This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa
File: a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa (raw, json)
Hash identifier: TswX9DIKPeXkgJrn23U/69aWs5DHhrCh7ZGbeduX87c=
Subject key identifier: FE:09:72:DF:17:4D:04:35:69:DC:66:0F:AD:21:05:E0:AA:4D:57:7D
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584BF615DAF25E1CA674BBB3C9C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa
Signing time: Mon 24 Nov 2025 02:00:32 +0000
ROA not before: Mon 24 Nov 2025 02:00:32 +0000
ROA not after: Sun 22 Feb 2026 02:00:32 +0000
asID: 8069
IP address blocks: 20.153.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f6:15:da:f2:5e:1c:a6:74:bb:b3:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 24 02:00:32 2025 GMT
Not After : Feb 22 02:00:32 2026 GMT
Subject: CN=9e54b35d-f65f-493a-a835-292d447ad574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:dc:fb:1a:d2:73:60:85:64:da:84:69:3b:
f8:07:c2:3c:c9:5b:48:d1:13:9f:49:da:4b:fe:95:
97:90:8e:78:76:e8:28:ff:30:d2:30:d6:67:26:59:
78:0c:77:e2:d1:09:4a:50:89:34:7f:32:56:75:49:
ef:27:7a:ad:44:93:c0:73:8e:ff:2e:8d:c4:eb:95:
93:fc:7e:88:9d:c8:14:cc:1c:89:a3:64:59:56:7f:
4e:74:e9:28:93:28:a4:68:8d:ed:57:bd:c3:43:34:
05:1c:00:35:b0:b2:5b:f0:36:23:8c:40:e6:92:d2:
48:76:b8:b5:32:91:d1:29:dd:93:71:d9:34:a7:14:
7a:5b:19:e7:03:aa:9c:8b:a3:4c:3c:c6:25:ac:55:
33:ad:6d:6d:bd:e8:b3:17:a9:5d:1a:df:2b:47:2d:
bb:25:e1:24:63:b4:94:74:d2:54:b5:eb:9b:a8:86:
c0:5a:c4:62:68:95:1a:1a:52:c9:b2:08:0b:8c:9a:
30:8e:77:8e:09:54:6a:6a:c4:0c:b1:29:44:33:20:
2f:a7:17:31:3d:23:2b:00:18:ca:9d:f0:c2:7f:fb:
85:e9:50:8f:58:e2:a8:cc:b1:da:3d:ac:c6:2e:ac:
44:f4:1c:04:4d:7d:8e:8b:11:2c:dc:43:23:55:c8:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:72:DF:17:4D:04:35:69:DC:66:0F:AD:21:05:E0:AA:4D:57:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a83b2356-d220-35a8-ac0c-e8f69259c4e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:cd:1d:ab:20:ce:e1:ef:2a:db:06:ea:39:eb:12:18:0e:72:
f0:48:7f:66:70:0d:22:7d:26:99:ea:95:84:70:82:1c:95:d6:
71:b3:3e:de:52:28:ca:28:26:bd:4d:73:b3:7a:5a:cd:0d:ea:
f4:34:ac:59:49:16:43:8e:13:3c:82:cb:f4:42:29:8e:ec:e0:
62:b6:85:20:0e:de:e8:cf:07:c1:34:a0:96:b7:d1:61:c7:6f:
5d:dc:8e:49:97:f5:e7:e0:ec:3e:d8:d9:10:49:12:12:cd:3f:
f7:f0:34:f7:5b:59:46:2a:9e:31:0c:0f:bc:0b:2d:0b:bc:d0:
7e:d4:ee:07:c3:e4:5d:b7:e7:68:03:69:59:17:34:fb:0b:3a:
af:ad:eb:8b:f0:69:94:12:72:34:69:50:0e:a6:13:2d:6e:e3:
8a:32:3d:3e:6a:66:71:ef:40:72:c8:56:3e:d6:d9:cc:3f:0f:
20:25:27:6c:04:9c:05:f1:81:a0:7b:ed:62:82:43:b9:b5:3c:
e3:22:db:89:f6:76:dd:33:7d:84:0c:59:23:f4:18:04:ce:78:
b1:6f:e0:a8:c0:09:da:e1:f6:c3:ee:30:3e:4c:39:9c:08:ad:
15:82:a9:09:6a:3b:4d:8c:74:6e:43:d2:06:fa:e3:04:c9:ef:
9f:4a:71:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2FdryXhymdLuzycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk
OWU1NGIzNWQtZjY1Zi00OTNhLWE4MzUtMjkyZDQ0N2FkNTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvDc+xrSc2CFZNqEaTv4B8I8yVtI0ROfSdpL
/pWXkI54dugo/zDSMNZnJll4DHfi0QlKUIk0fzJWdUnvJ3qtRJPAc47/Lo3E65WT
/H6IncgUzByJo2RZVn9OdOkokyikaI3tV73DQzQFHAA1sLJb8DYjjEDmktJIdri1
MpHRKd2Tcdk0pxR6WxnnA6qci6NMPMYlrFUzrW1tveizF6ldGt8rRy27JeEkY7SU
dNJUteubqIbAWsRiaJUaGlLJsggLjJowjneOCVRqasQMsSlEMyAvpxcxPSMrABjK
nfDCf/uF6VCPWOKozLHaPazGLqxE9BwETX2OixEs3EMjVcjqJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4Jct8XTQQ1adxmD60hBeCqTVd9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYTgzYjIzNTYtZDIyMC0z
NWE4LWFjMGMtZThmNjkyNTljNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfNHasgzuHvKtsG6jnrEhgOcvBIf2ZwDSJ9JpnqlYRwghyV1nGzPt5S
KMooJr1Nc7N6Ws0N6vQ0rFlJFkOOEzyCy/RCKY7s4GK2hSAO3ujPB8E0oJa30WHH
b13cjkmX9efg7D7Y2RBJEhLNP/fwNPdbWUYqnjEMD7wLLQu80H7U7gfD5F2352gD
aVkXNPsLOq+t64vwaZQScjRpUA6mEy1u44oyPT5qZnHvQHLIVj7W2cw/DyAlJ2wE
nAXxgaB77WKCQ7m1POMi24n2dt0zfYQMWSP0GATOeLFv4KjACdrh9sPuMD5MOZwI
rRWCqQlqO02MdG5D0gb64wTJ759Kcc0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:57:03 2025 by rpki-client