This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa File: c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa (raw, json) Hash identifier: d6V0kCmpBHdDfz9Rwqn9bxAX4TjhdzTNeDHDYpJNOVg= Subject key identifier: 4A:52:66:ED:67:27:1B:E8:00:3F:3E:D0:D6:B4:12:09:D4:C4:2A:F0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C487151CF511721093587CA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.168.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:51:cf:51:17:21:09:35:87:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=0d0c8d60-8086-45fc-b317-d2e74d493eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:09:c2:8d:0d:b7:e6:33:f8:16:04:69:6c: 4d:e4:34:10:fa:6c:78:ba:f0:2b:be:9b:49:00:34: c7:17:f0:49:8f:99:d9:38:f0:ad:ea:bd:ce:45:59: 14:3e:9f:eb:a3:e5:cf:9f:7e:2d:17:a0:f6:d7:bb: ec:b1:72:4c:82:1b:e1:63:82:08:96:00:f6:d2:6a: 66:85:de:a5:51:c0:93:da:90:bd:d8:3e:88:5d:41: c5:f6:e6:6c:65:94:bf:d3:18:2f:f1:6e:3d:0f:53: 00:12:4e:ae:c0:04:9d:88:2d:ab:aa:d7:4c:75:9e: e9:d8:99:3a:a9:ae:94:a1:ca:c7:96:0a:d8:a9:c4: 97:e3:32:72:c1:d8:b8:14:73:72:ea:77:b5:07:81: 05:d5:ef:0e:cf:30:df:7d:cf:e4:e0:29:17:e3:d9: 16:86:73:78:16:55:88:88:0d:8e:c9:77:b8:39:7e: 2d:84:e0:3e:ae:f0:c6:ab:b5:07:a7:db:3d:3c:85: 5a:50:84:70:2b:d5:16:a2:34:1d:0f:74:75:2e:4b: 48:20:8a:32:ca:52:8b:f8:41:2d:7e:b5:ac:46:65: 04:18:c8:15:e2:df:c8:4b:79:69:22:21:85:c9:0e: 4d:fc:87:47:dd:2b:3f:21:33:7d:c1:03:bd:d1:71: 9f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:52:66:ED:67:27:1B:E8:00:3F:3E:D0:D6:B4:12:09:D4:C4:2A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.168.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bb:77:dc:1d:45:c8:df:84:7a:aa:a7:95:8e:49:6c:2f:2b: ad:9f:c4:6b:85:65:5c:09:ea:aa:6d:22:57:b4:db:fd:8b:0e: c2:04:3d:3e:89:24:34:75:8f:92:d2:e9:85:c0:48:1b:20:4b: f9:2e:60:99:8b:38:4d:1d:03:1a:f0:bd:00:1c:f6:e8:61:66: a0:c2:85:71:81:ce:c1:7f:9c:f1:a7:48:b2:13:ce:cf:b9:7e: 49:11:ce:66:1b:51:68:83:be:81:13:23:f5:0d:df:cb:b5:ca: b5:22:10:ed:aa:51:2f:33:32:ac:25:4a:9e:73:5c:c4:6d:be: 22:91:53:11:ac:1b:c6:55:6c:c3:1c:07:99:3d:3c:38:3d:37: 10:76:58:c5:31:98:06:64:9b:af:ae:0b:a9:d2:0d:a5:3c:a6: e9:b8:39:4b:47:26:c2:00:f0:8a:21:2d:2f:2d:ae:32:a8:80: bb:e2:f9:8c:30:52:04:77:50:0b:fa:55:cb:c8:ea:3d:4e:c0: 73:cd:ca:6d:6e:29:cf:b8:91:cd:59:7c:5c:38:69:97:27:6f: af:ce:e1:3d:45:8d:3a:9c:f4:99:75:39:ac:3a:95:ee:19:a1: 12:ba:35:7f:8f:eb:6f:86:66:96:ec:53:de:6f:80:47:40:9f: 3a:f5:1d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcVHPURchCTWHyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MGQwYzhkNjAtODA4Ni00NWZjLWIzMTctZDJlNzRkNDkzZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hIJwo0Nt+Yz+BYEaWxN5DQQ+mx4uvArvptJ ADTHF/BJj5nZOPCt6r3ORVkUPp/ro+XPn34tF6D217vssXJMghvhY4IIlgD20mpm hd6lUcCT2pC92D6IXUHF9uZsZZS/0xgv8W49D1MAEk6uwASdiC2rqtdMdZ7p2Jk6 qa6UocrHlgrYqcSX4zJywdi4FHNy6ne1B4EF1e8OzzDffc/k4CkX49kWhnN4FlWI iA2OyXe4OX4thOA+rvDGq7UHp9s9PIVaUIRwK9UWojQdD3R1LktIIIoyylKL+EEt frWsRmUEGMgV4t/IS3lpIiGFyQ5N/IdH3Ss/ITN9wQO90XGfSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpSZu1nJxvoAD8+0Na0EgnUxCrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzhhZTA3MmYtYzMwOC0z ZDYyLThiYTgtNGQzYmZhYzUxMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+7d9wdRcjfhHqqp5WOSWwvK62fxGuFZVwJ6qptIle02/2LDsIEPT6J JDR1j5LS6YXASBsgS/kuYJmLOE0dAxrwvQAc9uhhZqDChXGBzsF/nPGnSLITzs+5 fkkRzmYbUWiDvoETI/UN38u1yrUiEO2qUS8zMqwlSp5zXMRtviKRUxGsG8ZVbMMc B5k9PDg9NxB2WMUxmAZkm6+uC6nSDaU8pum4OUtHJsIA8IohLS8trjKogLvi+Yww UgR3UAv6VcvI6j1OwHPNym1uKc+4kc1ZfFw4aZcnb6/O4T1FjTqc9Jl1Oaw6le4Z oRK6NX+P62+GZpbsU95vgEdAnzr1HQw= -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:01 2026 by rpki-client