This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a859e1d-29ec-3edd-b158-d4178e261108.roa File: 2a859e1d-29ec-3edd-b158-d4178e261108.roa (raw, json) Hash identifier: 3Ar3HridsJkO0e8Jyz3IBCXgr25oiRpFzERrHuUKolY= Subject key identifier: 64:A8:BF:BD:6D:DD:5D:B7:26:CD:0D:32:93:F6:71:DA:5C:90:B2:45 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C4871B192C224644EF31FC9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a859e1d-29ec-3edd-b158-d4178e261108.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 35.222.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:b1:92:c2:24:64:4e:f3:1f:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=70c08663-b835-4b54-b1b2-f6c26bac47cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:a4:1a:99:e9:c1:5f:0d:a8:9d:77:e1:64: d5:73:fe:ad:f1:50:01:e7:87:80:a7:33:4c:9c:ba: e9:89:d2:4b:86:19:0f:22:b2:92:0a:58:a6:c2:d8: 19:da:f7:09:3a:ed:7d:7b:bc:7c:2d:72:86:6d:d8: f9:95:2b:fe:c4:58:f5:56:7a:bc:c6:f3:ff:ff:df: 9e:01:e6:a1:1a:93:48:c4:41:13:cb:c4:92:c7:aa: 96:ba:24:26:f8:1f:b3:eb:03:81:25:6b:f3:6e:e4: b7:5b:ac:73:af:63:dd:dd:d4:ab:06:d8:87:eb:44: a8:4d:85:89:2d:cf:ce:1e:7b:81:f2:3e:fe:7a:82: 26:6c:c3:0a:57:ea:18:c6:d5:15:f8:61:1e:35:f3: 2c:48:2d:02:56:0f:67:04:3d:e7:98:e8:9e:0d:40: 34:3c:63:04:c6:50:5b:bb:c4:e8:ae:4c:b8:c7:d9: bc:3a:e0:82:c7:01:24:7e:a2:72:1b:a0:3f:56:c2: 83:91:0c:53:f3:d5:51:ce:54:70:89:26:a0:2f:54: 2e:9a:09:ec:51:48:42:1e:21:ce:09:df:67:fa:ae: 0d:a3:a7:c9:92:2e:8e:30:6e:b8:35:3b:db:fc:25: 7a:e2:ae:8c:8c:d6:d6:af:4f:ad:9e:05:6d:60:26: 21:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A8:BF:BD:6D:DD:5D:B7:26:CD:0D:32:93:F6:71:DA:5C:90:B2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a859e1d-29ec-3edd-b158-d4178e261108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:62:af:f7:44:57:cc:f8:ab:30:b5:0d:c4:d8:04:29:ff:9e: 04:61:a0:7e:e9:76:cd:d8:99:d8:fa:c4:6a:09:24:4b:3f:4c: 9c:a0:4a:13:40:50:39:c5:a6:2d:64:a6:2a:13:53:25:0d:a3: b2:ed:e2:e1:97:14:96:db:9b:5f:5c:62:28:54:a8:5c:2c:ef: 88:0a:fe:bd:8b:0e:61:b6:b1:d6:2b:aa:28:31:f2:54:7e:ca: d9:ba:ec:61:4a:12:fc:54:36:ee:d6:18:56:9e:f4:ed:d9:79: 26:98:15:19:67:7c:d5:c6:93:01:7b:89:62:a8:62:0c:76:00: f8:14:40:97:d1:a3:7e:95:f4:f8:aa:ac:04:a4:ec:b8:20:75: 1d:e4:45:b7:65:ed:a6:2a:be:db:b6:d2:7c:57:b6:7a:bd:d8: 1e:c4:3b:97:fe:eb:f9:c9:a6:c7:37:4c:83:4d:d5:25:a8:5c: 4e:05:0a:87:14:90:c1:b9:8e:a2:3a:c0:a4:42:a9:78:9b:00: 80:85:1d:f6:62:83:9f:cb:87:63:95:96:ce:92:e0:da:40:de: 2d:fa:6c:12:3a:7c:29:73:0f:df:3c:8e:fe:2b:8f:1c:e2:c6: bb:b1:2e:2d:28:29:1e:50:58:e9:25:14:35:3e:e8:ca:e9:34: a1:ee:0a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcbGSwiRkTvMfycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk NzBjMDg2NjMtYjgzNS00YjU0LWIxYjItZjZjMjZiYWM0N2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA6kGpnpwV8NqJ134WTVc/6t8VAB54eApzNM nLrpidJLhhkPIrKSClimwtgZ2vcJOu19e7x8LXKGbdj5lSv+xFj1Vnq8xvP//9+e AeahGpNIxEETy8SSx6qWuiQm+B+z6wOBJWvzbuS3W6xzr2Pd3dSrBtiH60SoTYWJ Lc/OHnuB8j7+eoImbMMKV+oYxtUV+GEeNfMsSC0CVg9nBD3nmOieDUA0PGMExlBb u8Torky4x9m8OuCCxwEkfqJyG6A/VsKDkQxT89VRzlRwiSagL1QumgnsUUhCHiHO Cd9n+q4No6fJki6OMG64NTvb/CV64q6MjNbWr0+tngVtYCYhgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSov71t3V23Js0NMpP2cdpckLJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmE4NTllMWQtMjllYy0z ZWRkLWIxNTgtZDQxNzhlMjYxMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdir/dEV8z4qzC1DcTYBCn/ngRhoH7pds3Ymdj6xGoJJEs/TJygShNA UDnFpi1kpioTUyUNo7Lt4uGXFJbbm19cYihUqFws74gK/r2LDmG2sdYrqigx8lR+ ytm67GFKEvxUNu7WGFae9O3ZeSaYFRlnfNXGkwF7iWKoYgx2APgUQJfRo36V9Piq rASk7LggdR3kRbdl7aYqvtu20nxXtnq92B7EO5f+6/nJpsc3TINN1SWoXE4FCocU kMG5jqI6wKRCqXibAICFHfZig5/Lh2OVls6S4NpA3i36bBI6fClzD988jv4rjxzi xruxLi0oKR5QWOklFDU+6MrpNKHuCo8= -----END CERTIFICATE-----Generated at Sat Dec 27 00:49:55 2025 by rpki-client