This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa
File: 70cbfac7-7845-3c22-8003-b419f184ca4b.roa (raw, json)
Hash identifier: ulXDa7MK4irNuy9rwJqybTTtISmru6LqfzAt6+LES2Q=
Subject key identifier: 0C:9A:73:F7:B6:E7:E5:9D:A7:9A:3B:E0:51:C1:2E:AD:4F:B8:A8:7B
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584BE555DD4E8B166A8B354C7D80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa
Signing time: Tue 18 Nov 2025 02:00:30 +0000
ROA not before: Tue 18 Nov 2025 02:00:30 +0000
ROA not after: Mon 16 Feb 2026 02:00:30 +0000
asID: 8069
IP address blocks: 20.33.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e5:55:dd:4e:8b:16:6a:8b:35:4c:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 18 02:00:30 2025 GMT
Not After : Feb 16 02:00:30 2026 GMT
Subject: CN=579f80a3-76dc-42ea-99b3-919a7ba88947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:de:07:22:ac:da:0c:60:55:da:60:bf:1c:
1f:25:50:96:60:d9:dd:01:c9:f6:c1:0e:94:c0:92:
ef:da:58:c8:1a:b7:4b:01:d1:fb:19:85:be:bc:cf:
2d:fd:80:39:70:19:72:dd:d5:b6:63:0f:a1:a6:15:
57:86:e2:7c:4b:dd:87:aa:f5:ae:69:7f:13:1a:d7:
3b:ba:73:55:04:fd:49:25:bf:f9:dd:84:ef:ea:f1:
74:77:44:b7:ae:95:6c:99:b0:77:11:77:d6:45:67:
ba:e9:8e:2f:06:cd:35:2d:ba:cc:e2:4a:ab:e9:c6:
b1:54:a5:32:f8:72:88:27:3a:b8:eb:a3:68:fa:de:
d3:77:29:74:0d:6d:23:af:8f:49:93:c7:35:52:77:
55:d9:80:e6:da:02:99:23:be:2c:26:fe:b3:e9:50:
57:23:b2:7e:96:2a:dd:d4:c5:85:29:02:3c:d1:af:
15:a9:a3:66:35:79:ce:8c:43:7b:17:68:7c:e2:96:
0b:2c:3a:2f:83:09:97:56:45:dc:72:fb:e5:26:36:
60:b1:29:2a:33:e2:f9:bc:d8:c5:3c:a7:e8:88:12:
f6:31:3b:13:f5:6f:42:6a:1b:97:d0:e9:91:44:40:
4a:df:29:49:19:82:bd:12:0e:72:72:8e:b8:aa:9f:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9A:73:F7:B6:E7:E5:9D:A7:9A:3B:E0:51:C1:2E:AD:4F:B8:A8:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/70cbfac7-7845-3c22-8003-b419f184ca4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:d4:c9:61:7c:14:22:34:c1:1a:6d:b6:11:82:5f:1b:d6:fe:
18:e5:1a:93:e6:d2:3b:f9:40:3b:bc:4b:6d:83:ba:fa:25:1e:
b3:16:9f:60:9c:76:9a:c8:6a:7d:6e:90:77:65:fc:4a:8e:a0:
10:b4:c3:a6:e4:a6:6e:d4:b7:db:43:0f:58:19:f9:59:ae:08:
e9:44:a2:dc:56:14:84:38:b8:ae:36:65:b9:74:56:33:45:89:
78:3c:c6:54:76:70:9b:45:ba:ad:75:a6:e3:4b:62:73:21:93:
dc:bf:39:b2:eb:4d:52:8f:1b:af:42:bf:a7:04:69:32:fb:07:
93:fd:8c:35:3a:d2:98:4d:ec:53:64:ce:a3:98:29:fc:8b:14:
e1:1f:01:40:8c:f0:4b:b9:b8:5b:cf:1e:7b:8d:23:18:f7:18:
09:aa:ca:57:5d:dc:48:b9:c6:03:58:7e:8e:2c:75:54:85:b9:
ee:c3:8a:f8:63:8f:5b:e1:fb:6a:d4:e5:f4:ed:4c:84:d2:bf:
30:40:fb:5f:4a:7e:96:25:a6:a6:79:fc:64:aa:ad:17:c9:ed:
e8:b9:e3:eb:ae:44:30:dd:50:ca:f0:53:32:d2:44:41:5c:cc:
44:e0:88:7b:6c:29:e1:35:f2:a0:fe:ac:43:cb:c2:27:75:b5:
30:ca:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:09:27 2025 by rpki-client