This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa
File: e0a983e4-3360-3f43-af95-dfcb084edaa1.roa (raw, json)
Hash identifier: sNXIlTS2KoS9mhOD8uiH74T7xxUg39hORrKtGAK/TrM=
Subject key identifier: 2A:9E:E2:44:EC:BF:7B:76:B2:6A:A5:F1:4A:7F:CC:B5:29:3E:2E:70
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C7251C86EF45535A112ADD540
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa
Signing time: Wed 07 Jan 2026 14:00:39 +0000
ROA not before: Wed 07 Jan 2026 14:00:39 +0000
ROA not after: Tue 07 Apr 2026 13:00:39 +0000
asID: 8069
IP address blocks: 20.33.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:72:51:c8:6e:f4:55:35:a1:12:ad:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 7 14:00:39 2026 GMT
Not After : Apr 7 13:00:39 2026 GMT
Subject: CN=1bd04ff2-3e5e-4886-be6d-ef2e848891ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:a7:c5:b8:6d:e5:9c:df:ab:d3:16:8e:bf:
7b:34:ac:4b:9a:8b:f5:8d:e4:fe:37:74:e2:48:fa:
16:37:27:d3:aa:fc:db:da:5c:a6:e1:8a:12:8d:9f:
d5:d4:a6:5d:6a:8a:4a:d3:0d:f9:c1:78:a8:b7:65:
8e:50:96:78:95:17:7f:6d:43:b6:a0:33:2c:db:e8:
64:40:4f:ae:cc:da:b0:90:69:de:f3:0d:4b:1f:74:
73:3b:6b:bb:33:8a:cc:42:50:ca:8a:a9:43:90:7e:
e8:c6:34:1b:4e:ed:95:7c:1a:ef:16:39:d4:60:c0:
ca:71:75:c0:c9:e8:ac:29:79:f4:e2:61:9b:cb:32:
3c:a6:41:6c:23:e2:0c:a4:f5:9d:4f:e5:66:d3:50:
91:62:5a:98:79:08:70:13:f6:81:43:26:3c:48:22:
6f:9e:6b:02:e1:b5:7c:f4:7b:c6:0a:71:54:d7:5c:
f6:a1:37:4c:ce:2c:1c:49:8d:d5:1a:10:1c:9f:18:
f0:c4:88:c9:66:6a:fb:c0:ae:06:e5:de:ed:63:55:
38:2a:45:76:eb:b9:c5:12:1a:47:f6:c8:9a:4d:bd:
68:07:25:29:95:c6:aa:f6:c6:76:1e:62:f6:3a:35:
7e:3f:79:99:80:a0:1c:c2:34:09:62:5e:4b:ae:16:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:E2:44:EC:BF:7B:76:B2:6A:A5:F1:4A:7F:CC:B5:29:3E:2E:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e0a983e4-3360-3f43-af95-dfcb084edaa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:c3:26:12:b4:06:3e:98:1f:f9:fd:e2:63:da:26:c6:9e:9a:
b8:9d:d7:df:7b:e2:9b:4d:21:b9:ef:74:ff:f8:84:19:8c:da:
7d:2c:9f:05:0b:82:8f:33:74:5d:d2:64:b8:96:d1:08:e2:cb:
20:6c:1b:fd:b8:f4:91:47:15:49:6b:cb:3a:35:71:b3:81:e9:
8d:45:5d:da:33:64:3b:57:32:c7:66:12:ca:5b:2d:44:79:f7:
03:27:cf:a7:39:22:b2:20:a5:c0:d7:da:12:c4:b0:48:54:dc:
d0:69:ec:c2:be:77:ca:bb:a2:30:89:4c:88:42:14:71:d4:6f:
47:0c:37:cf:f9:9b:7f:f6:dd:a5:57:c0:81:e3:13:12:2c:65:
d0:51:0f:0f:0b:a6:30:44:22:08:64:dc:aa:b1:75:86:0c:c7:
f9:99:97:b4:ea:16:d6:99:c0:49:34:5c:a2:34:5a:eb:d9:f2:
d7:7b:48:83:21:17:75:f3:d9:a7:7b:fb:25:a1:e4:4e:e9:e5:
8c:24:74:27:bc:de:aa:8f:09:f0:83:b5:5d:5b:c7:6d:33:00:
c0:e2:9d:b2:9b:be:f9:a3:5a:f2:d8:b0:90:e1:6a:5e:34:f7:
7d:c5:ba:45:c4:f4:b3:2b:70:b0:d9:54:58:33:64:0c:a3:62:
c0:cb:50:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 00:56:39 2026 by rpki-client