This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa
File: 634d5c06-38cc-328c-b749-6599f74d293f.roa (raw, json)
Hash identifier: qvvsDZs+XOmB8UHFLzIEQBzlndFdZOfXBFWxjGU9XYM=
Subject key identifier: E5:15:5D:90:3F:B8:CE:E7:BE:B5:61:BF:F8:38:4A:0E:A9:56:CF:90
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584BF615DB9360112213F86BA940
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa
Signing time: Mon 24 Nov 2025 02:00:32 +0000
ROA not before: Mon 24 Nov 2025 02:00:32 +0000
ROA not after: Sun 22 Feb 2026 02:00:32 +0000
asID: 8069
IP address blocks: 20.153.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f6:15:db:93:60:11:22:13:f8:6b:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 24 02:00:32 2025 GMT
Not After : Feb 22 02:00:32 2026 GMT
Subject: CN=74c22e9b-c061-420d-ab3e-97f262212bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:b4:d4:1d:cc:83:93:81:00:93:f1:80:e2:
b2:c0:cb:ff:a3:f9:da:0a:50:12:a4:0e:e1:b7:5d:
4d:c9:54:b0:5e:81:06:d6:b1:c4:ee:16:58:6d:af:
9b:c9:de:12:8b:fa:62:bf:e5:12:0b:79:5a:7f:cb:
7a:59:d6:e9:d3:6c:3d:4c:41:a1:61:27:d2:7c:7d:
8b:68:62:8f:20:59:8c:a0:ca:e9:d2:cc:33:55:80:
c0:39:8a:14:56:b7:2f:e7:a0:d5:6e:49:cf:83:50:
1e:0b:0e:46:2e:e6:eb:16:0c:01:66:f5:7c:4c:4a:
5c:1d:22:75:de:09:d5:51:f4:d0:ff:77:60:38:b5:
90:07:31:89:c3:e5:26:cd:21:12:17:80:26:76:f7:
1f:ea:af:e0:cb:d1:b3:7c:ed:b3:7a:3e:23:78:92:
26:9f:0a:26:ad:09:8d:3f:8f:b7:07:e0:f9:8e:7b:
27:15:89:a3:1a:63:40:ba:a2:b4:da:38:06:ca:61:
af:52:5f:9a:45:61:ba:4b:8c:b4:e0:5b:a9:18:e5:
e7:76:c2:59:3e:37:44:38:d1:06:bf:1f:38:de:a3:
fe:02:7b:86:5a:ee:27:06:c3:c3:22:64:5a:15:98:
43:ad:1a:06:f7:29:e6:93:8e:3f:c9:22:96:27:49:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:5D:90:3F:B8:CE:E7:BE:B5:61:BF:F8:38:4A:0E:A9:56:CF:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/634d5c06-38cc-328c-b749-6599f74d293f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:a5:9f:9a:92:b2:b5:cd:f7:9a:a6:31:08:1b:a3:e3:5b:c7:
0b:9f:6f:09:6d:9b:bd:fa:ba:a5:8d:38:ee:6f:de:81:8f:34:
19:35:ab:a8:7a:7b:b5:56:41:0e:3c:83:fe:15:d0:04:a1:5e:
20:20:04:c1:16:2d:20:34:98:0d:8f:6e:f2:ca:26:dd:4b:9b:
9d:a6:e0:0d:d4:75:b0:e1:02:3f:2a:f1:65:0b:ef:b2:fb:94:
81:8a:24:df:3d:51:9c:af:f1:a7:fc:80:10:f1:a3:f4:39:47:
dd:99:7e:52:a3:90:f7:bb:47:e8:00:d8:ba:e0:31:47:57:19:
18:10:b6:0d:0b:79:1c:37:05:0a:01:af:b8:26:b1:14:41:d6:
84:a9:45:9e:c5:45:3f:67:e9:39:38:84:d5:33:f9:bc:52:9a:
79:12:38:31:a3:7d:87:08:11:df:54:96:de:21:0e:28:85:93:
5d:97:d7:6d:bb:6d:7a:18:74:75:29:c7:4d:94:88:69:81:85:
d6:80:e3:cd:7e:43:79:6b:9b:00:36:61:d3:c4:54:9a:0d:9b:
7b:e5:bf:5e:9e:51:7d:f8:67:d9:bb:04:c6:4e:94:93:25:ff:
0c:86:ce:25:2d:42:9b:f8:9f:21:43:4b:c1:62:9d:f0:53:21:
ef:29:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:56:55 2025 by rpki-client