This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa
File: ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa (raw, json)
Hash identifier: Iyw8IPxTVeYRei7fzokjoB7jveuNFUBGKCr380TLmcQ=
Subject key identifier: 9E:C9:86:6E:A6:FB:E2:82:B1:05:81:BF:C9:92:6F:DC:0D:BC:03:CE
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584BEDB5E50C0A5031F93422C740
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa
Signing time: Fri 21 Nov 2025 02:00:30 +0000
ROA not before: Fri 21 Nov 2025 02:00:30 +0000
ROA not after: Thu 19 Feb 2026 02:00:30 +0000
asID: 8069
IP address blocks: 20.33.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ed:b5:e5:0c:0a:50:31:f9:34:22:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 21 02:00:30 2025 GMT
Not After : Feb 19 02:00:30 2026 GMT
Subject: CN=9fde460a-428e-477e-af45-27899555ef63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:e5:9c:41:97:90:4c:8b:bf:c9:2d:66:ba:
23:d2:b0:60:34:b9:56:85:5d:a6:56:f8:66:dc:55:
36:22:0a:9e:fd:34:54:b2:7f:52:8e:40:4c:f8:f3:
13:f2:ca:91:3b:56:ff:3e:24:7a:96:b3:37:e0:04:
c5:64:5e:78:e9:ed:12:a2:4b:ad:a5:13:6a:c8:e5:
50:a1:d3:b0:98:c6:75:d8:dc:29:5c:62:b0:b4:7d:
d9:5f:c4:36:a1:c1:32:1e:e2:65:bf:06:b2:d4:be:
26:c4:4d:40:69:03:ff:c5:af:39:40:e2:ba:8a:90:
0b:f2:98:2d:a9:45:cb:89:f6:38:38:3c:13:09:cc:
e4:8c:57:99:92:ef:97:7d:9a:73:63:f5:ac:9b:05:
b7:c1:dc:15:57:20:2a:3e:ff:0e:05:ee:f3:59:d4:
bf:33:49:80:3c:23:26:90:45:52:07:bb:7b:f4:ea:
f1:56:d7:b6:08:d2:a9:d7:99:94:60:50:86:33:46:
74:f9:31:cd:70:50:7f:46:ba:06:d1:51:d6:e3:66:
5b:45:7a:ee:96:7a:22:3f:6f:b1:1f:70:9a:31:20:
67:b0:5c:2e:7e:81:75:3f:70:18:4b:9a:21:64:93:
e3:b6:ed:1f:9b:30:b8:23:1d:2f:c5:71:09:1f:6c:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:86:6E:A6:FB:E2:82:B1:05:81:BF:C9:92:6F:DC:0D:BC:03:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ec15a5a9-3318-3dd2-9e36-e6a359acf7ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:22:39:ad:2d:d7:e0:f0:15:2b:61:49:a2:aa:a5:a9:c9:3a:
e7:4f:16:d0:3a:07:28:ee:a5:3d:0e:93:13:65:fa:d7:0d:fd:
58:6c:5a:2e:69:4d:52:9c:b2:52:1d:ec:3f:15:f2:fc:c7:8a:
63:9a:38:cb:38:cc:25:39:ce:2f:13:ce:eb:28:08:18:7e:70:
0a:59:05:b0:3a:c9:a7:a2:1b:ae:c3:ab:e8:9c:94:f9:d0:62:
04:9a:23:68:b5:13:92:b4:85:5f:23:64:88:1e:35:6d:89:50:
d9:43:c4:92:53:91:11:44:fd:53:46:64:ea:59:ee:6d:f3:1e:
d0:00:65:10:81:25:49:b0:33:34:7f:47:6a:74:bd:07:83:91:
0d:94:49:24:3a:26:ba:34:5f:1e:a7:f2:11:22:4a:ea:0e:79:
42:1a:b0:07:12:ff:50:b8:19:cb:59:02:3f:59:70:3f:82:cf:
6d:3c:6c:66:e4:22:5c:0d:a7:a0:56:f5:8f:70:0e:d0:8c:7e:
5e:e5:93:81:11:55:3a:3e:65:27:e0:bd:18:88:c7:3a:ae:e0:
ef:9f:b8:18:b6:53:02:ec:c4:42:26:9e:56:c7:fd:a6:0b:17:
7f:8f:0b:ba:91:c5:6a:6a:df:f4:98:bb:e7:7c:12:2a:02:90:
99:7e:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:59:46 2025 by rpki-client