This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa
File: abad3fc4-19f2-378b-b7e4-8ec84d750389.roa (raw, json)
Hash identifier: Fz78SuGqgYZpN/zUUFTz95N+dtAoQenNKiXM0kZ7JNY=
Subject key identifier: 48:72:6E:66:4E:7B:D7:D8:64:BF:F3:A1:31:AD:8C:E4:A1:97:D1:52
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C5EC7194931712BDACF9945E0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa
Signing time: Wed 31 Dec 2025 14:00:38 +0000
ROA not before: Wed 31 Dec 2025 14:00:38 +0000
ROA not after: Tue 31 Mar 2026 13:00:38 +0000
asID: 8069
IP address blocks: 20.33.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5e:c7:19:49:31:71:2b:da:cf:99:45:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 31 14:00:38 2025 GMT
Not After : Mar 31 13:00:38 2026 GMT
Subject: CN=b69409ce-282c-461c-abc7-c00aa0eabf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:fd:11:f5:07:db:e2:2f:3b:69:eb:18:de:
76:c4:b8:3e:8e:aa:a8:6a:13:09:0f:c0:ed:63:5b:
e6:db:46:cd:d2:cf:96:b7:1a:4b:2d:31:11:3e:35:
b6:84:8f:7d:6e:2e:db:d3:01:de:03:9e:f2:a6:e0:
6a:9c:1e:91:66:02:b4:bf:5c:8f:fa:b5:bd:f9:08:
ac:3f:95:89:43:e9:84:a6:02:0e:cc:b6:7a:ba:63:
d4:f2:fb:82:8b:2d:45:fd:59:52:0e:b2:98:f4:86:
ae:ee:53:0f:d5:73:d2:3e:fc:8f:79:6c:8b:f8:b0:
79:31:07:b5:5f:41:de:5d:1e:4e:fd:7d:1b:56:bf:
cf:83:9c:a9:11:55:60:12:35:33:d5:09:aa:46:1a:
b7:89:d5:d4:72:f7:c5:30:25:b9:a9:57:57:e2:e6:
10:50:fb:16:62:e1:50:85:a7:da:3c:ae:a4:44:c6:
af:9e:da:3d:b2:f6:17:1c:b4:08:11:bc:61:02:c5:
73:ed:fb:8e:ea:b1:8f:1b:b8:aa:4d:0b:55:57:a0:
e4:e2:86:7a:32:03:9b:6a:e6:dc:f0:07:3b:1e:78:
97:fc:98:b3:ef:6e:95:76:87:6c:e4:37:59:97:a6:
59:89:5b:5c:8e:59:8b:42:ea:cf:34:fe:ee:2f:30:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:72:6E:66:4E:7B:D7:D8:64:BF:F3:A1:31:AD:8C:E4:A1:97:D1:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/abad3fc4-19f2-378b-b7e4-8ec84d750389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:b6:36:0a:68:a7:a8:81:64:7b:00:b5:2a:e3:29:28:51:25:
78:1f:41:8a:a2:75:a8:b8:6f:9f:af:f9:09:05:22:18:3e:5f:
4b:43:5c:2e:61:6a:4c:37:e5:a1:fa:c0:53:0e:34:c7:cd:b9:
e8:b9:68:b6:46:d0:c6:40:7d:c9:32:e8:bc:7b:5f:5c:87:a9:
85:56:f6:59:29:46:23:c4:d5:91:aa:7d:81:e0:4e:cc:4c:95:
dd:55:6d:4f:40:fb:41:68:bf:87:7f:c7:d5:04:6b:1e:5e:98:
95:b6:6a:00:19:7c:f3:f2:80:7a:55:6e:c2:50:a1:c0:bc:c9:
2e:23:ac:b3:be:fe:ad:a2:14:d4:58:f9:2d:e3:cf:ed:89:e2:
56:a4:c9:a3:5d:2b:c3:54:85:ae:42:63:31:36:96:a6:66:11:
d4:a5:91:a8:3c:a5:16:51:bd:1d:41:1e:69:61:e2:71:d9:f4:
7c:77:15:10:36:81:f7:a5:25:b5:32:f7:cd:66:b6:3b:ee:0a:
ee:24:5d:a8:5c:27:a5:70:f2:93:ca:2e:16:64:17:4b:86:b9:
b8:43:7b:ae:cd:61:42:53:39:62:b1:ef:5e:bb:f6:ba:95:60:
e5:b1:39:7f:91:46:06:82:3f:13:40:f1:c8:2c:c3:5f:1b:58:
58:1d:8c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:00:57 2026 by rpki-client