This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa
File: 433f4626-f5a4-3f5b-8402-ad0e6744411a.roa (raw, json)
Hash identifier: 43/qMXaEkYpc9fttBtPXqbDusqI2k+rcPv9ZzYs4yIU=
Subject key identifier: B0:52:46:64:05:73:DF:AF:8B:06:1D:3E:0A:1B:D8:85:49:D7:A7:DC
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584BE555DE37A5EB00992CE5F800
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa
Signing time: Tue 18 Nov 2025 02:00:30 +0000
ROA not before: Tue 18 Nov 2025 02:00:30 +0000
ROA not after: Mon 16 Feb 2026 02:00:30 +0000
asID: 8069
IP address blocks: 20.33.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e5:55:de:37:a5:eb:00:99:2c:e5:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 18 02:00:30 2025 GMT
Not After : Feb 16 02:00:30 2026 GMT
Subject: CN=9a29ef03-4a37-4f64-8020-ca5f7da20a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:18:da:44:89:df:87:d6:96:54:48:7a:f8:
09:b0:50:d6:06:56:e1:65:23:cb:19:43:7d:a1:a0:
07:8c:f3:79:b1:d3:67:b4:a0:3e:0f:5b:4d:c1:d3:
8f:e3:69:d8:4f:54:e0:3a:58:b5:95:b3:ea:a0:6e:
ca:02:88:05:26:a7:6f:2b:36:fb:0d:6d:56:7d:28:
a3:ac:c8:64:31:b9:6e:1c:07:3d:d7:39:f4:ec:af:
56:92:2a:22:0d:76:e9:a2:92:39:40:e9:48:59:d8:
5e:4e:59:0c:7b:a7:62:ff:26:37:c0:b4:17:0e:26:
fe:68:8a:4d:5a:62:a9:7a:1e:be:0f:e3:52:d2:b3:
7a:3f:97:bd:6f:1d:df:b8:1e:3c:ae:52:6e:7d:84:
59:ad:69:d8:8f:2d:ed:a9:56:46:bb:eb:50:f1:f0:
f5:4c:ab:bb:4b:78:7d:0f:fc:62:c8:5b:3c:b9:47:
8a:07:10:4d:72:50:7e:a8:ab:5e:1a:88:ef:fb:8a:
40:1d:a4:0a:b8:51:12:47:21:3d:e8:d3:63:a5:02:
94:9a:72:de:ea:05:2b:70:9d:63:64:21:5d:b8:b9:
95:f1:fa:5f:67:cb:0d:85:ad:3c:f0:26:06:91:b6:
6f:4b:ba:41:a6:e2:69:67:9d:02:c8:aa:38:04:3c:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:52:46:64:05:73:DF:AF:8B:06:1D:3E:0A:1B:D8:85:49:D7:A7:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/433f4626-f5a4-3f5b-8402-ad0e6744411a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:46:4f:86:4a:ca:89:74:b2:be:49:14:3a:0f:f0:88:61:3e:
89:13:d6:a8:93:68:38:f1:de:07:02:42:98:fa:4c:52:2c:0f:
65:3c:d1:d1:39:e7:bd:7b:21:94:19:37:e8:c1:db:86:d0:70:
ca:ef:2b:f7:56:c2:7c:23:19:89:ca:33:0f:3b:9c:8d:1b:24:
0a:7a:1a:3e:02:1b:ab:1e:2e:02:23:d2:af:61:ad:67:4c:c7:
11:1b:88:63:93:84:fd:07:8c:45:a7:84:22:04:ee:09:54:b8:
b2:be:e1:26:25:1d:d5:c2:29:35:9f:a6:14:0f:40:3f:ba:3d:
7e:e3:5c:c7:1c:29:78:a5:65:df:bc:72:4d:b3:33:79:8d:61:
4f:d8:ed:ab:e5:1d:a6:72:f9:03:50:f5:a6:05:c5:57:54:92:
ca:b6:44:32:03:74:62:d2:37:50:d4:70:04:88:d3:66:ef:12:
a3:71:a9:eb:5f:2b:cd:99:85:f2:f4:bf:cb:09:b8:78:39:07:
a7:e6:21:48:56:bc:b4:63:d5:19:a1:cf:19:ce:68:37:50:d2:
b9:66:7b:26:84:2f:16:4f:52:b7:ad:17:9b:bb:45:2a:39:81:
4b:7e:19:4f:29:c5:e2:3a:72:d4:42:70:3a:51:73:67:32:b7:
20:d6:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:59:44 2025 by rpki-client