This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa
File: e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa (raw, json)
Hash identifier: 1pNw8sdCxN+bLC902o5MWjReE7nve9wpOg9mFpSTe2s=
Subject key identifier: 01:B0:14:BF:C7:46:E1:86:0E:0E:4B:88:1D:1A:22:F1:83:97:36:E8
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C847702FE1BC20ADAE0A58B00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 8069
IP address blocks: 20.153.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:77:02:fe:1b:c2:0a:da:e0:a5:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=6646194e-809f-48d1-8c93-33879b9b741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:aa:40:3b:c5:15:e5:d4:2a:9a:e8:f2:13:
da:18:0d:99:a6:80:b7:86:51:02:cf:3d:34:4f:47:
cf:dd:27:91:7e:71:78:b0:5d:f3:26:14:26:4c:ae:
bb:2a:cc:bb:7e:96:6a:3a:8e:da:ea:ef:81:d1:02:
5f:34:d2:83:85:30:f6:2f:ac:de:df:33:a1:70:03:
2b:dd:f4:80:7d:aa:85:6c:5f:5f:a0:41:2d:f2:af:
3e:7a:c3:92:a2:01:77:9e:13:46:96:7e:20:b2:ba:
f1:8a:e1:41:d1:b4:a3:14:5a:37:00:f4:69:78:b0:
0f:9f:68:42:e8:4b:9c:22:da:a1:c7:30:8d:86:59:
61:b9:0a:2d:7b:ad:bc:82:ce:72:cc:33:54:14:99:
e3:bf:dd:9c:e0:be:37:71:6f:4f:fc:da:f7:fd:78:
04:9f:2e:3c:7d:31:90:4b:1a:bd:04:11:63:ef:e1:
e7:52:45:f7:98:fd:bf:a6:bf:59:f3:1b:5c:0b:cb:
7a:d1:3f:32:12:99:78:1d:4f:51:d9:71:0b:1a:68:
f7:ca:0a:87:dc:89:bd:e7:24:06:b9:97:ef:8e:9d:
8e:32:d7:8c:1a:de:34:f4:93:43:74:83:88:35:ec:
56:8e:05:c1:7b:d1:1a:07:0f:ef:14:8c:7d:43:82:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:14:BF:C7:46:E1:86:0E:0E:4B:88:1D:1A:22:F1:83:97:36:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e2c7d3b3-8a76-312e-b43a-ff0dcc0d0444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:fb:83:0a:53:aa:0d:cf:0f:1a:35:a3:16:71:ed:ba:0f:bb:
db:7b:5d:1b:22:37:23:1a:b8:c7:27:1e:74:5d:a6:c8:13:30:
61:96:ee:13:38:5f:15:72:19:3c:96:15:7a:cd:d0:13:a8:e6:
20:70:c6:fb:ec:42:ef:95:78:50:b0:d9:14:22:b2:b2:94:bd:
c1:48:58:4f:5f:32:04:ab:01:57:16:bd:fe:fc:ed:ec:d2:32:
8d:c7:33:db:f5:f3:c0:49:c9:28:4c:40:54:ae:47:7c:37:c6:
5d:b7:c4:1d:51:28:2d:38:ce:4f:98:fc:2a:10:fb:68:09:73:
f5:a0:8a:95:ea:52:9f:a5:89:b7:a4:25:6d:0a:a5:a4:a1:ee:
41:61:cb:c1:ac:dc:0e:2a:b5:f2:f9:fa:c7:bf:40:5c:d0:fd:
e4:57:a6:e3:05:40:58:73:c0:c7:0f:6c:bd:4f:35:65:f0:42:
2d:82:89:ee:8a:ff:41:24:a2:7d:64:c0:d4:75:8f:45:4e:b1:
85:e5:fe:67:f9:6f:da:61:57:81:1a:ba:d2:fe:ea:e9:da:db:
c5:da:dd:27:6c:45:b6:0e:d0:3f:35:04:ac:0d:5a:e2:3a:4a:
a0:80:e2:7e:b9:58:99:77:e3:53:a8:19:cf:f5:4f:5f:a0:c9:
be:72:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 00:55:14 2026 by rpki-client