This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa File: 588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa (raw, json) Hash identifier: d4QoLzAcBECA6i/xqd+5JenWaFLl+4asb9GZltLseJg= Subject key identifier: 95:E2:E0:27:A3:30:9F:05:E3:6E:6E:60:72:A7:2B:F7:1B:00:C6:86 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C48714783A7287172E0590880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.131.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:47:83:a7:28:71:72:e0:59:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=40e98798-3da6-4528-92a9-f194f02b0e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:8a:24:30:d2:ca:cd:6a:48:93:85:b0:1a: 32:79:63:6a:37:5d:f1:9b:84:7f:3c:fe:51:b5:68: 7b:fe:5f:f3:41:ff:97:33:50:07:55:40:3e:56:26: 65:81:09:52:f2:54:91:f3:dd:dd:fd:99:5f:7d:c5: df:eb:9d:da:c2:51:e3:c9:8a:f6:02:dc:de:86:c2: 8a:6a:05:a1:d4:19:2f:86:e5:cd:ad:28:2e:5b:07: fc:7a:37:04:0a:05:52:e8:0d:8c:7d:0a:5e:20:74: ee:09:41:f1:67:2e:87:36:b9:6b:3b:76:44:38:d6: 69:dc:29:8b:70:19:cc:78:68:d1:b4:0a:8c:c1:6a: 98:c7:72:96:b0:a4:ce:5e:dd:bf:64:5a:2f:f5:77: fd:52:61:b8:53:c0:9c:ed:d3:a5:c7:2f:51:d0:01: 3b:d4:86:f5:90:df:9e:0a:5c:6e:0e:8e:e8:63:28: 51:3a:ef:df:ce:50:ec:c0:27:99:d0:ed:be:9d:4a: 48:b7:3b:34:e9:13:be:2c:76:78:c3:0c:8b:d3:35: 77:3e:95:d7:c7:c4:7e:81:7a:c3:4c:85:8e:11:87: 74:f9:c7:e2:18:e7:4f:10:fa:f8:0a:76:8c:53:37: 8a:f7:0f:cf:c2:2b:0a:6a:4e:68:76:a0:55:fc:c3: 82:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E2:E0:27:A3:30:9F:05:E3:6E:6E:60:72:A7:2B:F7:1B:00:C6:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:fd:f4:fa:d9:71:f8:79:12:73:87:fa:d0:fb:03:2b:08:6e: c1:70:30:23:a4:28:82:ca:e1:49:12:8d:c1:c7:f9:5f:a9:78: 54:d1:6e:9b:bc:0b:a8:e8:81:d0:50:4d:8b:3f:2a:20:e4:04: 6e:9b:4a:d4:d2:a2:31:7b:6c:cf:66:44:8f:cd:3a:db:c1:ec: 72:8a:9b:20:b6:69:9c:94:24:1e:cb:c5:23:0d:a2:25:95:b0: ef:08:fc:cf:b6:92:26:e2:3d:af:73:86:75:89:30:31:8f:53: 1b:b3:fc:37:bf:38:2b:80:49:27:aa:3c:96:a3:5c:f5:5d:ae: 22:c4:bd:4f:da:67:55:bf:a9:ab:dc:8d:ab:ec:19:13:ef:04: b8:73:b8:5f:69:65:da:72:24:1f:b3:60:87:16:f0:0d:11:ad: ee:58:f5:f4:fe:b4:9c:d5:2c:a1:8b:05:ca:38:4a:71:b6:1d: ca:ec:36:05:8f:42:dc:b2:5a:d9:15:bb:3f:19:da:ca:af:8d: b5:66:99:a6:36:aa:03:2f:a0:76:8a:f7:c9:ea:1e:f8:35:46: 36:f8:25:3f:16:c6:d7:ce:57:69:d7:41:fc:85:4d:22:15:8c: 59:fa:bc:7f:61:1c:cf:37:d8:c8:8d:8a:f7:c3:d4:ca:42:68: d9:17:5e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcUeDpyhxcuBZCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NDBlOTg3OTgtM2RhNi00NTI4LTkyYTktZjE5NGYwMmIwZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyeKJDDSys1qSJOFsBoyeWNqN13xm4R/PP5R tWh7/l/zQf+XM1AHVUA+ViZlgQlS8lSR893d/ZlffcXf653awlHjyYr2AtzehsKK agWh1BkvhuXNrSguWwf8ejcECgVS6A2MfQpeIHTuCUHxZy6HNrlrO3ZEONZp3CmL cBnMeGjRtAqMwWqYx3KWsKTOXt2/ZFov9Xf9UmG4U8Cc7dOlxy9R0AE71Ib1kN+e ClxuDo7oYyhROu/fzlDswCeZ0O2+nUpItzs06RO+LHZ4wwyL0zV3PpXXx8R+gXrD TIWOEYd0+cfiGOdPEPr4CnaMUzeK9w/PwisKak5odqBV/MOC0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXi4CejMJ8F425uYHKnK/cbAMaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg4Nzc2ZWItZjljNi0z ZjQxLThjZTgtNGI2NWUwNDA3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/99PrZcfh5EnOH+tD7AysIbsFwMCOkKILK4UkSjcHH+V+peFTRbpu8 C6jogdBQTYs/KiDkBG6bStTSojF7bM9mRI/NOtvB7HKKmyC2aZyUJB7LxSMNoiWV sO8I/M+2kibiPa9zhnWJMDGPUxuz/De/OCuASSeqPJajXPVdriLEvU/aZ1W/qavc javsGRPvBLhzuF9pZdpyJB+zYIcW8A0Rre5Y9fT+tJzVLKGLBco4SnG2HcrsNgWP QtyyWtkVuz8Z2sqvjbVmmaY2qgMvoHaK98nqHvg1Rjb4JT8WxtfOV2nXQfyFTSIV jFn6vH9hHM832MiNivfD1MpCaNkXXgk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:00:07 2026 by rpki-client