This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98fa5287-41f0-3399-b87f-3e4f2b0950f2.roa File: 98fa5287-41f0-3399-b87f-3e4f2b0950f2.roa (raw, json) Hash identifier: crTDey/0zdBN9BjmBg7zZq/R3/58XpfXpR86EP6zEyA= Subject key identifier: 33:07:36:98:7D:01:91:CC:6E:46:1D:D1:E9:E2:76:95:AD:1A:3F:ED Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C45A800578FB3C09C578396C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98fa5287-41f0-3399-b87f-3e4f2b0950f2.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 19527 IP address blocks: 34.0.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:00:57:8f:b3:c0:9c:57:83:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=dacbfd77-5527-46a0-8842-1cf151d9ffc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:1c:de:3a:43:7d:1b:a7:ff:55:d6:4f:d9: 58:77:09:8f:bf:53:a3:64:6d:df:49:58:b9:35:0f: a8:7a:c1:91:24:8e:1e:ce:e5:b9:f3:c0:d6:a1:3c: 66:fa:a4:8d:35:dd:71:f3:fe:0c:80:7e:29:0f:6a: bc:47:d6:67:7f:ea:3d:1b:a0:8c:48:54:6d:7d:2b: 1b:ff:bc:7d:f2:13:16:bc:79:5b:07:a6:73:4a:c0: bc:5f:95:8a:99:9c:8f:34:a1:fd:b9:44:23:07:20: 65:d5:9b:c0:95:e1:31:3c:96:fd:16:7a:fc:1c:2e: 4f:70:83:05:47:43:67:e6:d0:b6:74:39:0c:83:d5: 37:56:f1:6e:0b:38:88:a3:01:f1:e0:25:8f:e0:d7: 3f:79:2a:78:41:1c:6a:bb:7b:b9:40:b1:79:43:3c: 01:56:e1:24:3e:3e:90:70:cf:e5:68:80:32:29:9e: c0:21:00:82:2f:17:7a:c2:fe:09:27:13:e0:e6:44: 7e:12:15:0c:27:4c:64:96:44:8b:0e:65:f1:84:13: d4:17:eb:e7:66:fd:14:65:e2:83:4f:35:9e:df:16: 65:f8:c0:63:1d:c7:fe:21:73:f6:42:95:d3:a7:31: e3:6d:d4:17:d7:d2:c1:84:a0:5d:ec:63:0a:5c:83: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:36:98:7D:01:91:CC:6E:46:1D:D1:E9:E2:76:95:AD:1A:3F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98fa5287-41f0-3399-b87f-3e4f2b0950f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:af:a8:ec:02:95:a7:f9:c5:77:37:1a:4a:bf:00:f6:bc:b3: c5:67:66:df:79:61:c4:79:1a:5f:b3:c4:54:e4:b9:7e:70:fc: 28:c3:7a:be:41:79:1d:5b:27:4a:ef:48:d5:b4:13:19:fc:cb: 0c:88:5e:c6:9c:09:68:7e:88:b8:12:3d:e6:14:d7:22:a0:f4: 9a:4c:58:54:a2:a8:67:85:20:cf:f4:4b:72:a2:e6:a9:20:40: 55:6f:9e:7e:db:47:e1:23:ce:0c:30:1a:5d:7d:54:22:8d:dc: 22:bf:f8:a8:e8:26:39:c7:a7:85:95:1f:fd:65:81:19:c1:26: 31:d4:61:d2:a7:d6:2b:1e:5d:33:fb:f2:71:b5:36:42:34:18: 40:8e:d0:86:99:37:09:0e:96:67:48:7b:a3:95:84:f5:a8:7c: 43:c8:f3:9a:88:5e:90:1f:22:34:db:35:f8:93:86:6a:63:22: 14:ec:de:6c:62:79:b7:8b:35:c3:d5:23:dc:28:ab:ec:28:ec: 16:e9:eb:6d:aa:ef:bd:3d:9f:8c:91:8b:e4:7c:98:32:b2:39: 97:c3:5c:82:86:b6:73:07:17:1a:bf:33:c6:c8:a2:69:bc:a7: 5c:40:16:40:fa:23:24:33:ac:92:9e:82:c4:13:40:df:0e:60: 9a:48:c6:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqABXj7PAnFeDlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZGFjYmZkNzctNTUyNy00NmEwLTg4NDItMWNmMTUxZDlmZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicwc3jpDfRun/1XWT9lYdwmPv1OjZG3fSVi5 NQ+oesGRJI4ezuW588DWoTxm+qSNNd1x8/4MgH4pD2q8R9Znf+o9G6CMSFRtfSsb /7x98hMWvHlbB6ZzSsC8X5WKmZyPNKH9uUQjByBl1ZvAleExPJb9Fnr8HC5PcIMF R0Nn5tC2dDkMg9U3VvFuCziIowHx4CWP4Nc/eSp4QRxqu3u5QLF5QzwBVuEkPj6Q cM/laIAyKZ7AIQCCLxd6wv4JJxPg5kR+EhUMJ0xklkSLDmXxhBPUF+vnZv0UZeKD TzWe3xZl+MBjHcf+IXP2QpXTpzHjbdQX19LBhKBd7GMKXIMw6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMHNph9AZHMbkYd0enidpWtGj/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOThmYTUyODctNDFmMC0z Mzk5LWI4N2YtM2U0ZjJiMDk1MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCvqOwClaf5xXc3Gkq/APa8s8VnZt95YcR5Gl+zxFTkuX5w/CjDer5B eR1bJ0rvSNW0Exn8ywyIXsacCWh+iLgSPeYU1yKg9JpMWFSiqGeFIM/0S3Ki5qkg QFVvnn7bR+EjzgwwGl19VCKN3CK/+KjoJjnHp4WVH/1lgRnBJjHUYdKn1iseXTP7 8nG1NkI0GECO0IaZNwkOlmdIe6OVhPWofEPI85qIXpAfIjTbNfiThmpjIhTs3mxi ebeLNcPVI9woq+wo7Bbp622q7709n4yRi+R8mDKyOZfDXIKGtnMHFxq/M8bIomm8 p1xAFkD6IyQzrJKegsQTQN8OYJpIxuY= -----END CERTIFICATE-----Generated at Wed Dec 24 08:49:32 2025 by rpki-client