This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa File: 1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa (raw, json) Hash identifier: +VBC0q4JyfJbM3K+1ByRcsjVweu0/jdDMm8e96XhsU0= Subject key identifier: B3:B7:4B:CA:16:AC:D3:FA:98:9C:8A:B4:1E:77:42:C8:EB:A0:90:6B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C45A7ED2F30A6AD3CA907D480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.121.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:ed:2f:30:a6:ad:3c:a9:07:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=c48b37ba-7698-4bb5-8b04-aa442bd777e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:c7:ef:c6:73:da:4d:62:93:39:bf:fd:29: f2:03:7c:c8:97:8c:39:5f:22:4e:bb:df:b5:6d:cc: ce:cb:69:41:ba:1b:87:1b:b9:58:7d:75:a1:41:7a: 88:de:44:fd:58:1b:4d:55:a0:a4:0a:3d:f0:e6:9b: 53:88:0b:82:31:66:2d:79:4c:ed:f5:32:f6:32:58: 19:3d:1a:60:e2:59:d9:38:cf:66:d8:0d:f2:80:9f: fc:f5:ba:cd:a7:77:36:7d:3c:b0:60:1f:44:60:02: 1a:83:fc:99:9c:dc:2d:2d:d0:d4:87:e9:61:8a:b6: d1:eb:d1:46:19:34:c6:1d:34:4f:88:a9:fc:75:2e: b5:98:46:93:83:cf:9e:2c:2e:a8:62:1f:51:a5:e7: 54:05:dc:a1:79:00:0d:01:c2:6e:0f:18:94:4e:0b: 6d:e5:67:a9:b9:ac:db:cb:8f:b9:34:0d:f1:e3:02: 37:62:c9:ae:5d:5f:2f:0a:44:33:05:af:57:84:b0: 26:e7:ad:ec:e4:7f:dd:5d:05:f5:72:cb:1d:f4:75: 66:4c:b2:d9:6f:25:e1:bf:f7:2c:54:a1:ea:02:6b: 9c:a5:33:20:8a:0d:ac:3f:dc:d3:a6:8d:9e:4b:bc: c6:60:c6:50:36:12:cb:70:ae:f6:16:86:67:df:35: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B7:4B:CA:16:AC:D3:FA:98:9C:8A:B4:1E:77:42:C8:EB:A0:90:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:24:c1:14:14:c5:34:07:2c:64:0c:88:62:6e:89:aa:12:ed: 70:ff:5b:5f:33:ad:c7:d6:6f:5e:78:6a:06:80:1c:ea:47:18: 25:0b:67:02:8a:bb:58:85:d1:f5:f1:e8:83:4b:84:35:14:de: db:e4:58:dd:b8:02:fd:32:44:69:88:ba:1e:28:e5:bd:f0:75: c9:71:5e:c1:84:cb:5f:4f:06:a6:7a:02:01:69:2f:f4:88:4d: 6d:22:ba:e8:b2:7c:dc:fe:0e:a4:71:a8:d4:de:47:54:a8:b7: ee:e2:25:a2:dd:9a:e7:98:1f:31:7d:47:f5:8b:7a:6b:3a:1e: 2c:2d:0f:6a:5d:8c:88:c8:00:24:30:ac:87:dd:c8:e6:22:94: 50:e6:c7:24:90:e7:86:e8:0d:b7:10:35:c8:1d:b3:c3:92:61: 40:84:47:07:c4:9b:df:07:26:be:9a:dc:98:d4:5b:7f:d3:a9: 57:ce:b1:3b:5c:3f:4e:90:ca:47:ea:1f:45:7f:86:83:30:bf: 2e:ad:5e:64:ce:7a:73:3c:96:10:57:7b:6d:a6:b8:35:55:ac: fd:ce:12:77:e4:6a:56:d0:43:5b:1d:d2:59:10:d6:68:c5:d2: 03:95:97:33:0c:3c:8a:2d:60:42:83:f0:d4:84:b5:94:15:b3: d3:59:2d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp+0vMKatPKkH1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk YzQ4YjM3YmEtNzY5OC00YmI1LThiMDQtYWE0NDJiZDc3N2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHbH78Zz2k1ikzm//SnyA3zIl4w5XyJOu9+1 bczOy2lBuhuHG7lYfXWhQXqI3kT9WBtNVaCkCj3w5ptTiAuCMWYteUzt9TL2MlgZ PRpg4lnZOM9m2A3ygJ/89brNp3c2fTywYB9EYAIag/yZnNwtLdDUh+lhirbR69FG GTTGHTRPiKn8dS61mEaTg8+eLC6oYh9RpedUBdyheQANAcJuDxiUTgtt5Wepuazb y4+5NA3x4wI3YsmuXV8vCkQzBa9XhLAm563s5H/dXQX1cssd9HVmTLLZbyXhv/cs VKHqAmucpTMgig2sP9zTpo2eS7zGYMZQNhLLcK72FoZn3zVo8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO3S8oWrNP6mJyKtB53QsjroJBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWMyYTNlMGYtNWU1NC0z ZjZjLWI4MGEtYjk0YWYzZTVlY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAkwRQUxTQHLGQMiGJuiaoS7XD/W18zrcfWb154agaAHOpHGCULZwKK u1iF0fXx6INLhDUU3tvkWN24Av0yRGmIuh4o5b3wdclxXsGEy19PBqZ6AgFpL/SI TW0iuuiyfNz+DqRxqNTeR1Sot+7iJaLdmueYHzF9R/WLems6HiwtD2pdjIjIACQw rIfdyOYilFDmxySQ54boDbcQNcgds8OSYUCERwfEm98HJr6a3JjUW3/TqVfOsTtc P06QykfqH0V/hoMwvy6tXmTOenM8lhBXe22muDVVrP3OEnfkalbQQ1sd0lkQ1mjF 0gOVlzMMPIotYEKD8NSEtZQVs9NZLWg= -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:57 2026 by rpki-client