This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa
File: 22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa (raw, json)
Hash identifier: kMNhxl69XlxSrbu6TYFuO/ELk2A4113UnW0WhTRE83c=
Subject key identifier: 13:E4:03:4B:BD:16:F9:76:45:96:4C:B5:F0:97:B1:0A:42:A8:38:F0
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C8046EE87276A2E70D1E643C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa
Signing time: Mon 12 Jan 2026 14:00:40 +0000
ROA not before: Mon 12 Jan 2026 14:00:40 +0000
ROA not after: Sun 12 Apr 2026 13:00:40 +0000
asID: 8069
IP address blocks: 20.157.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:80:46:ee:87:27:6a:2e:70:d1:e6:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 12 14:00:40 2026 GMT
Not After : Apr 12 13:00:40 2026 GMT
Subject: CN=3c7630a4-4ac6-4e77-8a1d-84df6076c15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:38:ae:1e:de:96:3d:bb:09:5c:fe:0f:90:
64:91:8b:d7:05:b7:53:cc:e0:5c:80:2d:eb:dd:58:
e6:b3:b9:87:6e:14:2e:ce:84:e9:5e:3c:52:7c:98:
50:28:6d:d5:2c:c9:a6:46:f9:3b:fc:a5:48:d2:cb:
45:b0:85:b3:4a:bb:4c:d2:9d:98:ec:47:cf:d3:dc:
a3:8f:d9:a4:bb:89:13:97:80:6c:0b:23:7f:c7:b8:
0d:f3:5e:18:ad:88:d5:92:ea:3e:03:5f:45:c4:a7:
88:2f:75:cf:db:17:c6:9a:73:97:01:ab:e2:bd:fb:
9b:00:28:2c:a4:f0:26:98:08:89:59:46:71:15:43:
e8:13:28:32:bb:68:45:45:6d:a1:fe:55:bb:f4:cf:
c9:86:7b:0d:1c:50:ee:15:ed:40:89:60:3b:9a:5c:
65:62:76:60:af:fd:d1:7c:d7:47:cf:04:7b:ae:f6:
fb:35:03:0a:ee:9d:29:43:51:a7:10:bc:98:f3:40:
af:61:ad:a3:00:93:ab:fc:6a:47:74:30:fd:ae:e3:
ee:7b:d6:5c:ca:89:5a:ac:b7:05:e1:9d:93:61:2f:
5b:72:42:86:bf:12:a6:4d:1a:84:9e:d5:dc:ce:9d:
c1:9e:70:83:7d:90:cf:2d:07:78:a8:b8:26:8c:24:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E4:03:4B:BD:16:F9:76:45:96:4C:B5:F0:97:B1:0A:42:A8:38:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/22badc46-7f2c-3330-9dcd-30f3a1bd5152.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:bf:8c:b3:77:20:d9:ff:23:21:2b:f1:0e:51:ae:93:72:75:
1d:81:44:05:91:2b:84:53:de:86:44:70:08:5e:d1:5a:cc:11:
ea:fd:c0:b5:b5:e5:89:2d:ed:5b:a8:42:b4:47:a9:60:1b:6c:
69:b8:6b:b3:78:a9:a8:0d:6f:b1:f0:af:3c:8d:1a:6a:18:44:
6f:c0:d8:0f:21:64:31:fa:ab:24:06:a2:78:59:0f:dc:52:4d:
80:7a:24:76:2a:1b:40:e2:87:ff:99:53:a3:4c:43:53:11:28:
48:2f:20:c4:0a:c5:6a:e6:1e:3e:c9:3b:2e:7a:13:67:6d:02:
5c:ab:c3:3a:cb:ee:9b:dc:d2:d0:02:d5:e1:4c:5b:da:27:24:
23:99:11:19:0a:76:aa:e2:f7:5c:39:e0:23:00:11:90:fa:09:
08:2a:dc:3d:ea:38:c5:ae:08:23:46:3a:6b:04:67:80:22:50:
b3:cd:71:93:72:b4:6a:a7:91:39:92:3e:10:41:dd:89:bf:c8:
13:c0:a4:2c:d9:c6:2a:83:66:4e:0d:3b:b7:87:1a:5d:e0:66:
4b:cd:da:e4:81:97:e0:4a:2f:8b:61:22:4a:f4:2d:68:9c:97:
13:23:e0:c8:76:9a:50:d1:c8:2c:84:af:6e:18:a6:2b:62:74:
c6:c9:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 00:56:38 2026 by rpki-client