This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa
File: 65df7823-ba47-3444-b05e-486205632b0f.roa (raw, json)
Hash identifier: QuF9XDcf+0oEPOOEQ9qVPmg2IAMDpUfTCtaQYjIXnws=
Subject key identifier: BD:57:D0:0B:CC:86:08:80:2F:09:6C:EA:E8:7C:F0:3E:C1:86:16:23
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584BD7605D2FF424D39BF9E12000
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa
Signing time: Thu 13 Nov 2025 02:00:31 +0000
ROA not before: Thu 13 Nov 2025 02:00:31 +0000
ROA not after: Wed 11 Feb 2026 02:00:31 +0000
asID: 8069
IP address blocks: 20.157.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d7:60:5d:2f:f4:24:d3:9b:f9:e1:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 13 02:00:31 2025 GMT
Not After : Feb 11 02:00:31 2026 GMT
Subject: CN=bd3f08ff-7e66-41b7-86b4-5e63deff9595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:8e:9d:df:87:99:2e:32:51:4c:47:a9:16:
e8:6d:de:3f:eb:7f:a7:91:df:a3:5b:2a:4f:6c:24:
c1:40:59:08:71:84:ab:c6:d7:35:a9:17:be:ef:bb:
75:53:87:5a:1b:44:5f:1d:4c:94:23:e1:c2:8a:f1:
06:aa:3a:aa:a4:ed:5e:50:ff:8a:d1:2a:b7:31:f9:
6a:5b:df:5c:ec:27:f4:09:96:bb:9d:6c:7c:40:26:
54:ef:70:7b:be:9b:1b:65:d6:75:34:98:16:5e:e8:
23:7f:9c:ee:5b:ff:46:a2:97:ac:13:2b:18:e2:55:
42:a1:ac:d6:59:0c:0f:73:ec:05:5c:39:24:63:91:
14:81:0c:81:aa:0b:68:b3:d0:b6:f7:ba:eb:32:57:
fe:6e:10:e9:fd:8e:eb:c0:33:b5:6c:bf:ab:d0:57:
66:ad:48:cb:7d:ea:47:45:0f:e4:21:e6:d4:e2:c1:
37:42:e4:d8:03:0c:80:ae:bb:ea:93:1e:ba:5e:3a:
f7:e3:1f:bf:d3:eb:00:6f:24:b3:cf:8d:66:86:af:
2c:c7:53:23:53:e8:d2:96:ea:79:9b:e4:3b:ff:eb:
58:3a:c1:1f:54:67:b6:fc:63:15:27:b8:31:90:ef:
0c:4a:38:5f:4a:7c:07:3c:15:79:a9:ec:32:0c:82:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:57:D0:0B:CC:86:08:80:2F:09:6C:EA:E8:7C:F0:3E:C1:86:16:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/65df7823-ba47-3444-b05e-486205632b0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:c3:16:8b:ea:57:25:59:d1:d4:46:d2:80:1c:82:6a:55:a3:
62:ec:2d:b1:73:57:fa:25:1b:cb:15:14:dd:48:a8:68:50:ab:
ad:24:c6:7a:9d:07:12:c0:01:7d:93:6d:ea:9b:1b:b1:bb:27:
13:b8:74:49:df:df:d6:1e:88:75:7e:77:ca:d1:c6:1e:d3:5c:
c7:9a:34:87:a0:c7:37:bf:91:c6:0a:3f:90:a8:8f:3e:20:85:
83:11:e5:fe:3e:ac:f0:0e:ad:cd:40:50:7e:7f:da:a4:df:f9:
bf:f5:23:72:5c:6e:87:eb:04:0b:9e:43:28:de:db:66:84:4b:
28:10:e3:b5:81:fa:1e:21:93:a4:b8:07:7a:7c:9d:18:77:8f:
aa:ab:2f:1a:cd:d6:17:b0:a3:dd:b1:21:9e:6f:e6:63:d7:25:
dc:94:72:bd:6c:c3:1d:18:a8:83:d6:3d:77:3b:dd:41:38:45:
1b:ab:63:ed:c7:29:e4:67:4e:ff:83:d4:17:50:ee:23:9c:df:
df:da:db:f7:01:03:aa:7a:bd:2b:13:ae:c6:9c:93:aa:71:73:
ac:87:4b:a3:e9:3c:e2:75:61:21:a8:20:1f:73:ce:75:0d:87:
7a:53:1c:a3:e0:25:df:bc:92:06:95:49:fa:1a:67:f4:b1:0a:
da:db:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:04:07 2025 by rpki-client