This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa8bcd3-b419-3678-be0e-fb0871e49b99.roa File: afa8bcd3-b419-3678-be0e-fb0871e49b99.roa (raw, json) Hash identifier: cyQ8fSCP0BGSXr+MLuEGOkoqiljFGnXlf1WNc3NIPFY= Subject key identifier: 66:4F:58:94:C3:6B:50:72:16:B1:76:BA:77:85:AF:F6:A3:5D:94:F4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C4871446CB828F3E6CB4AB380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa8bcd3-b419-3678-be0e-fb0871e49b99.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 35.201.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:44:6c:b8:28:f3:e6:cb:4a:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=3c552382-600f-454b-afa2-161b29c9583e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:fb:1b:99:bd:a7:ab:b0:21:04:e3:93:16: 62:16:75:6b:7d:ef:ad:e1:7a:c4:b1:d5:6e:28:1c: b5:33:10:03:55:f6:25:6f:f6:16:f5:14:b9:e6:58: 8a:86:b1:41:91:94:bd:9e:ea:37:a3:19:13:3e:ed: 36:e4:95:85:aa:a2:dc:a5:ee:a5:c5:eb:ca:ee:5b: 27:61:a8:f5:48:34:c0:e9:a2:da:04:f1:80:a7:76: 39:82:d9:52:5d:7c:0a:ea:ca:45:8d:9b:62:54:8d: 2b:c2:d7:87:e4:2a:f7:62:b8:7c:c4:a8:5c:57:5a: 63:b9:6b:5a:b1:97:35:da:e2:4a:4c:1b:5d:38:06: 33:b4:01:2f:f8:53:4d:12:9c:26:2d:bd:1c:d6:ce: a4:d9:80:8d:00:c3:ad:ab:0e:7e:cb:80:8d:ea:4d: 07:3b:6e:84:9f:65:8e:51:27:99:35:6e:d4:84:b7: 56:ab:31:73:ee:42:02:d1:85:e8:20:1a:73:1c:df: 29:2a:7e:e9:84:a3:ec:ad:57:bf:cf:63:72:ee:c9: bb:20:f9:4f:c5:b9:06:ec:39:f7:c4:73:18:32:81: 71:bd:2d:0b:b2:e6:4a:a9:e4:01:6b:f8:ff:bb:28: ba:f2:d0:f5:aa:2e:54:96:4e:2f:1b:fb:8a:85:4c: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4F:58:94:C3:6B:50:72:16:B1:76:BA:77:85:AF:F6:A3:5D:94:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa8bcd3-b419-3678-be0e-fb0871e49b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f0:29:e8:c0:61:63:15:1d:ec:01:5d:1a:28:1f:0f:ce:1e: 6c:08:3b:ac:85:d1:d7:24:e3:74:68:76:80:29:23:9e:6d:46: 01:51:99:38:e7:eb:80:a0:67:7b:ed:fc:66:72:7c:af:6a:f6: c2:45:75:2c:01:41:27:9f:b5:7e:5f:16:05:25:e6:65:4a:96: e8:ae:c1:45:91:6e:cf:e0:97:11:59:ab:5f:35:fb:54:08:f2: c1:e9:12:00:25:d5:0e:77:e3:b7:3b:4f:0f:9c:30:85:8d:0a: 39:da:b7:c7:36:a8:a5:df:15:00:3c:0d:e6:88:e4:04:9b:51: 98:cd:b7:e0:11:63:c0:e2:a3:df:74:05:91:4c:d7:33:66:67: 7a:a3:cc:50:e5:71:17:b2:5d:af:63:05:81:17:fc:7b:7e:76: 98:7e:21:9f:13:f7:e0:d6:f9:ad:f5:ed:f9:97:9a:b4:b8:70: b8:74:5c:c7:50:48:4c:5f:fd:cf:83:d8:fd:40:ec:68:47:53: fe:b9:c8:62:ae:41:d9:6d:bf:2a:c6:5b:26:05:b0:6e:c7:24: c4:0f:b7:ce:1c:a5:5a:9b:ea:ac:30:6f:0a:bd:f4:4f:4d:a5: 56:76:24:ab:ca:27:09:ac:ba:a0:ff:24:59:4f:6b:13:da:36: 8f:37:67:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcURsuCjz5stKs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk M2M1NTIzODItNjAwZi00NTRiLWFmYTItMTYxYjI5Yzk1ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pz7G5m9p6uwIQTjkxZiFnVrfe+t4XrEsdVu KBy1MxADVfYlb/YW9RS55liKhrFBkZS9nuo3oxkTPu025JWFqqLcpe6lxevK7lsn Yaj1SDTA6aLaBPGAp3Y5gtlSXXwK6spFjZtiVI0rwteH5Cr3Yrh8xKhcV1pjuWta sZc12uJKTBtdOAYztAEv+FNNEpwmLb0c1s6k2YCNAMOtqw5+y4CN6k0HO26En2WO USeZNW7UhLdWqzFz7kIC0YXoIBpzHN8pKn7phKPsrVe/z2Ny7sm7IPlPxbkG7Dn3 xHMYMoFxvS0LsuZKqeQBa/j/uyi68tD1qi5Ulk4vG/uKhUy9OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZPWJTDa1ByFrF2uneFr/ajXZT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZhOGJjZDMtYjQxOS0z Njc4LWJlMGUtZmIwODcxZTQ5Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3wKejAYWMVHewBXRooHw/OHmwIO6yF0dck43RodoApI55tRgFRmTjn 64CgZ3vt/GZyfK9q9sJFdSwBQSeftX5fFgUl5mVKluiuwUWRbs/glxFZq181+1QI 8sHpEgAl1Q5347c7Tw+cMIWNCjnat8c2qKXfFQA8DeaI5ASbUZjNt+ARY8Dio990 BZFM1zNmZ3qjzFDlcReyXa9jBYEX/Ht+dph+IZ8T9+DW+a317fmXmrS4cLh0XMdQ SExf/c+D2P1A7GhHU/65yGKuQdltvyrGWyYFsG7HJMQPt84cpVqb6qwwbwq99E9N pVZ2JKvKJwmsuqD/JFlPaxPaNo83Z/Y= -----END CERTIFICATE-----Generated at Sun Jan 25 14:47:30 2026 by rpki-client