:cb:a7:17:e0:12:4e:ce:25:a0:fd:ba: 17:a2:bf:fc:d0:0f:d5:36:90:38:d9:59:5d:65:6e:9a:f1:b9: ca:cb:28:8d:22:50:e3:a1:82:86:81:a9:d3:7b:0f:bd:10:be: 34:29:14:c0:69:3f:6e:18:9a:ae:4b:05:28:9e:60:e5:b4:f7: ac:cc:6d:6e:fb:09:a0:f4:d3:81:54:46:40:b7:88:d5:87:f5: dd:44:9a:03:25:09:2d:83:35:fa:bb:29:e1:d5:f8:fa:d4:95: 22:ea:b3:c2:0a:03:34:0f:15:f0:cb:47:99:57:ae:9d:63:3c: df:ca:bb:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EMfP9EUtENiv6DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk YTAwMTYyNzEtOGNjMC00YTRiLWIwZjYtNDdhYzM2MDQ2Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJrQsKzh+PoWK8i/5j2galob7wkDbvxNZhPz uwxfbv5nBNh+6wcRw7C4mcZuygo+eCazT2rV1eTV0pkdt5/XmXP6xhJCvVD2IXW6 GJvRySEOHp1F3tu8Pc7v1XR9qK/iQdmWwQAdouLJg/9el5TSLmkGcpfi0ajfdtLO 649nW1IJmTq0xbnAfMaMXdKW6P4nux/VDtzccd4ocIEglEl1+v9kTkNrqQ+xeJEZ 2mNU3Z5XLAWUg/b/EV8q1eEvrQQmtzgRHi0apZkR+w1+LCTLaG5ag603nA+pabc4 9+WObJ7yFVpGxF8PX4/MBrbcv1iB/qcepHv2MZRPqUGIl1nMMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8PkAvDBFYU3ScqkcEy2KN4W4lvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGJmOGQ0MDctM2M5Ny0z NGE5LWJkN2UtZTE0MmQ5ZjQ3OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy8cLuDq0Fgg+zOso4qKaw2OWgc/XM+ez9f1iMXFI4yWO8panbOevMw Dyw45j2K5TZmdKc9x2H21dYOIJ1LuacPLSgrchoJMrYwnAMP0/v5xMYu86Kw3/i6 cbc1JRY7AgkTAOsJSLnTtmhaffQsQpFC266fvdr+xlXCiMQp1BZMsnba0ZbLpxfg Ek7OJaD9uheiv/zQD9U2kDjZWV1lbprxucrLKI0iUOOhgoaBqdN7D70QvjQpFMBp P24Ymq5LBSieYOW096zMbW77CaD004FURkC3iNWH9d1EmgMlCS2DNfq7KeHV+PrU lSLqs8IKAzQPFfDLR5lXrp1jPN/KuyQ= -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:38 2025 by rpki-client