This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/292e8c9a-3098-3afc-842f-831ca4d85fe8.roa
File: 292e8c9a-3098-3afc-842f-831ca4d85fe8.roa (raw, json)
Hash identifier: sa89MUuEkUkIWSTzkvOBB4aQgujwaUUU2LxsUesZbm8=
Subject key identifier: 27:08:28:DB:51:5E:3E:82:84:FD:3B:40:54:A1:07:08:EC:8A:75:69
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C8A0C5E89535139480C855180
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/292e8c9a-3098-3afc-842f-831ca4d85fe8.roa
Signing time: Fri 16 Jan 2026 02:00:31 +0000
ROA not before: Fri 16 Jan 2026 02:00:31 +0000
ROA not after: Thu 16 Apr 2026 01:00:31 +0000
asID: 8069
IP address blocks: 20.153.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8a:0c:5e:89:53:51:39:48:0c:85:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 16 02:00:31 2026 GMT
Not After : Apr 16 01:00:31 2026 GMT
Subject: CN=a32cc13e-eabc-4508-8d26-531825372950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c9:c5:96:c6:b3:3f:08:c2:0b:d3:43:dc:70:
39:4f:67:31:f2:d7:2e:d3:4f:b6:67:dc:00:71:1d:
ea:0f:b0:a4:8d:43:34:43:07:42:35:fb:fd:fc:9d:
2e:e2:c8:d3:77:9a:d4:23:1e:8f:bb:7d:f0:9f:23:
42:11:b2:89:2c:33:69:dc:b3:1b:b9:dc:18:13:68:
6e:7b:df:6e:df:d0:71:28:c4:88:46:e3:7a:22:54:
37:3f:12:9e:b9:c7:02:be:e9:8b:0c:a3:7e:e9:7b:
e7:8c:80:05:a0:74:92:39:16:c6:9a:9a:72:fb:4f:
86:cc:13:88:6e:da:bb:0e:ed:2d:b4:f1:7f:9c:4e:
c8:b7:5c:83:5d:20:91:2c:58:ae:99:d2:f2:2d:d0:
c3:9a:70:f8:5a:54:ee:ee:25:13:2f:dc:55:61:9a:
b0:fc:91:71:cb:59:d2:2a:c7:1f:9c:07:21:e4:3a:
3a:f3:03:02:8f:0d:d6:42:09:ed:b7:f9:7b:fb:88:
61:81:3a:12:79:c8:60:e0:0d:4e:d6:5c:e7:da:c7:
85:07:68:5f:0d:9f:e9:c6:d2:40:46:99:1e:fd:01:
fe:10:bb:20:4e:bf:31:bb:16:46:f6:5b:f0:fb:fa:
c1:00:75:25:aa:00:a5:c8:5c:6f:c8:76:5f:15:1c:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:28:DB:51:5E:3E:82:84:FD:3B:40:54:A1:07:08:EC:8A:75:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/292e8c9a-3098-3afc-842f-831ca4d85fe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:6e:20:c9:30:51:17:76:a0:b7:d4:5e:4f:c7:40:f3:c7:f6:
bc:b1:74:e8:7d:49:1f:76:f2:87:f0:e8:e5:39:3b:da:2f:fa:
5f:9d:18:86:73:c4:80:92:f9:43:0f:0d:20:b3:ec:ff:12:90:
eb:2c:52:27:95:1d:c5:c0:22:64:65:1f:6e:89:70:9d:28:fb:
bc:14:f2:52:74:58:51:5f:ba:b9:d1:ac:b0:1e:aa:a5:6d:fa:
ef:b7:9b:b0:39:a6:54:15:64:d0:17:2e:2a:70:4b:ab:db:63:
2c:e3:6b:83:28:2a:36:19:71:8c:08:8a:cf:f0:09:3b:c1:e1:
0c:58:d7:17:5e:77:3a:cd:b7:c1:c4:4b:04:1d:8f:b9:b8:7e:
d5:9d:57:34:6f:4c:1e:8b:65:54:d6:a1:74:2a:72:4a:14:b0:
b1:fd:7b:2a:6b:a0:ba:75:67:c9:d9:95:a5:a1:13:9b:cc:64:
63:15:83:2b:2f:0a:ba:34:6e:92:9f:8a:d1:18:c5:01:c8:dd:
25:0c:d9:47:4f:29:2f:3f:a2:26:95:3e:88:fc:03:b5:68:59:
15:f2:fb:31:2e:7d:ed:f7:ad:40:c3:5c:6b:e6:b3:b2:08:06:
16:30:64:65:6a:fa:07:4c:59:1b:cf:5e:47:9e:3f:82:7c:81:
d1:fc:96:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:14:15 2026 by rpki-client