This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4727335-009c-3f32-ad27-800d7af9ce97.roa
File: d4727335-009c-3f32-ad27-800d7af9ce97.roa (raw, json)
Hash identifier: AHW5IbbeOhrp3g4ktzRNoP9DRAg50udgCPqE0m1WyAc=
Subject key identifier: 85:5D:B2:E0:16:62:15:96:4A:43:97:4F:5F:C5:78:F5:63:DD:A1:B6
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584C1D2B72216C1E4DBD7A8E4100
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4727335-009c-3f32-ad27-800d7af9ce97.roa
Signing time: Mon 08 Dec 2025 02:00:31 +0000
ROA not before: Mon 08 Dec 2025 02:00:31 +0000
ROA not after: Sun 08 Mar 2026 02:00:31 +0000
asID: 8069
IP address blocks: 20.33.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:1d:2b:72:21:6c:1e:4d:bd:7a:8e:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 8 02:00:31 2025 GMT
Not After : Mar 8 02:00:31 2026 GMT
Subject: CN=2d658761-1480-4a4e-b39d-0825578c1816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:72:e5:aa:ca:2c:54:48:7a:b4:e5:63:50:
23:74:53:3a:59:84:c9:40:60:94:79:52:4f:cf:be:
32:3e:96:19:ce:a2:1d:84:58:36:01:55:84:84:c1:
69:a8:0f:75:e1:1f:bb:48:fb:34:50:d6:fc:40:55:
bb:17:5c:55:3e:a7:2e:3f:4c:99:f6:d8:6f:60:f1:
f3:51:d7:ba:db:21:0c:e7:d4:3b:37:ce:e2:c7:fb:
d0:1f:83:ef:58:e8:43:6a:95:11:19:30:29:15:79:
94:92:0e:9d:dc:c4:b9:e5:33:c1:9d:0f:8b:6b:be:
70:c7:06:02:c9:a1:6a:7b:de:77:c5:54:3a:a9:e3:
61:44:b1:69:14:26:92:21:4f:0c:60:cf:26:ca:63:
f5:8d:34:96:44:69:d7:a9:52:f6:99:5f:5a:9f:6a:
d9:ae:cf:fb:77:c0:fb:54:c8:ff:7a:1c:50:11:ec:
b6:f8:1d:b7:67:e9:5a:90:46:f4:16:f6:3d:d0:04:
1e:bd:60:49:39:74:b4:eb:d1:97:dd:4d:0e:25:e2:
da:15:cc:a8:ab:6f:08:96:c0:8d:7e:f8:5b:db:90:
bb:be:71:2d:8b:2d:81:ee:4d:f4:1d:ad:be:54:68:
07:90:d4:45:aa:48:60:94:7c:77:ca:eb:cd:7b:46:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:B2:E0:16:62:15:96:4A:43:97:4F:5F:C5:78:F5:63:DD:A1:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d4727335-009c-3f32-ad27-800d7af9ce97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.33.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:79:c6:31:86:64:60:11:ab:43:2c:06:ed:6f:9e:e6:cb:54:
ed:ad:11:8b:ad:82:85:c4:6b:4b:9c:a8:f0:11:38:37:22:c1:
0b:1b:31:70:10:8d:cc:33:3b:18:53:16:e4:2f:19:5d:25:f2:
4f:74:8d:6e:63:b8:68:be:39:68:02:7b:82:30:05:cd:7a:4b:
28:af:76:d9:cf:95:c3:fd:de:0c:bb:1b:7f:e3:91:2b:c8:4e:
f1:3e:44:7d:30:8e:50:3e:24:e8:66:d1:6d:dc:cb:68:c9:0a:
d8:2d:c2:d0:3c:f5:7c:35:8b:08:d7:3e:69:c4:55:75:fe:ce:
2e:84:f9:99:13:85:ce:b2:4f:64:a5:f4:49:0b:36:4b:7a:ae:
c3:bf:7f:f1:70:70:50:ce:2b:40:ed:3f:3b:9f:b3:68:1e:0d:
aa:77:91:a1:4a:8d:c9:ba:66:53:54:cb:89:9c:fa:5f:69:db:
c9:ae:d8:17:6c:d3:74:48:aa:45:12:db:ab:36:1a:a3:7c:8d:
fa:1e:bb:eb:60:af:aa:47:68:af:65:b8:6c:45:67:0c:75:c2:
2f:b7:3a:1f:a2:85:ff:31:3d:46:76:6b:71:f7:56:53:d2:00:
0f:87:54:ea:39:fe:95:71:2a:30:2e:94:4d:cc:f9:87:dd:e9:
ea:18:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:44:40 2025 by rpki-client