This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa File: 90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa (raw, json) Hash identifier: jXDDIk4e6KvDaXfmtvBS2rap0WETzIvALgRC5fM0Nxs= Subject key identifier: A0:C4:91:A7:39:B2:76:12:8F:62:74:71:72:11:68:F1:8B:FE:63:44 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C4871C14C6DF56770A6A28300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.71.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:c1:4c:6d:f5:67:70:a6:a2:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=c3afda9e-3444-4e61-be7e-d2a99c81d5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:58:38:39:3b:59:d6:f7:e6:2d:6b:4d:ce: b2:c8:4b:3c:14:6d:83:08:97:30:2c:3a:b2:8b:f2: b3:ed:fb:ca:b8:54:fb:44:b4:f8:4f:91:ed:9a:3c: 99:92:87:7e:7d:9b:70:5b:09:e3:88:3d:d6:8f:b6: f0:39:09:dc:ca:1e:71:42:6c:59:bb:31:20:fb:34: 1a:45:67:59:35:27:48:27:af:4c:7c:9b:0f:16:ea: 8b:02:4a:91:f4:22:8a:dc:c7:53:ca:49:8d:a4:be: 85:39:fe:8e:e5:4e:88:bf:64:e2:82:49:4c:1b:05: 76:ec:1c:74:b9:45:57:bf:8e:dc:1a:20:dc:c1:f2: a8:73:ff:ac:ce:9e:21:83:c3:7e:2d:aa:90:ba:e2: 0e:b4:b5:75:26:78:d8:fa:99:e7:c1:4b:13:66:02: 24:5c:04:f9:7f:d8:b2:9a:f1:fc:6b:d2:dd:36:02: c6:e7:0e:0f:68:76:68:e3:e3:66:40:73:fb:1a:df: 65:9a:19:5f:d0:52:dd:8b:fb:35:82:df:0b:e7:1d: e0:d4:42:45:ed:0d:bc:5b:bd:a5:84:5c:71:ad:4a: a4:9d:74:3f:d7:39:54:00:3f:5f:2e:f3:3b:f0:91: 8c:b8:86:be:33:24:9d:b1:2b:94:87:02:68:88:f0: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C4:91:A7:39:B2:76:12:8F:62:74:71:72:11:68:F1:8B:FE:63:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:91:aa:1c:55:49:72:40:18:0d:97:e0:b1:ca:2e:e8:c2:54: 14:34:f1:cf:46:14:48:e6:e7:66:98:83:59:6b:da:c9:41:96: 35:02:b8:d6:c8:53:0c:48:4c:b0:02:49:9c:9c:ad:99:61:ac: 0e:85:d2:71:57:da:39:ad:ba:9e:1e:09:2c:ae:65:97:2d:ca: 5c:68:ba:03:7d:9a:39:fb:51:e4:95:20:48:2a:00:21:49:32: 74:59:37:28:0a:a1:04:b0:b1:10:d1:a0:0c:e8:c9:74:f0:37: a4:37:13:bc:62:96:f7:a7:cd:63:3e:d1:88:59:51:4a:07:ff: 0a:56:77:24:1d:6c:12:a6:42:ab:2f:39:2c:19:40:b5:cd:8e: 63:2b:bf:fd:54:bb:83:63:bc:d7:46:3d:64:61:1a:50:f1:34: 1e:d2:67:41:e1:53:51:bc:9d:32:89:60:d8:b6:cb:6e:d6:db: ad:a0:8d:ba:d9:d9:e3:fb:e3:d7:fb:61:b1:0f:ab:63:67:1a: fa:3c:2e:48:14:f4:94:1b:60:fb:18:f8:0c:c4:c6:5e:b2:e9: 52:5d:79:6b:03:82:e8:1d:fd:54:02:72:44:c8:a4:50:22:06: 3f:c3:6f:e7:96:6b:17:4b:bd:29:82:a7:3a:3a:b3:0a:3d:b1: f7:d7:cf:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIccFMbfVncKaigwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YzNhZmRhOWUtMzQ0NC00ZTYxLWJlN2UtZDJhOTljODFkNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs39YODk7Wdb35i1rTc6yyEs8FG2DCJcwLDqy i/Kz7fvKuFT7RLT4T5HtmjyZkod+fZtwWwnjiD3Wj7bwOQncyh5xQmxZuzEg+zQa RWdZNSdIJ69MfJsPFuqLAkqR9CKK3MdTykmNpL6FOf6O5U6Iv2TigklMGwV27Bx0 uUVXv47cGiDcwfKoc/+szp4hg8N+LaqQuuIOtLV1JnjY+pnnwUsTZgIkXAT5f9iy mvH8a9LdNgLG5w4PaHZo4+NmQHP7Gt9lmhlf0FLdi/s1gt8L5x3g1EJF7Q28W72l hFxxrUqknXQ/1zlUAD9fLvM78JGMuIa+MySdsSuUhwJoiPCQ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDEkac5snYSj2J0cXIRaPGL/mNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTBjZWIwZGUtNWE1OS0z ZDM3LWIzMDgtNWY0M2M1ZjlhZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCRqhxVSXJAGA2X4LHKLujCVBQ08c9GFEjm52aYg1lr2slBljUCuNbI UwxITLACSZycrZlhrA6F0nFX2jmtup4eCSyuZZctylxougN9mjn7UeSVIEgqACFJ MnRZNygKoQSwsRDRoAzoyXTwN6Q3E7xilvenzWM+0YhZUUoH/wpWdyQdbBKmQqsv OSwZQLXNjmMrv/1Uu4NjvNdGPWRhGlDxNB7SZ0HhU1G8nTKJYNi2y27W262gjbrZ 2eP749f7YbEPq2NnGvo8LkgU9JQbYPsY+AzExl6y6VJdeWsDgugd/VQCckTIpFAi Bj/Db+eWaxdLvSmCpzo6swo9sffXz28= -----END CERTIFICATE-----Generated at Sun Jan 25 15:27:21 2026 by rpki-client