This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa
File: 74b8f18a-03af-3efd-855d-08cd5d5beccf.roa (raw, json)
Hash identifier: DHRM0G7+M5TdOODvyWDvWrzZ/UJBLU1aRTDSnqutZRI=
Subject key identifier: FD:71:FE:72:41:06:4F:AF:27:C2:A7:C7:57:9A:32:67:D1:B9:64:51
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584BF615D990F20484A25E0FBA80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa
Signing time: Mon 24 Nov 2025 02:00:32 +0000
ROA not before: Mon 24 Nov 2025 02:00:32 +0000
ROA not after: Sun 22 Feb 2026 02:00:32 +0000
asID: 8069
IP address blocks: 20.153.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f6:15:d9:90:f2:04:84:a2:5e:0f:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 24 02:00:32 2025 GMT
Not After : Feb 22 02:00:32 2026 GMT
Subject: CN=731093e1-6f22-44ab-a0ee-8988d35d233a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:71:3f:55:17:4f:b6:5a:60:6e:44:97:2a:
e2:20:a2:23:46:12:56:0a:52:ab:d5:33:90:a9:ef:
95:80:75:81:ed:6c:b9:e6:44:26:12:ce:59:57:f0:
51:b0:c8:25:26:90:3e:4a:72:7b:d4:51:27:b1:7f:
16:47:e9:cc:6e:44:cf:4e:0e:b9:ad:9f:33:27:af:
8f:28:51:a9:b4:7d:5b:f7:21:33:25:b3:4e:52:0e:
7b:6d:b8:b6:48:9f:96:a9:27:c3:f9:84:b8:10:ad:
c4:26:9b:53:b5:7c:31:21:b0:ef:3b:35:28:26:c7:
53:28:81:87:8e:1c:17:f2:c7:dc:cd:13:16:01:2d:
a4:b2:47:68:a5:8c:8f:1d:6a:d7:76:67:6d:f9:65:
6f:f3:99:b7:c2:67:8c:98:33:04:5d:92:bd:91:c3:
bd:4a:fc:6b:96:a2:e9:e3:97:b4:f4:02:0c:b1:4b:
7a:a6:45:09:05:77:22:59:97:28:08:90:99:ad:5b:
5e:af:89:d2:1f:4c:b8:f5:44:0f:2b:31:4d:07:59:
3e:e9:bf:40:51:3a:1c:fe:3b:52:36:c4:18:04:f0:
5a:b7:64:e7:f1:9c:f6:57:34:6e:04:58:8d:03:bd:
55:9e:2a:b3:30:23:04:09:2b:37:c4:69:db:fa:a2:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:71:FE:72:41:06:4F:AF:27:C2:A7:C7:57:9A:32:67:D1:B9:64:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/74b8f18a-03af-3efd-855d-08cd5d5beccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:4f:de:30:20:10:b4:c8:a5:ec:27:9a:da:3c:91:8b:a3:09:
6d:11:d6:f4:71:7e:b5:5d:c1:d6:b6:0a:12:61:f6:10:ed:df:
65:c2:16:93:ce:68:bc:81:9a:6f:e7:82:1b:23:9e:29:2e:18:
38:61:40:f9:1e:b7:13:1f:17:17:cc:bc:34:76:82:b2:71:53:
6a:2c:d0:59:3b:a5:0b:1c:39:46:33:76:95:8b:6e:43:14:ba:
59:c4:65:06:41:52:5e:36:04:9e:7a:94:96:d5:ef:a2:00:16:
24:05:06:03:3e:d2:8e:a6:31:a4:00:4f:0c:d2:53:06:2a:ca:
27:2b:e1:ce:aa:94:17:5f:f4:a9:75:09:05:12:21:ae:43:f3:
d7:8a:fe:5c:af:13:2b:79:87:d0:6a:0c:3d:46:02:85:40:6f:
f1:5d:e6:f9:2e:29:78:27:90:0d:14:a9:3d:9b:9f:c0:d5:fd:
ad:cf:77:d8:e2:64:ff:8c:fb:cb:6c:44:35:25:1a:d7:66:44:
db:cc:61:7d:06:29:e4:9e:dc:99:9b:a5:af:40:c9:3b:c4:1f:
51:4b:e7:59:8a:85:a5:13:cb:d6:07:95:ca:f9:57:ec:e3:af:
9e:f1:fd:66:97:76:47:57:d6:7d:2d:40:49:92:27:ec:53:58:
56:a3:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:52:11 2025 by rpki-client