This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19839f40-6d5c-3b86-9930-5d3c85ddb5c9.roa
File: 19839f40-6d5c-3b86-9930-5d3c85ddb5c9.roa (raw, json)
Hash identifier: 5KR1B/ZhOjD9uYgtMqeFLb7mR0aRWZFS/Is6gJtWNxE=
Subject key identifier: 79:8F:BA:D7:70:60:3A:C1:F6:FF:5D:D6:D1:FE:E7:E5:95:9D:F0:D3
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C22C0D194D24F23870A0E2A80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19839f40-6d5c-3b86-9930-5d3c85ddb5c9.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 8069
IP address blocks: 20.153.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:d1:94:d2:4f:23:87:0a:0e:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=9b585bb3-80c7-4f0d-8ba5-0a6d97e3db4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:d1:06:45:64:86:73:3c:07:45:13:36:a9:
a9:85:09:d1:1b:7e:4e:2d:8a:50:be:97:b9:6f:71:
8e:f8:f2:39:66:fb:07:45:78:05:87:c3:6e:dd:3c:
90:03:7a:77:09:dd:b4:1c:0f:d1:d7:f0:c5:76:f6:
28:92:2d:6e:af:48:a9:9d:9a:f7:41:98:28:ea:9d:
21:bc:62:0f:87:4a:37:1a:a0:0f:20:b4:7f:f4:c3:
1a:88:17:5f:93:cd:b0:5d:4e:95:1f:1c:82:e5:f5:
9d:ac:5c:3e:2b:ac:a7:fd:3f:76:c2:b6:60:92:66:
16:e5:7d:e4:e3:9f:0d:0d:80:0e:c2:48:fb:b0:3e:
79:3b:19:39:a1:51:c9:85:d0:65:f9:80:3c:12:bb:
ac:a2:72:25:12:ab:c7:28:26:94:83:4b:80:17:ef:
df:b5:a3:bd:8e:12:50:68:91:ea:58:fb:d5:6f:9f:
6a:c9:d9:8d:08:e3:93:bd:bd:58:cd:23:80:f0:9a:
4d:b0:f7:1f:9d:2f:f4:6a:9d:09:e5:c0:f9:af:28:
3b:9d:52:0a:aa:22:da:f3:ff:26:ce:86:d6:58:ae:
4d:bf:71:ab:a6:d4:85:59:85:4c:7c:1f:9e:e7:85:
79:da:5d:9e:97:7f:a5:5d:f6:23:4d:45:7a:87:eb:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:BA:D7:70:60:3A:C1:F6:FF:5D:D6:D1:FE:E7:E5:95:9D:F0:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/19839f40-6d5c-3b86-9930-5d3c85ddb5c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:76:cc:54:4b:30:98:f2:9f:e3:92:c9:37:c5:89:f7:a1:7b:
87:41:9b:31:5c:17:16:7c:07:0d:c9:18:c8:5a:8b:5a:f3:1e:
a4:94:f3:31:1f:7a:b3:b8:5b:4b:a4:6f:08:aa:03:d7:50:7b:
b4:ad:37:7b:b3:38:69:c6:0b:7b:2e:a2:cd:c8:6c:5d:6a:ec:
bb:1c:a4:a0:d8:ae:98:cc:2d:85:94:76:9a:f3:c7:82:2d:bc:
58:86:44:27:e7:d6:3c:44:fd:5a:40:b3:7f:f4:14:38:91:91:
ef:ec:ae:a1:e8:eb:93:86:ba:df:1f:6f:be:52:02:d5:c8:f8:
49:6b:f3:98:77:19:72:8e:60:71:39:e8:fa:0f:ac:89:6e:fe:
af:63:f2:f4:2c:a5:82:c1:19:5a:40:51:7a:12:23:29:51:ab:
18:c9:49:26:c2:e5:fc:62:5b:2c:9c:ef:9f:47:85:8d:b4:6a:
0c:a1:89:d1:fe:8f:3e:fa:03:25:39:4c:0d:dd:2d:3c:68:6f:
b4:85:ac:d1:5c:1b:05:0d:70:06:a4:36:cc:e5:14:76:3b:a2:
f6:7b:ef:bd:e3:91:d9:64:f2:2e:79:44:d2:fd:77:92:27:77:
d0:73:c8:72:de:b0:e9:7e:fe:86:62:93:f6:2e:e7:b7:d6:1b:
22:65:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:10:40 2025 by rpki-client