This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d453ee1b-4d2b-3fe0-bad7-3db46dbcacb1.roa
File: d453ee1b-4d2b-3fe0-bad7-3db46dbcacb1.roa (raw, json)
Hash identifier: mA6OFfP19J8yJdlGiVJwoHLuFTq83el8eXttAZK5F3k=
Subject key identifier: 6B:3B:E9:32:06:AE:8B:78:F4:05:0B:90:58:18:BA:3E:12:AC:1E:B2
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584BF615DD1443DE57F31CC22300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d453ee1b-4d2b-3fe0-bad7-3db46dbcacb1.roa
Signing time: Mon 24 Nov 2025 02:00:32 +0000
ROA not before: Mon 24 Nov 2025 02:00:32 +0000
ROA not after: Sun 22 Feb 2026 02:00:32 +0000
asID: 8069
IP address blocks: 20.153.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f6:15:dd:14:43:de:57:f3:1c:c2:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 24 02:00:32 2025 GMT
Not After : Feb 22 02:00:32 2026 GMT
Subject: CN=3b14fc47-1033-4dd1-8bb8-ff0b0782021a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:0c:ea:78:8e:f6:a8:d1:10:7e:6d:b0:48:
91:5e:52:64:93:66:36:7f:f0:bb:33:11:b5:ae:a9:
6e:6c:00:b8:e1:0f:b2:4a:fb:5c:2a:d2:c2:68:3c:
5a:f8:81:97:5f:f3:0b:30:40:c9:73:c0:44:5f:a6:
e5:10:17:be:a8:af:28:4b:36:f2:32:8d:2d:1a:8d:
41:0d:88:94:b7:10:ce:72:92:b2:6c:ae:ce:33:d3:
22:a7:e0:b0:91:61:28:51:8d:3b:0e:a2:ac:23:1f:
79:15:e5:a7:e6:85:d8:b0:6a:33:82:8d:22:bf:e7:
26:b6:c1:a5:1a:53:04:24:99:5b:9d:55:74:0d:db:
c5:af:90:81:15:12:b7:d3:ea:50:de:3d:ca:49:6f:
6c:dc:10:34:56:9c:a1:9f:ad:d9:1a:f2:30:87:4b:
59:95:98:39:7a:8c:f8:84:bb:08:a7:6d:16:b5:31:
59:16:b4:2c:44:b2:d7:6c:80:ec:3c:06:d1:c8:12:
8a:10:0b:93:46:e7:85:84:d6:36:57:c7:c3:bb:dd:
4f:df:87:bc:b6:0e:a9:b0:3e:4a:b4:d3:06:8a:83:
50:4e:cf:2e:12:77:91:e9:eb:36:bd:0b:4d:5a:b2:
59:3a:d7:6b:90:01:55:60:7f:03:c2:13:19:90:e2:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:E9:32:06:AE:8B:78:F4:05:0B:90:58:18:BA:3E:12:AC:1E:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d453ee1b-4d2b-3fe0-bad7-3db46dbcacb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:b1:c4:5e:8e:28:68:ca:3b:b2:68:29:01:63:2d:89:d8:cc:
38:45:ec:d7:22:33:2f:0c:21:b4:44:92:56:98:df:8e:86:46:
97:3e:1f:f3:00:2a:5b:15:16:a9:28:97:1a:eb:dd:0a:1c:08:
ed:a9:45:81:bb:b4:81:22:31:f1:56:e9:d9:0b:8f:6d:b4:ab:
b3:00:c7:93:98:3d:8a:d3:c9:3c:83:bd:c4:74:b0:82:fa:39:
e6:73:be:35:ec:d5:43:3c:28:04:62:fe:a8:e2:e2:c9:88:f0:
f7:04:b4:12:ca:2a:3d:64:bd:97:98:c4:33:eb:15:06:16:68:
9f:2c:1f:c1:64:9c:a3:db:7a:54:bf:06:d7:d4:59:4c:b1:40:
9e:8d:fb:57:22:04:77:8a:8a:92:05:f2:e6:ea:56:69:fd:49:
14:5b:b6:b0:83:16:93:e8:cd:fa:ea:f6:a1:05:76:ef:7f:8e:
38:9b:a5:7e:c0:54:8e:23:53:23:31:ea:34:fc:61:ab:90:72:
b4:ae:b7:08:4c:1f:59:e0:e6:6e:4d:77:5b:24:e1:88:69:82:
cf:9c:ee:6a:78:46:ce:c4:09:59:d3:7a:b4:75:a8:31:12:03:
64:de:50:1f:2e:a6:d6:bf:57:07:51:65:58:21:24:ca:55:a3:
98:46:c7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:01:34 2025 by rpki-client