This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a42322e9-baf9-32b8-a667-d841ad9ba29b.roa
File: a42322e9-baf9-32b8-a667-d841ad9ba29b.roa (raw, json)
Hash identifier: dCidkpe+0GhCmEhFuf+sgSs4+KIDf8c9sRpaDuxuAHo=
Subject key identifier: D9:D8:70:82:92:1F:E9:46:69:91:F9:5F:F9:C9:5C:60:E5:2E:DC:20
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C8476E1B3B57306FD876522E0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a42322e9-baf9-32b8-a667-d841ad9ba29b.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 8069
IP address blocks: 20.153.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:e1:b3:b5:73:06:fd:87:65:22:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=e669cab2-61b7-4834-8744-1142af91efb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:a6:27:bd:f8:83:6e:e1:0e:c7:91:04:0c:
8d:dd:fe:53:78:43:1e:85:c1:b9:d4:19:46:7c:9a:
66:4e:3b:ce:83:ef:57:d7:23:49:3c:ee:6b:f8:1d:
bd:5e:41:c1:bb:4f:8a:68:d4:27:7e:57:ae:e5:91:
dc:45:65:19:51:8a:54:97:64:a2:84:a9:4c:26:b4:
21:79:a3:4d:6d:fc:b7:86:cd:fd:a4:73:3e:e0:1c:
5e:3f:21:5b:6b:aa:14:6e:49:d0:e8:9a:19:1a:cc:
07:b9:f3:89:81:2e:8b:71:2d:09:d3:54:16:2c:51:
fc:66:b4:57:33:2a:85:cc:57:42:47:9b:e9:9a:83:
47:5e:a8:47:c6:90:11:0f:da:44:2d:b1:ca:b7:74:
40:8f:14:82:f8:73:50:01:26:07:e3:fb:6e:2a:33:
7e:d6:54:75:4d:3b:53:76:bf:5e:b5:c2:2b:81:f6:
95:18:78:d7:9f:f5:59:99:75:9a:32:10:e0:be:8d:
00:d5:64:cc:29:3f:97:e6:3e:bf:dc:b5:1c:a7:3e:
b0:81:25:e1:c5:3f:f5:4a:f1:0b:0a:ba:46:2c:92:
b0:34:6a:16:7a:39:26:e2:bf:8f:2f:e3:90:61:37:
db:c9:61:a2:8a:4d:9a:13:1c:dd:5d:27:ed:18:a0:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D8:70:82:92:1F:E9:46:69:91:F9:5F:F9:C9:5C:60:E5:2E:DC:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a42322e9-baf9-32b8-a667-d841ad9ba29b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:73:e1:19:bd:96:3b:21:dd:cf:65:58:fa:45:da:c6:d7:35:
25:69:de:e6:97:d4:33:85:fc:2f:b1:02:63:78:74:3f:a5:02:
f9:f9:58:a0:85:49:b2:7e:63:39:5e:4b:4a:2b:87:41:dc:bb:
4a:dd:9c:c0:21:e4:fc:21:26:06:2e:fe:4f:7f:6e:95:dd:d6:
9d:e9:1a:36:b8:92:a1:eb:2a:04:84:c2:7c:40:fa:9e:10:a4:
72:39:4e:f3:69:52:ee:dc:e8:39:c3:a0:51:0c:f3:59:ed:33:
9e:c1:29:f3:f9:4b:58:10:2a:5a:07:b7:bc:c8:40:31:c7:89:
0c:9e:60:2d:2f:46:6f:09:df:56:37:0f:fa:6a:a2:4e:9f:11:
75:74:97:42:61:a3:38:e6:a1:b6:bb:45:39:c8:40:91:8f:71:
da:19:f2:75:8d:e6:f7:95:61:86:aa:e9:3e:67:a2:d0:83:23:
fd:ce:ea:c6:37:9c:27:0b:c5:8e:ca:de:d7:f0:3f:78:4b:81:
7b:9a:2d:9e:48:cc:a5:23:09:af:bd:79:ff:56:48:53:17:f0:
12:37:cb:1e:08:9b:0f:da:1b:14:8f:30:96:a6:37:a4:59:43:
05:93:7d:15:47:e9:18:fb:ac:4a:e3:f9:c2:dd:60:3d:11:3e:
7e:6b:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 00:59:24 2026 by rpki-client