This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
File: dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa (raw, json)
Hash identifier: JN30xU8zTg6bEXSyA+oPv5dMgY3fTxEgDS6fh44Lw6g=
Subject key identifier: 56:00:46:9C:75:5E:13:1D:57:DE:E7:92:51:F7:B6:11:94:CC:3E:78
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C0B062F7571652FE4458A8E70
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
Signing time: Mon 01 Dec 2025 14:00:39 +0000
ROA not before: Mon 01 Dec 2025 14:00:39 +0000
ROA not after: Sun 01 Mar 2026 14:00:39 +0000
asID: 8069
IP address blocks: 20.157.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:0b:06:2f:75:71:65:2f:e4:45:8a:8e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 1 14:00:39 2025 GMT
Not After : Mar 1 14:00:39 2026 GMT
Subject: CN=9b16432e-7b09-45dd-a79a-482757458a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:9b:cd:be:20:c0:dc:23:34:d6:0e:4e:25:
ce:20:05:0c:ca:8b:59:8c:dd:a6:82:8f:3d:8e:3f:
a0:99:bd:7d:d0:25:60:85:4d:d6:89:75:26:ee:6c:
d5:25:19:8b:82:e9:5a:d9:81:89:4f:5b:a8:30:4d:
99:39:bf:4e:d7:78:53:11:7a:50:e4:bf:85:b4:72:
12:8d:17:b3:1b:ea:b4:8f:7b:7b:df:bb:6c:09:f0:
e3:5c:88:e1:d1:16:b5:b7:6b:e2:3a:5a:50:f4:44:
12:d4:33:2c:39:b8:4c:ee:96:d3:2d:27:17:92:72:
0c:6d:c3:9b:94:22:65:7d:dd:c2:46:6b:87:fe:ac:
ec:ea:a6:2f:de:17:60:94:49:ae:d0:35:c5:72:61:
33:e7:5f:86:e9:95:f1:02:b2:04:07:d7:ad:88:3b:
31:df:4d:65:91:00:39:52:5d:3f:51:6b:a5:68:76:
3e:c4:24:c8:c5:26:d6:6e:81:30:89:87:21:60:1a:
88:c5:22:fe:a8:46:d4:b9:cc:fe:6d:9c:47:f2:5b:
78:29:87:e2:de:e0:be:4b:a1:96:f3:61:3e:92:4e:
76:c0:21:84:71:86:19:52:8c:a9:5b:5a:da:ea:45:
56:fa:a9:f2:19:0c:6e:70:9b:0c:33:8b:3e:6d:06:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:00:46:9C:75:5E:13:1D:57:DE:E7:92:51:F7:B6:11:94:CC:3E:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:53:5c:89:e7:54:73:02:38:12:d7:f5:a7:b0:6d:30:a3:ec:
d6:f7:71:63:33:35:73:bc:3c:a8:43:60:3c:ca:1e:e4:ab:be:
21:51:95:bc:74:cf:35:fc:7a:e4:89:69:60:b2:5d:40:cd:24:
26:f8:91:0a:85:c4:1a:34:0c:d9:5f:e7:c9:9d:8f:b8:ca:17:
5c:c3:bd:ac:89:63:0a:f8:75:ea:f2:14:56:84:f5:53:b1:16:
74:6a:ad:4e:2b:1a:cc:35:0e:9c:eb:31:8b:8b:9e:a5:a3:d3:
1b:17:31:13:fa:ce:92:84:5a:75:f2:e4:af:44:03:c6:a2:a4:
09:b2:ec:4b:15:7d:49:8e:f1:57:71:6f:ce:dc:f9:aa:2f:8d:
e0:55:b6:c2:2a:a1:32:fb:60:92:ac:6a:49:5e:0b:6c:c7:5b:
64:be:50:dc:62:4b:aa:73:04:4b:1c:09:3b:81:4a:76:33:eb:
1e:4f:6b:2c:44:ee:ef:2b:6c:dc:f9:9f:1a:16:ce:29:29:63:
cf:d5:2d:26:df:51:9b:7c:f0:90:40:97:3d:7d:94:d2:88:e8:
b4:43:c8:74:63:3a:2f:31:1a:8c:0e:b0:b1:13:39:10:c6:be:
c8:7e:2a:b8:4f:59:4f:d0:e5:fe:6e:b7:62:85:c3:bc:8f:43:
78:05:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:50:47 2025 by rpki-client