This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/714bb915-54f7-3a1b-b5aa-4f41d6568c47.roa File: 714bb915-54f7-3a1b-b5aa-4f41d6568c47.roa (raw, json) Hash identifier: DxR21nnC5I3OZndB6JEm/pYc01VHWzIoODcldI54WYk= Subject key identifier: D9:15:D9:C8:B9:DA:5E:53:7A:BA:A3:B9:6C:EF:E5:C6:D2:2B:D7:9D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C1630EA01BD9633293BA41C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/714bb915-54f7-3a1b-b5aa-4f41d6568c47.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 396982 IP address blocks: 34.153.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:ea:01:bd:96:33:29:3b:a4:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=cd0c9e82-5250-40eb-a2cd-1ae68564a9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:d9:49:e2:4e:ec:ca:6f:ad:11:61:c3:ef: 11:42:f3:92:c1:95:a8:c8:bb:21:4b:e4:23:00:98: e9:d7:19:80:2d:09:26:52:bc:50:41:4e:64:b3:bd: 4d:8a:8d:a0:cb:39:05:9d:4c:76:c8:c6:b1:30:b0: f1:06:f5:e9:95:f4:42:89:fd:6e:63:75:87:5f:2f: 71:4a:6e:e4:5f:0f:4b:f1:7f:17:c9:74:99:c3:b5: f5:11:de:df:20:f8:5a:a8:f6:8a:9c:e3:4f:48:6a: d9:17:ce:68:bb:6e:ef:51:2b:0f:63:d8:1b:82:8b: af:39:64:9c:91:5f:c4:a6:14:43:6b:b0:8b:cf:8a: a6:6e:64:bb:d2:a7:89:12:b8:fe:5d:77:b1:df:09: 12:20:1a:d5:80:e9:c5:ed:18:f6:96:3a:34:c4:c6: 58:bf:19:1d:a1:7e:0c:50:0c:1f:8c:9a:76:b9:04: c1:52:8d:3f:6b:f6:47:2f:b2:7f:45:a9:a4:d7:50: df:61:fc:37:19:ef:ab:4c:2c:93:a9:d4:16:7b:2e: 18:04:09:ba:75:3f:65:b3:7d:ef:ec:54:f2:f0:9a: 56:58:3f:76:65:d9:5c:1a:0d:2e:d4:51:da:03:84: ba:8c:15:bf:69:56:d9:ad:ae:af:e9:ab:d7:51:0c: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:15:D9:C8:B9:DA:5E:53:7A:BA:A3:B9:6C:EF:E5:C6:D2:2B:D7:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/714bb915-54f7-3a1b-b5aa-4f41d6568c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.153.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:0c:60:99:1c:3f:91:01:be:3e:9d:6e:9c:d1:c5:fa:b1:c4: 90:56:f4:aa:b5:8a:7f:76:86:ab:e8:a7:e5:61:da:63:41:1a: 3c:d7:e5:a9:9b:03:89:f2:81:90:8a:4e:be:63:c4:3e:72:20: 1a:4b:29:02:77:61:5d:cd:6b:1d:e6:22:1f:67:b7:c6:93:d5: d9:9d:27:8c:f7:c2:e5:25:69:73:ce:cd:34:38:9b:82:0c:e8: f6:87:c4:dd:c3:7d:23:e7:f5:06:a4:04:0c:30:dc:3a:e6:a3: 32:eb:b6:4d:cc:b6:62:2b:1b:8b:c9:c1:50:b1:76:72:67:fa: e1:99:d0:f8:60:e6:67:f5:6d:40:3d:22:9d:a4:fd:4a:4b:c6: f1:61:4f:34:01:b5:86:8d:a3:51:a3:f1:d3:41:5c:40:cd:ad: 40:99:f9:79:9f:9e:87:b8:b6:41:cb:69:19:6b:30:e2:4b:de: 9c:6e:72:8d:eb:a9:0b:6a:09:72:63:ae:02:49:3b:b4:09:fe: 75:e9:01:02:9a:57:ad:25:f6:f5:69:53:58:d9:70:7b:4b:95: 6b:0f:3d:ac:66:40:c2:4c:c4:be:50:b5:7b:0a:2a:ce:39:69: 82:fd:bc:3c:e7:57:8d:49:b0:e6:9f:79:d4:79:72:33:72:7d: 9f:e5:b9:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMOoBvZYzKTukHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk Y2QwYzllODItNTI1MC00MGViLWEyY2QtMWFlNjg1NjRhOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme7ZSeJO7MpvrRFhw+8RQvOSwZWoyLshS+Qj AJjp1xmALQkmUrxQQU5ks71Nio2gyzkFnUx2yMaxMLDxBvXplfRCif1uY3WHXy9x Sm7kXw9L8X8XyXSZw7X1Ed7fIPhaqPaKnONPSGrZF85ou27vUSsPY9gbgouvOWSc kV/EphRDa7CLz4qmbmS70qeJErj+XXex3wkSIBrVgOnF7Rj2ljo0xMZYvxkdoX4M UAwfjJp2uQTBUo0/a/ZHL7J/Ramk11DfYfw3Ge+rTCyTqdQWey4YBAm6dT9ls33v 7FTy8JpWWD92ZdlcGg0u1FHaA4S6jBW/aVbZra6v6avXUQyIqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkV2ci52l5TerqjuWzv5cbSK9edMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzE0YmI5MTUtNTRmNy0z YTFiLWI1YWEtNGY0MWQ2NTY4YzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsMYJkcP5EBvj6dbpzRxfqxxJBW9Kq1in92hqvop+Vh2mNBGjzX5amb A4nygZCKTr5jxD5yIBpLKQJ3YV3Nax3mIh9nt8aT1dmdJ4z3wuUlaXPOzTQ4m4IM 6PaHxN3DfSPn9QakBAww3DrmozLrtk3MtmIrG4vJwVCxdnJn+uGZ0Phg5mf1bUA9 Ip2k/UpLxvFhTzQBtYaNo1Gj8dNBXEDNrUCZ+Xmfnoe4tkHLaRlrMOJL3pxuco3r qQtqCXJjrgJJO7QJ/nXpAQKaV60l9vVpU1jZcHtLlWsPPaxmQMJMxL5QtXsKKs45 aYL9vDznV41JsOafedR5cjNyfZ/luY0= -----END CERTIFICATE-----Generated at Sat Dec 6 11:02:27 2025 by rpki-client