This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a23b9368-29fe-3dbb-9648-b983c9edf365.roa
File: a23b9368-29fe-3dbb-9648-b983c9edf365.roa (raw, json)
Hash identifier: 1UauZgV26NEg05wr2nFkKu0VAHmyPX/uwA9JyrOEOaM=
Subject key identifier: 5D:9B:E1:86:9E:C7:AD:53:F6:44:12:B2:96:41:AE:6B:FB:4E:F7:FF
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C3381463078CC1C30223D6680
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a23b9368-29fe-3dbb-9648-b983c9edf365.roa
Signing time: Tue 16 Dec 2025 02:00:31 +0000
ROA not before: Tue 16 Dec 2025 02:00:31 +0000
ROA not after: Mon 16 Mar 2026 01:00:31 +0000
asID: 8069
IP address blocks: 20.157.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:33:81:46:30:78:cc:1c:30:22:3d:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 16 02:00:31 2025 GMT
Not After : Mar 16 01:00:31 2026 GMT
Subject: CN=6b15f52e-e4a1-4e73-8652-4e22f1a70d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:e6:cc:fb:47:e6:f9:19:e6:ac:48:b6:9f:
5e:17:66:87:a2:50:d2:0e:a6:88:09:fb:d0:11:e1:
39:77:16:64:06:2a:49:06:ed:ff:78:a8:d6:ef:9c:
aa:59:38:a1:6a:f3:9e:31:60:56:06:08:5b:5f:c5:
cd:68:77:91:1d:f2:42:aa:d1:f5:a1:9b:6b:86:df:
bb:88:c9:87:27:c5:17:6c:b7:79:9f:22:43:cf:6c:
36:39:f3:49:1d:4f:4e:35:91:ab:5a:8a:7a:0b:4e:
af:f2:4d:4b:ff:9e:67:b5:8e:3d:4c:48:20:dd:c6:
00:0e:54:7b:8d:e1:e5:a5:0d:a1:ca:f2:59:8e:c2:
ea:b4:da:a5:de:37:71:80:cb:d1:89:2e:68:c5:60:
11:50:5a:f6:eb:81:c2:24:1e:d7:2c:e1:5f:2f:7b:
b2:d6:a6:83:d5:ba:e3:5e:83:07:17:98:e3:93:5d:
13:11:05:57:7a:0e:fb:58:44:e3:54:df:44:85:8f:
09:c6:23:7c:a6:3d:36:80:4a:5b:13:54:d0:60:3b:
c3:2b:c4:4e:b6:d4:88:a3:94:57:61:ba:a8:38:01:
ec:4a:a1:14:34:2c:16:ca:d3:b3:7b:01:5d:36:bf:
a9:01:d4:16:67:6b:d9:e5:74:6b:18:d8:53:92:45:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:E1:86:9E:C7:AD:53:F6:44:12:B2:96:41:AE:6B:FB:4E:F7:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a23b9368-29fe-3dbb-9648-b983c9edf365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:6a:bf:6b:c1:b8:5a:03:b3:b9:5a:91:9f:38:52:2a:4d:60:
fc:99:87:84:b3:cd:2a:2b:f3:99:8b:20:54:44:67:e1:17:95:
b9:c3:12:84:f6:43:1b:be:5e:53:77:06:59:b0:f9:15:11:68:
c6:89:d6:8f:9d:bb:2b:ca:f7:a2:16:2f:68:89:a4:41:d3:f6:
c8:ca:5e:e3:cb:f9:24:13:35:39:1e:10:c2:c9:f4:a4:7e:a0:
0e:87:4a:db:3e:a0:eb:e9:f2:44:8e:25:1a:d1:c0:7b:e0:28:
48:86:88:70:cf:f8:c1:bb:96:94:7e:6d:f8:7c:99:55:93:23:
57:82:5f:f9:a4:ba:be:2b:35:e5:e8:77:88:e7:d9:0c:63:2f:
13:3a:75:9b:84:79:07:11:67:94:e0:f4:8a:77:c3:26:18:39:
9d:a1:d4:8b:88:3c:55:c6:61:03:8e:bc:b9:35:ed:fd:fb:e6:
f9:f3:35:25:b4:d7:64:5b:b2:80:08:20:e8:5a:eb:72:4e:b3:
b2:75:68:f4:a0:4c:6b:f4:b2:18:02:0d:12:3e:a8:e1:ab:df:
cd:50:2b:57:13:25:bf:b6:8a:8b:61:0a:2b:f6:a2:19:7f:35:
de:e5:6d:91:31:b1:de:50:eb:1f:66:bf:8a:e3:e5:c7:fb:e3:
04:c0:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 00:59:31 2026 by rpki-client