This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af01f159-d206-33a9-96fa-e15512e82350.roa File: af01f159-d206-33a9-96fa-e15512e82350.roa (raw, json) Hash identifier: ZRnMGytkrj22kB/lBVSB/TfRj72SEW6vbWTZ0tWgmwQ= Subject key identifier: 1B:EC:88:61:51:47:0F:F9:C0:75:A3:77:F3:E8:81:B5:D6:DB:E0:B5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C48716B75C95D73FBB14790E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af01f159-d206-33a9-96fa-e15512e82350.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.68.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:6b:75:c9:5d:73:fb:b1:47:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=21685c3a-aebb-4444-a4a4-d48a4dac8f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:bc:3a:37:7c:00:bf:36:d0:06:8a:1c:b1: a1:8c:24:0f:38:33:7e:8b:6d:60:7f:ce:b5:77:1c: 63:c5:1a:e2:6d:01:79:41:10:9b:f1:ea:02:0c:1d: 64:36:b0:26:bc:6d:10:92:a0:c4:72:44:e0:9f:20: ce:59:9d:f6:ed:fa:83:de:54:86:b6:fb:c8:81:60: 66:0d:94:8d:e8:1d:92:94:59:ab:32:cf:8e:0d:59: 40:6b:86:70:40:2f:a4:dd:a6:3d:79:9f:1c:25:e2: 3a:32:49:7f:60:2a:d0:82:4d:71:1b:1c:eb:da:20: d1:19:77:17:b3:f4:81:18:72:79:bd:2c:9f:91:0c: 0e:91:a9:c6:a4:74:a2:85:d4:32:15:91:38:25:67: f2:56:f8:0c:8a:04:4b:56:3d:87:c0:98:01:e8:f2: 3f:e0:b4:fd:39:b8:46:c1:48:99:67:6d:54:71:a5: db:a9:cb:23:f1:60:97:53:06:2b:1a:ac:f3:4b:7f: 6b:a5:dc:7d:bb:d9:25:5c:55:b4:7e:b2:06:40:4f: d9:39:0c:bc:3f:0c:61:ac:d9:7d:d5:c3:09:27:d4: 10:d4:26:7f:14:c6:c1:b0:26:7e:dd:71:72:ce:60: 27:c0:64:f8:67:68:ee:59:f7:63:d2:8f:0a:76:5f: c2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EC:88:61:51:47:0F:F9:C0:75:A3:77:F3:E8:81:B5:D6:DB:E0:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af01f159-d206-33a9-96fa-e15512e82350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:3e:44:88:2e:9c:a8:ea:b7:55:9b:51:55:67:22:27:05:f6: 77:40:2c:55:89:d6:d0:76:e8:b4:e3:15:fc:31:de:a5:6d:ba: 6d:1d:65:80:db:26:d0:74:a3:ea:02:79:a4:43:55:61:6c:50: 84:bc:ca:75:0d:88:f9:64:6a:cc:60:ca:9f:54:b4:94:67:23: e9:28:1d:85:65:64:de:33:70:16:f9:69:69:f5:75:ee:c1:79: 17:e3:bc:32:2f:40:ad:ef:f5:c0:6f:04:2f:9f:1c:94:52:b3: 59:1e:62:8c:f4:5f:4c:ce:a3:6b:d9:b1:4e:69:fc:6f:2e:00: 16:8c:e2:a4:76:9d:a1:17:2d:fd:99:af:27:b3:54:46:9e:9f: 69:2d:35:be:a6:45:68:ee:5c:e2:97:8f:03:2a:59:27:26:e6: 0e:a9:cf:98:60:4e:40:97:19:07:9d:05:f9:e8:51:5e:49:22: fe:5f:dc:93:17:b2:40:02:e9:90:8a:39:e7:4b:64:a2:e4:5f: 79:49:bc:42:c4:f0:f0:43:98:0d:79:0a:fe:b4:6f:fc:72:fe: 19:5b:04:71:b5:e0:79:d9:70:45:68:14:c7:25:13:9c:0c:c5: 86:f2:fd:31:4e:79:f0:23:7e:cb:8a:9f:57:81:82:68:65:de: a8:2b:db:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcWt1yV1z+7FHkOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MjE2ODVjM2EtYWViYi00NDQ0LWE0YTQtZDQ4YTRkYWM4ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnru8Ojd8AL820AaKHLGhjCQPODN+i21gf861 dxxjxRribQF5QRCb8eoCDB1kNrAmvG0QkqDEckTgnyDOWZ327fqD3lSGtvvIgWBm DZSN6B2SlFmrMs+ODVlAa4ZwQC+k3aY9eZ8cJeI6Mkl/YCrQgk1xGxzr2iDRGXcX s/SBGHJ5vSyfkQwOkanGpHSihdQyFZE4JWfyVvgMigRLVj2HwJgB6PI/4LT9ObhG wUiZZ21UcaXbqcsj8WCXUwYrGqzzS39rpdx9u9klXFW0frIGQE/ZOQy8PwxhrNl9 1cMJJ9QQ1CZ/FMbBsCZ+3XFyzmAnwGT4Z2juWfdj0o8Kdl/CqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvsiGFRRw/5wHWjd/PogbXW2+C1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWYwMWYxNTktZDIwNi0z M2E5LTk2ZmEtZTE1NTEyZTgyMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ+RIgunKjqt1WbUVVnIicF9ndALFWJ1tB26LTjFfwx3qVtum0dZYDb JtB0o+oCeaRDVWFsUIS8ynUNiPlkasxgyp9UtJRnI+koHYVlZN4zcBb5aWn1de7B eRfjvDIvQK3v9cBvBC+fHJRSs1keYoz0X0zOo2vZsU5p/G8uABaM4qR2naEXLf2Z ryezVEaen2ktNb6mRWjuXOKXjwMqWScm5g6pz5hgTkCXGQedBfnoUV5JIv5f3JMX skAC6ZCKOedLZKLkX3lJvELE8PBDmA15Cv60b/xy/hlbBHG14HnZcEVoFMclE5wM xYby/TFOefAjfsuKn1eBgmhl3qgr24s= -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:18 2025 by rpki-client