This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa
File: ffb1385a-fcf0-3f8e-9012-938f49909686.roa (raw, json)
Hash identifier: JPndMN8reYC/xAAPFPW6oFLAGXhJPf1PvzL3s3dsTnc=
Subject key identifier: E0:40:F7:C6:01:87:86:C9:08:B8:14:E8:F6:D8:3D:5D:B0:D9:B8:5E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C7251C93812C8B9F8839EBF80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa
Signing time: Wed 07 Jan 2026 14:00:39 +0000
ROA not before: Wed 07 Jan 2026 14:00:39 +0000
ROA not after: Tue 07 Apr 2026 13:00:39 +0000
asID: 8069
IP address blocks: 20.33.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:72:51:c9:38:12:c8:b9:f8:83:9e:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 7 14:00:39 2026 GMT
Not After : Apr 7 13:00:39 2026 GMT
Subject: CN=6c40c599-71d1-4654-9a4c-c40af695aeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:dc:95:28:cd:66:94:bf:7c:03:bd:79:a7:
11:9b:b4:72:af:6e:4f:0a:15:a5:7c:2e:d6:d7:c7:
c8:41:5a:fb:cc:7f:96:27:0b:16:e7:c0:e8:c0:85:
40:59:f9:06:24:fb:d6:94:a7:14:26:1b:41:a6:87:
62:55:09:70:92:de:de:f7:f3:20:d7:1b:d4:f8:b4:
3f:7d:9b:e2:8c:9d:30:7f:4a:c5:46:58:c2:9b:2c:
80:e1:9d:79:8e:44:ca:29:81:cc:25:c4:8a:93:02:
73:f6:64:6b:4c:c2:1e:82:38:3d:b0:5e:c9:5e:11:
78:e8:aa:79:7d:15:cf:0d:a9:78:5c:ea:d0:44:23:
fc:b9:71:4d:a2:10:0a:58:f2:e9:f9:3f:a9:3c:f4:
3e:4c:89:05:49:b2:e4:1d:ad:b3:a7:8c:d3:c1:96:
6f:88:32:ab:16:a0:91:4f:2f:11:7d:da:f5:c5:41:
73:08:e1:f2:eb:ad:30:49:bb:eb:fa:58:43:d7:3c:
91:83:e7:a2:c4:3d:a2:b4:70:07:85:ab:2a:8f:93:
b6:96:c1:5e:c6:92:95:a9:43:78:70:47:ec:eb:96:
3b:f1:be:c2:15:ac:db:af:d2:9e:a5:7b:82:50:9f:
b7:72:5f:90:df:2a:bb:c0:d2:a0:3e:ee:60:bc:a7:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:40:F7:C6:01:87:86:C9:08:B8:14:E8:F6:D8:3D:5D:B0:D9:B8:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ffb1385a-fcf0-3f8e-9012-938f49909686.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:99:7f:27:77:59:f9:18:16:d0:fa:a3:9f:a7:af:e8:41:17:
07:6a:e6:5b:5b:18:22:36:88:97:2f:65:72:12:4a:0e:9b:7c:
4a:75:7f:b4:ef:2c:6c:b8:89:44:59:51:11:ee:3a:df:a4:a6:
e4:7a:0e:86:35:d3:ae:7a:a6:f3:9e:44:9b:0d:99:87:aa:83:
85:48:6b:fe:6b:f7:9a:f9:8a:33:fd:38:a5:ce:d5:f6:fd:51:
09:34:9e:51:c0:1a:40:7f:48:08:81:1d:ac:d1:a0:da:9e:08:
ed:db:45:16:3c:6b:39:d0:2d:a2:76:bd:65:71:0c:f9:99:54:
e5:c2:dc:9e:5f:7a:26:1f:7e:f3:e2:cb:2e:a4:39:19:4e:00:
86:5c:cc:6e:9a:a3:30:b3:ea:0a:dc:ab:ce:59:c6:48:7c:d9:
4d:21:88:07:6c:6e:7e:ec:a8:4d:60:90:12:e7:44:09:22:10:
05:bc:d8:68:fc:a1:ce:60:0f:a6:81:b5:fd:d0:89:a2:9d:a5:
2f:75:ef:1c:12:8c:41:3f:ec:b1:aa:57:5f:4d:00:de:69:58:
ec:64:02:ab:4a:fa:f0:bf:20:40:28:49:4a:5c:78:e0:1c:0e:
74:56:79:c7:9c:5c:cf:1f:d4:4b:9a:6c:fc:6b:b3:ae:05:c9:
ea:8e:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:00:14 2026 by rpki-client