This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa
File: 32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa (raw, json)
Hash identifier: 8m7/UB2f+OVuyhCSXyXXXyjXZ8Sifz2o8WN57ZzI0vg=
Subject key identifier: A2:63:E6:29:E9:9B:62:3C:03:CE:CB:01:B6:78:9F:17:C7:22:FE:54
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C8476B7C619F30A03C9E19920
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 8069
IP address blocks: 20.153.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:b7:c6:19:f3:0a:03:c9:e1:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=59e9c5ff-13d5-4663-a63a-6dee68c8be46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:0c:c4:c4:0b:3d:28:19:ee:29:63:33:07:
15:e6:b4:6e:4b:80:fc:f4:ca:68:1f:a1:9b:d3:9a:
d4:ac:6d:c3:b4:f3:58:4f:15:46:67:cf:04:69:a2:
e6:40:78:e2:05:0e:6f:6e:c7:6d:e9:83:8e:12:c7:
21:37:80:03:5d:67:91:f2:f1:03:b1:1e:f5:b8:bd:
b7:09:8b:e7:ba:f7:48:52:ce:59:e2:0b:63:06:b2:
7b:3c:7a:03:1c:bb:0f:c0:2a:4d:00:fa:2c:89:8e:
b0:24:88:05:8c:3f:d7:2d:c6:c2:38:96:02:3a:1e:
4b:9f:7b:35:3b:ef:24:b3:37:4e:73:ee:e3:02:53:
0a:8b:9f:23:fa:3e:d6:1e:aa:ea:f5:e5:1d:e8:a5:
3c:97:07:25:b7:8d:7e:ca:42:83:1b:4e:4c:ee:64:
d0:7d:bf:df:5b:f9:43:48:3b:6f:0a:de:58:0e:30:
38:1e:0d:cf:d4:e3:67:37:40:8e:19:33:e3:03:16:
3f:df:21:f6:69:e7:74:16:67:87:ea:8f:06:8c:b3:
84:34:29:58:43:67:09:15:78:aa:97:a7:91:af:d0:
f3:ec:85:2b:ce:7f:5f:10:60:ee:4e:f1:f5:ed:15:
11:6e:55:94:08:0c:b9:12:8a:3d:1e:c8:94:b0:1a:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:63:E6:29:E9:9B:62:3C:03:CE:CB:01:B6:78:9F:17:C7:22:FE:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32f19b1d-0a2b-358c-b6fd-0d0c78b82b13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:4b:b0:ca:76:59:1c:ef:e5:a5:a1:d3:d6:64:37:d0:35:0f:
e5:21:98:bb:51:df:03:de:89:ed:4a:3f:bb:d0:43:67:21:09:
ff:cf:ef:ed:13:75:67:74:cf:83:6d:1b:57:3f:7e:0a:77:59:
94:fd:fb:86:e4:91:a9:9f:9b:e5:4b:89:eb:d0:5f:14:17:a7:
e2:74:a0:19:1f:1e:30:ca:96:15:73:90:3c:1d:e4:34:bb:e6:
e9:57:03:03:7f:fd:10:c3:6c:c9:6c:56:ad:6b:a2:d8:59:a6:
c6:e0:83:90:15:a5:52:92:56:bc:62:58:e4:0c:f5:b7:ed:48:
46:ff:7f:35:28:cb:60:f4:fb:3e:dc:25:ab:5f:d8:ff:17:6c:
85:ec:40:5c:b8:ae:8f:5a:03:19:c0:65:dd:67:d5:df:0f:42:
39:34:ca:03:c5:7c:bb:be:b6:1c:54:30:81:48:70:8f:42:48:
c5:1d:22:46:d6:6f:9c:2a:17:16:45:13:3a:10:f1:a8:cc:b1:
3e:8c:ca:32:37:bb:d4:00:36:f2:d4:03:b2:f4:9a:66:b5:d6:
71:db:79:ab:79:ea:3b:3a:fc:54:41:f5:67:94:76:7f:b1:46:
e3:b6:2e:52:89:21:9d:7b:a8:ae:a9:8d:3d:21:ba:c2:5e:65:
bf:92:67:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 00:57:13 2026 by rpki-client