This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b32841cc-04b7-32b6-80ba-42e688ea4078.roa
File: b32841cc-04b7-32b6-80ba-42e688ea4078.roa (raw, json)
Hash identifier: 9Y+F6bO9F/X/GVodTInLMWEu/CYO2LyJ3yzZGqaO02s=
Subject key identifier: 31:B6:D5:D0:4C:62:34:05:1E:F5:99:4C:F3:1D:99:28:5D:4D:7C:CA
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584CA061A4A5BED70D06C3789080
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b32841cc-04b7-32b6-80ba-42e688ea4078.roa
Signing time: Sat 24 Jan 2026 02:00:31 +0000
ROA not before: Sat 24 Jan 2026 02:00:31 +0000
ROA not after: Fri 24 Apr 2026 01:00:31 +0000
asID: 8069
IP address blocks: 20.153.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a0:61:a4:a5:be:d7:0d:06:c3:78:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jan 24 02:00:31 2026 GMT
Not After : Apr 24 01:00:31 2026 GMT
Subject: CN=f01bac53-bd37-430c-a89e-8ce6dc42dfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:58:b8:ac:c7:fc:1f:17:27:dd:bd:72:46:
69:75:5f:70:f3:10:43:8f:2e:2d:76:48:8e:35:d3:
52:7d:2a:36:a0:1d:3e:85:b1:d5:fc:9c:02:95:4d:
73:2d:ba:70:2a:f7:d2:da:bd:96:bc:d9:17:a5:5e:
38:c3:34:2f:4d:7b:42:0b:a9:0a:59:4d:12:42:97:
e6:08:4b:c6:2d:8d:d4:41:97:e2:98:1b:35:e0:f3:
e7:0e:0d:78:1f:1c:93:d3:34:e2:fc:81:d0:9e:92:
5f:3d:99:6e:bc:20:70:0e:5d:29:97:45:12:64:98:
c4:d5:93:3e:ee:95:a7:52:07:91:49:a3:a2:a0:cc:
7d:55:c0:f3:f1:73:8e:e7:61:18:36:78:b0:b7:f8:
26:dd:24:90:53:a1:a4:e5:5f:07:da:51:eb:c3:65:
98:3a:f0:64:80:2d:37:93:3b:79:98:56:45:6e:1b:
e2:15:26:3b:80:fb:07:58:c0:21:2c:a7:06:ba:df:
63:fd:41:27:b2:6e:9e:13:3d:fc:2f:08:0a:e4:f9:
c6:e4:67:d4:13:84:0f:6d:0d:60:55:bb:da:05:1e:
6f:18:42:75:e4:9d:b1:ca:25:12:2e:55:70:67:38:
8a:ae:49:0c:4d:c5:b1:67:8f:68:68:58:50:fd:62:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B6:D5:D0:4C:62:34:05:1E:F5:99:4C:F3:1D:99:28:5D:4D:7C:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b32841cc-04b7-32b6-80ba-42e688ea4078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.73.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:c3:c2:c3:cb:03:1f:ab:3c:26:6e:3a:3a:77:ae:5f:94:7a:
b5:36:91:97:5c:92:0e:bd:22:b4:62:13:d2:a5:70:d5:bd:84:
b2:28:86:ac:96:59:4e:63:b6:fd:83:7a:e6:1f:ef:df:ff:14:
9e:fb:78:7a:ee:ce:e5:36:6b:f3:29:97:7b:e3:c2:ad:0a:d3:
89:ee:78:b6:25:d1:57:93:41:cb:76:c4:aa:9b:5c:5c:31:7d:
7f:ba:5e:bd:9e:ea:39:c0:81:fc:7d:e0:96:31:c7:fa:2c:1e:
03:1a:e6:63:a8:ef:98:60:ad:33:66:1f:14:09:f8:a3:db:7e:
c4:c8:83:1b:8f:79:0d:61:a4:31:10:00:20:1d:65:dd:44:2e:
5f:be:c0:01:2c:f0:9f:f3:95:07:32:3a:69:f1:6f:5e:67:81:
2f:af:03:95:0c:c6:a0:41:ad:02:fd:68:f3:e9:17:8e:45:c4:
ff:75:27:29:e2:0c:07:ed:ac:1c:11:58:bb:2d:d8:db:7a:19:
40:6a:0a:12:ef:16:14:fa:80:55:76:93:ea:d4:e8:da:17:6e:
e7:42:29:c0:6a:ec:10:2a:1b:68:7a:1a:6e:ac:50:d5:68:2a:
d1:6f:3e:f9:46:57:76:b0:6e:82:b1:62:2a:ad:78:6f:a9:68:
82:dd:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:52 2026 by rpki-client