This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03035c0d-43ad-3251-9eae-f21c2270e539.roa
File: 03035c0d-43ad-3251-9eae-f21c2270e539.roa (raw, json)
Hash identifier: 0I4LwFj7gM6miKvOMZpLB9RzcrMTUwTzOTsux2i5z1w=
Subject key identifier: 5D:BD:F3:8D:D3:88:5C:15:59:07:4A:C0:6F:01:7B:F9:F1:73:8E:C7
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C8477056AD41C4063173D0F80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03035c0d-43ad-3251-9eae-f21c2270e539.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 8069
IP address blocks: 20.153.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:77:05:6a:d4:1c:40:63:17:3d:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=be94accb-0b4a-4f2c-946f-1e0923a47d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:1d:07:e2:7f:03:53:62:18:ad:cf:fe:6f:
5a:b0:b5:84:e4:7d:c6:ab:9c:78:98:3c:87:78:ae:
eb:00:cd:94:eb:a8:7c:c0:c4:aa:12:d7:d6:64:0c:
94:40:d1:17:83:b0:c0:c8:8a:40:51:76:db:af:26:
bb:13:3c:22:54:54:6b:66:cb:b6:80:e8:b2:d9:83:
39:42:2a:fc:15:38:a3:cb:f0:2b:ad:6f:27:16:fc:
8e:b7:80:58:c5:1d:65:80:c2:f1:ab:b4:fb:f1:ff:
78:53:ea:aa:60:50:9a:2f:a7:cc:88:88:d4:48:a5:
64:4d:32:f5:9d:0b:d4:e2:54:46:55:43:e2:31:7d:
33:a2:f6:20:51:52:c5:92:12:74:cc:c1:8b:6c:8a:
af:88:f1:12:54:81:5c:14:71:b6:7e:53:a7:6d:ec:
4d:c8:a1:9e:ea:63:98:89:c0:ce:b7:f8:32:67:89:
e4:1f:a5:37:14:65:3b:70:eb:af:13:35:7e:09:d8:
f4:45:93:8b:b1:37:94:83:89:99:62:f0:84:3a:ca:
97:89:75:f4:d3:73:94:98:f5:18:25:d7:e5:45:bf:
f6:7c:ff:74:bf:ec:c6:97:32:a9:39:26:90:1e:ec:
26:dd:6a:b1:a1:73:bc:63:74:6f:ab:9f:4f:60:70:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:F3:8D:D3:88:5C:15:59:07:4A:C0:6F:01:7B:F9:F1:73:8E:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/03035c0d-43ad-3251-9eae-f21c2270e539.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:0d:76:6d:51:fe:75:e9:9a:e1:b2:a8:c6:4f:ba:d6:71:0e:
28:21:6b:1c:f3:4e:33:10:a5:e1:de:dc:9a:1c:47:86:d1:2c:
e7:d7:75:8e:aa:15:be:e1:b0:ee:dd:01:a1:98:3c:06:a1:71:
11:44:cc:a0:0e:e0:50:23:23:a6:34:a2:66:7b:4b:87:68:0e:
b6:d8:0c:04:b6:f3:7d:00:3b:f7:f2:fa:b8:86:46:c9:03:ce:
0b:ec:53:99:08:ba:11:73:6b:4d:c8:b2:44:bd:81:49:98:8e:
8a:3b:a4:07:e0:ab:bb:e3:c7:84:f2:07:38:4a:81:37:03:3f:
b8:8a:8e:0a:3f:93:d7:29:ca:e4:f9:e3:6d:fb:af:ef:1d:9f:
15:96:c1:80:ed:11:6b:a5:fd:31:f6:45:c0:63:87:11:86:a9:
d9:62:e3:6d:cd:1f:23:93:3f:f8:0c:41:7b:2b:71:2e:0f:d5:
13:fc:9b:fd:eb:c8:8b:18:00:88:57:e1:b6:e7:51:d6:66:aa:
80:00:91:1f:0d:38:71:3c:ee:38:e4:6c:9b:9e:75:5a:51:e3:
79:40:fd:96:10:12:3e:b2:8b:0e:00:90:9f:49:11:e6:36:fb:
4f:42:53:fe:b7:3b:8e:1d:3d:35:12:69:e0:83:09:cd:4c:17:
59:d2:10:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdwVq1BxAYxc9D4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk
YmU5NGFjY2ItMGI0YS00ZjJjLTk0NmYtMWUwOTIzYTQ3ZDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k4dB+J/A1NiGK3P/m9asLWE5H3Gq5x4mDyH
eK7rAM2U66h8wMSqEtfWZAyUQNEXg7DAyIpAUXbbrya7EzwiVFRrZsu2gOiy2YM5
Qir8FTijy/ArrW8nFvyOt4BYxR1lgMLxq7T78f94U+qqYFCaL6fMiIjUSKVkTTL1
nQvU4lRGVUPiMX0zovYgUVLFkhJ0zMGLbIqviPESVIFcFHG2flOnbexNyKGe6mOY
icDOt/gyZ4nkH6U3FGU7cOuvEzV+Cdj0RZOLsTeUg4mZYvCEOsqXiXX003OUmPUY
JdflRb/2fP90v+zGlzKpOSaQHuwm3WqxoXO8Y3Rvq59PYHAGkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF29843TiFwVWQdKwG8Be/nxc47HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMDMwMzVjMGQtNDNhZC0z
MjUxLTllYWUtZjIxYzIyNzBlNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJm/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIINdm1R/nXpmuGyqMZPutZxDighaxzzTjMQpeHe3JocR4bRLOfXdY6q
Fb7hsO7dAaGYPAahcRFEzKAO4FAjI6Y0omZ7S4doDrbYDAS2830AO/fy+riGRskD
zgvsU5kIuhFza03IskS9gUmYjoo7pAfgq7vjx4TyBzhKgTcDP7iKjgo/k9cpyuT5
4237r+8dnxWWwYDtEWul/TH2RcBjhxGGqdli423NHyOTP/gMQXsrcS4P1RP8m/3r
yIsYAIhX4bbnUdZmqoAAkR8NOHE87jjkbJuedVpR43lA/ZYQEj6yiw4AkJ9JEeY2
+09CU/63O44dPTUSaeCDCc1MF1nSEFE=
-----END CERTIFICATE-----
Generated at Wed Jan 21 01:01:30 2026 by rpki-client