This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa
File: 4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa (raw, json)
Hash identifier: 4YAXxY3MU+cn6c49tM8n+FW0rQ1NjzKGlCkjrBKU6gY=
Subject key identifier: B3:7A:F6:0B:CF:F8:DD:EC:E0:8B:70:52:3D:90:4E:1F:2B:92:13:1B
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C8476BC49532BBD5F15CB85F0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 8069
IP address blocks: 20.153.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:bc:49:53:2b:bd:5f:15:cb:85:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=6917e695-b21f-4592-8c8b-381de2177acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:60:88:94:1f:af:13:ef:c3:26:d0:4e:e4:8e:
a2:77:50:98:eb:34:1b:3a:b0:4e:33:79:f7:09:0f:
2f:eb:3e:be:d7:4c:71:8c:d8:b1:3e:7d:cd:45:7f:
e5:01:e6:0b:61:04:b1:9c:7e:c9:5b:18:76:0b:ab:
7b:12:0f:23:e2:ad:7e:e6:38:52:68:fc:41:92:39:
64:19:af:cb:fd:56:d5:37:0a:81:38:cc:8e:fc:0f:
b9:8a:42:2e:73:34:e3:c5:d3:c2:54:b4:ef:1f:47:
91:0c:12:ed:ae:2b:63:bc:78:55:33:4a:29:34:78:
6e:ab:c7:52:86:51:84:56:f0:97:65:8f:fc:7d:4d:
2a:62:0a:55:03:95:e5:73:9b:a9:cb:f8:33:c8:95:
a0:3d:2a:95:4b:04:4a:66:6b:66:38:c8:00:3c:97:
7d:9d:4e:d1:ca:59:d1:f4:13:f4:08:0a:ac:1c:75:
61:57:7d:a1:cf:4f:1f:2f:94:9c:2b:65:a4:36:52:
63:08:94:c5:7a:60:74:3a:02:91:cc:b7:28:f3:b9:
77:4a:9e:5e:58:e8:2c:b7:2a:ef:46:c6:f1:4a:32:
76:46:05:ca:01:8a:20:f6:49:d9:58:c4:f9:01:dc:
6b:ac:49:e9:a1:56:2f:00:a4:09:b0:2b:36:1c:d4:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7A:F6:0B:CF:F8:DD:EC:E0:8B:70:52:3D:90:4E:1F:2B:92:13:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e0bd01d-65c2-33cc-9974-f5fbd98fc2d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:7e:00:fe:23:8e:ed:6a:33:00:a6:4a:fd:50:39:a8:5b:0d:
3c:ae:ec:61:77:64:28:6b:09:32:3d:38:7b:1f:41:d1:5b:30:
2b:9c:44:34:b2:f8:88:2d:d2:a8:5a:be:41:5c:18:12:60:67:
11:44:14:66:69:7c:95:b1:f6:76:19:b3:e1:d3:f6:10:20:f1:
8b:95:7a:b8:20:cd:9b:84:09:0e:2b:2f:d0:10:dd:02:16:86:
3c:81:46:08:af:20:6d:3a:98:32:5e:60:4e:e4:a7:e9:86:e8:
d4:9c:95:6f:c9:11:2b:7a:2e:c9:5a:e5:18:04:bf:7f:bc:de:
23:a4:87:d9:42:d8:7c:9f:f4:95:ca:60:69:79:86:92:b5:9a:
54:fe:bd:0f:31:5e:05:91:63:b7:c8:52:66:08:8c:68:fb:f1:
9f:5c:c6:5a:06:34:37:cb:8a:52:b2:62:cd:e9:62:2d:84:fe:
f8:e9:10:99:07:31:a3:14:e9:c2:a3:32:ca:80:91:17:68:b6:
da:92:17:a0:21:7f:8f:07:d3:ef:bd:6f:37:71:55:33:10:af:
24:ba:20:58:a7:9d:a4:58:68:92:cc:65:ed:8c:4e:cc:e8:cd:
41:5d:f2:53:49:86:f8:f5:7c:66:f2:90:01:a3:6a:f0:73:4a:
77:fe:ad:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 00:56:11 2026 by rpki-client