This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa
File: 7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa (raw, json)
Hash identifier: sz1pmEa/B0tgigJ+GPvrO3bpahabb7NkwgnyU1FEI1c=
Subject key identifier: E3:BB:E4:85:C8:4C:66:52:89:F5:E2:59:1D:83:8F:92:32:58:DB:F5
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C1D2B7188876B3DF67E7CADC0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa
Signing time: Mon 08 Dec 2025 02:00:31 +0000
ROA not before: Mon 08 Dec 2025 02:00:31 +0000
ROA not after: Sun 08 Mar 2026 02:00:31 +0000
asID: 8069
IP address blocks: 20.33.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1d:2b:71:88:87:6b:3d:f6:7e:7c:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 8 02:00:31 2025 GMT
Not After : Mar 8 02:00:31 2026 GMT
Subject: CN=6191a0e5-d1c4-4703-830a-a07314067e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:34:84:54:6c:84:10:37:00:d7:9e:9a:76:
4d:aa:3a:79:24:f0:e7:c3:de:73:69:24:24:8f:53:
16:fc:a9:f2:23:32:d1:69:e2:4c:6c:f4:64:02:24:
88:b9:a4:d1:65:c2:0e:43:b5:de:a7:5b:63:00:3a:
13:c4:2b:cf:a0:e3:d9:c2:7f:c4:98:f9:c7:94:07:
43:cc:d8:a0:0c:98:56:96:b7:8b:e6:fe:a6:34:28:
f0:ac:b1:a6:fb:32:b7:01:ac:29:18:34:1d:df:96:
a3:c6:a2:cb:f0:43:bd:7f:7c:c2:92:3f:8f:f8:fb:
aa:29:16:da:9a:4e:fa:a3:44:42:d8:a7:b7:a2:2b:
5b:59:ca:b1:62:0f:c8:6b:bb:b0:d3:5b:76:a3:aa:
ca:d9:a8:e6:80:4a:1e:5c:3f:b3:12:0b:3c:81:55:
43:b0:67:59:bb:08:ad:f5:02:1d:23:00:3d:ea:9f:
3a:7e:7d:cd:b7:76:95:86:aa:9a:8b:c5:87:7e:5b:
f5:1e:0f:cc:2b:9b:83:46:35:73:80:67:78:2d:29:
0a:b7:4e:cc:e8:95:a5:d0:25:76:3e:c2:33:6a:48:
bc:3e:7b:af:e0:83:38:ec:42:7e:06:29:5c:43:99:
da:18:7f:20:3b:9d:d9:20:62:bf:cd:a2:50:11:4e:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:E4:85:C8:4C:66:52:89:F5:E2:59:1D:83:8F:92:32:58:DB:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6208af-a9bf-3bf7-bd20-7dd74ebd03c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:29:20:4f:c6:1b:d9:d3:46:f1:73:c3:9d:9e:be:27:cd:09:
65:01:c8:a0:f5:6b:c5:7a:7d:3c:4f:08:a2:f3:77:d8:85:25:
62:00:90:35:cd:23:84:cd:57:62:a1:31:1d:84:01:63:25:52:
a9:33:de:a0:34:04:cb:da:4e:f5:76:71:b1:a0:07:ee:1f:5b:
ad:b5:b1:73:ed:32:5b:bb:c4:3d:e2:37:94:33:f6:8a:d3:e4:
c2:62:6e:6e:d2:5e:3a:d2:97:9b:d1:6a:1a:4f:35:c5:1a:7d:
6f:1f:0d:07:73:5b:5b:fd:06:38:bf:03:67:2e:1a:6f:f0:bd:
4f:28:45:0d:9d:bc:53:ef:e8:7f:49:34:26:c6:20:80:ce:3f:
7c:a7:3a:9f:ce:e1:16:34:a6:3c:77:93:19:3b:50:81:34:41:
11:5a:c6:0f:a8:43:36:56:46:9d:fb:e7:e3:9d:03:42:3f:f0:
19:38:ed:36:48:51:1a:e6:2c:e4:a8:4b:bd:37:8b:d5:5d:22:
9a:90:f4:d5:e9:e5:28:f3:6c:94:1b:20:30:5c:d6:7c:a5:95:
a0:d0:55:79:3e:be:04:dc:25:7d:0c:ad:d2:9c:11:40:51:14:
6c:a2:56:cc:30:d7:f2:00:07:0f:27:71:f6:dc:c5:40:4a:3d:
2a:f4:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:10:43 2025 by rpki-client