This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa File: aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa (raw, json) Hash identifier: xi31h7ZTMAW+8MLMnwWCfW3Js7qJW2uZr0T/g7/jPvo= Subject key identifier: 28:BB:D5:79:68:90:44:FB:01:31:C7:7B:05:A7:FC:D8:B8:6D:A8:6E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C4E0684DE23A2FA6D01A01F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.154.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:84:de:23:a2:fa:6d:01:a0:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=21c08d9f-f5ab-4fca-be8b-80b67f5170fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6a:22:af:53:f2:0e:b0:92:bc:66:47:47:05: b1:31:76:71:08:fe:7f:d4:45:68:6a:b5:99:da:96: ac:00:5b:d2:5e:29:3c:50:0e:ea:d0:81:b8:8a:94: ca:94:1c:92:64:9e:a8:ca:b7:fa:e3:ab:e7:19:66: 01:31:c1:71:80:89:43:22:21:97:3c:d0:d9:f7:17: 81:cd:e7:74:81:65:60:ea:d5:f2:72:0e:d5:b5:83: c1:95:91:74:27:fc:05:02:54:5c:30:44:cb:21:50: 24:fb:a6:fd:99:8f:de:bb:28:f4:54:1c:16:19:bb: b7:37:57:10:99:c0:2a:11:be:a8:48:a7:82:19:78: 89:fa:e3:dc:6e:22:9b:e4:14:dd:3b:a1:4d:90:3b: ab:3a:59:2f:55:8a:dd:f7:0a:c9:8a:20:81:07:86: 7e:e1:fa:f2:8b:b9:80:32:86:28:0b:ab:b0:68:b7: cb:32:47:3c:8b:a3:2f:45:9e:a6:28:82:76:ea:2f: 67:e9:6f:75:96:c6:1a:8a:fa:fe:4b:84:93:17:5c: 40:f1:96:2e:e3:d0:ee:26:25:88:fc:59:b4:64:ac: bd:53:ee:c9:32:36:98:c7:75:f0:09:a6:e2:a4:2a: ef:70:de:ae:08:c6:9d:72:5e:c2:6b:63:af:3e:db: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BB:D5:79:68:90:44:FB:01:31:C7:7B:05:A7:FC:D8:B8:6D:A8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.154.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:71:f2:0f:cc:c2:70:46:7e:6b:97:fe:4c:05:02:96:da:b3: a8:e8:71:7e:74:82:23:ea:76:b9:01:88:1a:a1:b9:5b:a3:a0: 60:53:4f:e0:ad:1a:c3:d0:28:f8:83:eb:c0:1f:a0:cc:6f:65: 44:1e:08:e2:a2:4f:43:6f:9d:45:ff:23:3c:3e:c0:99:50:12: 41:61:53:ea:c8:91:64:95:09:e6:e9:c0:5a:b7:b2:f5:9a:77: 64:f0:da:31:c7:f8:eb:20:91:29:ba:af:c3:d2:3d:a2:44:b7: 57:d8:a3:76:1b:5a:8e:39:61:30:0a:31:3b:c8:7a:a6:7d:48: 15:b3:b1:7c:dc:97:51:7d:44:e3:ce:dd:9e:ba:71:c1:73:fb: 37:6f:2c:8d:2d:97:a3:f1:85:1b:3f:32:16:0e:4d:5d:4e:6b: 72:80:60:cf:ed:97:60:e5:58:f5:70:f3:30:33:3c:7b:4f:3b: 7b:b0:88:27:33:10:ce:7b:90:76:80:d5:a8:55:5a:e4:74:16: d2:4c:09:e7:19:25:35:e5:35:b6:1b:36:6e:60:ec:4b:b5:4c: d9:53:9a:61:94:a7:b2:cf:07:c6:22:91:a9:fc:fc:e5:aa:07: 97:4e:7d:b9:2e:41:61:09:71:44:9b:57:8d:13:f3:3a:17:6a: c7:05:eb:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBoTeI6L6bQGgHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk MjFjMDhkOWYtZjVhYi00ZmNhLWJlOGItODBiNjdmNTE3MGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWoir1PyDrCSvGZHRwWxMXZxCP5/1EVoarWZ 2pasAFvSXik8UA7q0IG4ipTKlBySZJ6oyrf646vnGWYBMcFxgIlDIiGXPNDZ9xeB zed0gWVg6tXycg7VtYPBlZF0J/wFAlRcMETLIVAk+6b9mY/euyj0VBwWGbu3N1cQ mcAqEb6oSKeCGXiJ+uPcbiKb5BTdO6FNkDurOlkvVYrd9wrJiiCBB4Z+4fryi7mA MoYoC6uwaLfLMkc8i6MvRZ6mKIJ26i9n6W91lsYaivr+S4STF1xA8ZYu49DuJiWI /Fm0ZKy9U+7JMjaYx3XwCabipCrvcN6uCMadcl7Ca2OvPts8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi71XlokET7ATHHewWn/Ni4bahuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE5OWJiZGEtZjBjYy0z NjhiLTlmNzktNWNlNGYzZTcxYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5x8g/MwnBGfmuX/kwFApbas6jocX50giPqdrkBiBqhuVujoGBTT+Ct GsPQKPiD68AfoMxvZUQeCOKiT0NvnUX/Izw+wJlQEkFhU+rIkWSVCebpwFq3svWa d2Tw2jHH+OsgkSm6r8PSPaJEt1fYo3YbWo45YTAKMTvIeqZ9SBWzsXzcl1F9ROPO 3Z66ccFz+zdvLI0tl6PxhRs/MhYOTV1Oa3KAYM/tl2DlWPVw8zAzPHtPO3uwiCcz EM57kHaA1ahVWuR0FtJMCecZJTXlNbYbNm5g7Eu1TNlTmmGUp7LPB8Yikan8/OWq B5dOfbkuQWEJcUSbV40T8zoXascF6w8= -----END CERTIFICATE-----Generated at Sun Jan 25 16:26:00 2026 by rpki-client