This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686c5db4-0183-3cb3-a676-970651d1bf14.roa
File: 686c5db4-0183-3cb3-a676-970651d1bf14.roa (raw, json)
Hash identifier: JqfMm6JOp+UVZpo+AgjSNTGHyIvFoFhLZ6+UcwAtPyo=
Subject key identifier: 26:B0:96:B6:4D:DA:A4:D2:04:B5:E5:B8:51:C9:86:59:CB:25:64:89
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584C48719F821878D12AD87C5000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686c5db4-0183-3cb3-a676-970651d1bf14.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 396982
IP address blocks: 34.133.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:9f:82:18:78:d1:2a:d8:7c:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=970c7ad0-a9b3-4124-8e2c-a269720a469c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:31:08:58:6b:15:ac:4e:a1:2f:90:93:0e:
76:cc:04:bd:a5:ab:0d:30:f0:02:fb:e2:6d:1d:b7:
3a:3a:c2:58:86:b2:61:92:5b:17:77:aa:12:89:94:
db:11:eb:b8:b4:48:3f:d0:45:fb:c8:1c:b0:e1:77:
f4:2b:77:6f:67:17:0b:a9:ed:8a:67:33:06:a8:72:
41:30:8a:95:1a:67:01:cb:a7:9c:0a:59:be:b5:e8:
0e:a1:8f:fa:38:b6:12:76:fc:ad:1b:f9:8c:57:df:
0f:da:57:e2:07:2d:49:9b:8e:8f:20:d9:ac:d4:ce:
44:54:7e:3f:8e:e7:86:08:01:b7:e0:ae:e4:63:7f:
cf:39:f8:d4:ad:08:08:ed:1f:8a:dd:fe:87:69:fe:
91:50:d3:ea:a1:8f:86:5e:6c:0c:0e:02:eb:38:e7:
25:70:30:45:87:2f:79:58:ed:da:3b:69:fb:10:e5:
a6:ad:94:ad:a7:8e:5f:4e:99:6f:f8:fd:99:f7:27:
09:ab:fb:1d:10:30:0f:20:4a:94:b6:f9:0b:d6:73:
6b:32:68:a4:c0:97:a0:e2:b3:d8:e9:62:5b:45:19:
bd:3d:f3:10:d4:ec:37:14:0b:54:a9:01:cb:89:84:
45:5b:47:a8:7b:1e:a7:e1:19:ec:04:b0:41:1f:a4:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:96:B6:4D:DA:A4:D2:04:B5:E5:B8:51:C9:86:59:CB:25:64:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686c5db4-0183-3cb3-a676-970651d1bf14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.133.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:a2:45:06:5c:fc:6d:d1:d9:26:49:e4:d8:58:cb:ce:55:d9:
e9:06:2f:59:74:73:b0:3f:3e:6d:a8:5d:eb:58:3c:34:f8:1a:
5b:f6:a6:c1:8d:5c:36:a7:79:f9:a5:5a:63:c7:c2:11:42:fe:
a2:8d:1a:3d:d7:44:84:b8:06:ae:cc:c9:c6:d1:84:21:86:c7:
64:0f:0f:28:97:04:f3:1a:31:34:1a:e1:81:ac:2d:0f:f9:72:
ff:8a:b3:f6:a7:80:cc:5d:37:b1:b0:17:28:fd:ea:b4:be:c3:
b3:db:c8:da:f8:d5:69:42:08:cd:cc:71:b1:ca:ac:1b:68:50:
44:3b:d6:61:02:f4:2f:1a:d8:70:31:02:57:67:bd:98:c1:5c:
ec:51:44:8e:d1:b5:bd:2f:68:bc:01:91:38:52:21:e2:91:09:
3d:54:43:5a:bf:c3:4d:9f:e5:f8:fa:84:20:20:f8:52:b8:8f:
31:f3:0e:f1:6d:ae:9f:e8:c1:71:8a:7c:c0:25:ff:b8:25:23:
3f:b3:39:7f:63:ba:2e:17:4a:c8:00:fc:5d:32:3f:cf:0b:84:
2a:c6:93:5b:1c:ac:21:e1:e5:0e:77:d1:3d:ae:20:d6:7f:74:
57:1a:72:73:7d:4a:96:f7:4f:5a:50:e0:c4:0a:21:5e:78:2d:
f1:f0:e0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:12:00 2026 by rpki-client