This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa
File: 4e67d494-acab-3047-896e-83e082ee4263.roa (raw, json)
Hash identifier: JYP+PZbLb6zwr/xt6C1B245/apLBUFSrUUofr5KnBL0=
Subject key identifier: 41:1B:68:F9:3B:7A:BF:53:E1:01:D9:3F:92:58:1C:07:D7:10:91:43
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C7251C85F400112D3DB42F800
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa
Signing time: Wed 07 Jan 2026 14:00:39 +0000
ROA not before: Wed 07 Jan 2026 14:00:39 +0000
ROA not after: Tue 07 Apr 2026 13:00:39 +0000
asID: 8069
IP address blocks: 20.157.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:72:51:c8:5f:40:01:12:d3:db:42:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 7 14:00:39 2026 GMT
Not After : Apr 7 13:00:39 2026 GMT
Subject: CN=c2f2710b-bde7-4d4f-8541-259d0757205c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:1b:ba:a3:d7:46:1d:c3:50:53:a9:72:c6:
bb:68:2e:f6:28:8d:23:42:e9:b2:bb:44:5a:f4:60:
c7:1e:b9:a0:da:1a:85:3a:03:36:58:f9:06:0c:72:
65:7f:24:f6:d2:9c:0c:c7:d8:e7:b8:66:6b:9e:9e:
19:96:cb:6c:9b:d2:47:e2:ed:8a:c7:33:10:8f:91:
d1:56:66:fd:c4:69:fb:85:cb:99:42:20:2a:cf:e5:
f5:34:74:6b:b1:b7:c4:be:8b:1e:10:6f:dd:f5:a9:
76:e2:c0:33:12:df:7c:3a:55:e8:93:73:7b:c1:b4:
d6:0f:56:1c:10:d2:b4:7a:a1:9d:4c:a0:9c:0f:95:
d7:d6:92:4c:12:da:eb:f2:82:f3:3b:b3:6d:c2:49:
ec:05:c4:7e:b9:82:c9:16:9f:c8:ed:59:61:e3:ba:
31:b8:87:04:5c:07:59:cb:a5:e4:08:8b:ae:80:c6:
52:3f:ae:00:4a:9d:ab:a3:d1:30:1b:dd:d9:f5:a6:
90:1c:1a:fc:29:0b:ae:c7:24:a2:8d:cd:c9:92:57:
b0:e6:51:41:21:18:aa:40:aa:84:3d:e6:93:6e:84:
7d:9a:b9:29:84:43:d0:8d:e1:9b:9a:ee:8f:87:e1:
87:60:1c:1a:8b:13:cc:02:59:5f:a6:60:51:b9:af:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1B:68:F9:3B:7A:BF:53:E1:01:D9:3F:92:58:1C:07:D7:10:91:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e67d494-acab-3047-896e-83e082ee4263.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:97:eb:e5:b5:f7:04:32:c5:45:49:53:0e:5f:5a:35:b1:67:
03:3b:85:9b:32:cd:eb:97:c7:1d:05:4d:a1:f7:fb:aa:c7:91:
4b:ed:4f:2e:fb:5f:36:b2:64:ab:7b:a6:2c:c3:68:6c:58:e8:
e8:85:0e:8c:ab:8d:87:21:2b:93:c2:dc:dd:dd:a3:66:fa:b9:
f4:ca:c1:f9:7c:f8:81:49:e2:8e:23:05:3f:59:97:71:8b:89:
cb:94:d1:f7:d1:53:da:2f:e5:ed:2d:c5:91:86:01:6c:72:05:
05:45:ed:2e:4e:d2:27:8b:0c:d0:23:c7:d0:52:cf:aa:78:c2:
68:ea:cf:de:d5:f9:09:d1:44:3c:9d:97:3f:90:6b:f1:26:78:
f6:3f:59:99:05:d6:76:66:82:37:1b:5f:6e:67:06:ed:51:9a:
42:0e:ed:e2:8f:a5:a7:6c:51:fa:f6:d6:2f:bb:0f:c0:10:33:
5e:c7:ab:4f:3f:74:b4:1a:04:02:dd:98:54:5d:43:7a:36:37:
4d:51:27:87:15:c1:c3:7a:0b:ac:46:c9:db:c5:a8:93:8b:34:
d7:fe:c7:8e:76:e0:87:a7:28:dd:46:c3:27:a2:89:9a:d9:31:
bf:a3:9e:05:c6:af:10:9a:93:0b:24:c7:e2:eb:88:e5:e2:5a:
fe:54:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 00:55:54 2026 by rpki-client