This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa File: cafacae6-4253-3d5e-b635-56c65cb9329e.roa (raw, json) Hash identifier: mCzt8PerFgXo86ADO/ZLYUKxDPk6CRgXJy20n/Cbwqs= Subject key identifier: 61:CF:56:7D:C6:4F:A4:51:F7:9F:C3:70:70:AC:CE:47:26:5B:84:24 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C487191D5C81513D527332600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 396982 IP address blocks: 34.124.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:91:d5:c8:15:13:d5:27:33:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=b5f5b780-27e7-4893-b6a7-66d583df91e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:60:ad:a0:0c:a7:65:5c:24:b9:09:50:2c: 3a:90:d9:e7:a1:54:41:ac:f7:d3:b2:49:f6:37:1a: f0:ca:0f:09:29:3a:41:80:97:1f:c0:62:d4:c5:8c: 09:9c:ac:8a:c0:6e:d5:c9:cd:67:29:91:30:4b:94: 4b:79:db:82:2a:bb:dc:dd:45:54:c0:ff:03:c5:c0: e2:50:b5:c8:d0:5a:ce:94:16:8a:67:89:a1:7d:45: 78:9e:63:00:b7:3e:3c:22:37:b6:13:15:a0:0d:ac: a7:27:7a:82:4b:74:84:02:80:c8:9a:8a:cd:13:b1: b1:78:6e:87:31:4e:86:58:3a:a6:a3:c9:f2:74:65: 00:23:01:79:56:4c:c1:ee:77:70:78:a7:ba:bf:80: 73:7e:35:ae:97:49:12:38:e4:07:2c:b1:d7:f3:4e: de:8d:4f:6c:ec:ac:d4:7c:25:db:9f:19:7c:f8:d1: 42:e1:fa:db:e5:1d:ac:cb:2a:af:b3:39:24:c9:40: 11:38:c1:13:4f:63:0c:29:2b:39:33:52:c5:89:e6: 37:c6:77:72:0b:e1:17:dc:cf:4f:c2:dc:8d:06:79: 84:cc:15:0b:df:be:5f:10:3b:7d:80:6c:ef:5e:ce: a6:19:60:50:6a:9a:82:63:8a:01:a2:63:56:bd:3f: e0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CF:56:7D:C6:4F:A4:51:F7:9F:C3:70:70:AC:CE:47:26:5B:84:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafacae6-4253-3d5e-b635-56c65cb9329e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:94:63:92:e0:1a:d6:20:f2:c3:74:00:e7:18:20:06:2e:61: 1b:a6:9f:4d:21:b9:b2:d6:bb:8e:eb:e2:dd:ae:3e:af:fc:fe: 23:9f:a3:57:1b:b7:5a:b6:bb:d4:d3:f6:70:1e:f2:f2:06:66: f7:5f:08:97:0c:e8:dc:f3:28:fc:55:a3:b2:d5:77:5c:54:32: 70:fa:82:44:f7:7b:da:77:b3:ad:de:fd:9e:7d:61:52:1b:ad: 0b:d3:4c:f3:ad:cd:fd:87:13:d1:a7:2b:cd:38:c1:a7:59:08: 9c:08:2e:e6:77:09:66:2b:b9:02:ee:f5:7f:78:e1:80:18:01: 69:78:2a:39:4f:58:6c:d4:99:94:0a:40:af:8f:81:71:cd:74: 49:82:fa:19:60:bf:24:45:12:dd:82:68:b4:22:35:5e:04:23: a1:b3:9c:4d:bd:3f:bb:fd:3c:7f:4c:29:0c:8b:ac:11:81:74: 50:1c:75:de:9c:20:dc:11:43:9f:aa:9e:bb:7e:e9:a2:44:73: 89:33:f7:b6:33:b7:0a:6c:19:d7:c3:e0:b3:8e:5a:71:96:aa: 15:13:db:c3:f4:31:31:75:eb:05:1f:d0:a8:ed:f2:b4:c6:68: 05:b5:6a:b8:29:35:ca:34:45:50:65:0a:80:65:5b:e4:3d:0f: f1:b9:e1:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcZHVyBUT1SczJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YjVmNWI3ODAtMjdlNy00ODkzLWI2YTctNjZkNTgzZGY5MWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJtgraAMp2VcJLkJUCw6kNnnoVRBrPfTskn2 Nxrwyg8JKTpBgJcfwGLUxYwJnKyKwG7Vyc1nKZEwS5RLeduCKrvc3UVUwP8DxcDi ULXI0FrOlBaKZ4mhfUV4nmMAtz48Ije2ExWgDaynJ3qCS3SEAoDImorNE7GxeG6H MU6GWDqmo8nydGUAIwF5VkzB7ndweKe6v4BzfjWul0kSOOQHLLHX807ejU9s7KzU fCXbnxl8+NFC4frb5R2syyqvszkkyUAROMETT2MMKSs5M1LFieY3xndyC+EX3M9P wtyNBnmEzBUL375fEDt9gGzvXs6mGWBQapqCY4oBomNWvT/g8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHPVn3GT6RR95/DcHCszkcmW4QkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2FmYWNhZTYtNDI1My0z ZDVlLWI2MzUtNTZjNjVjYjkzMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCInxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiUY5LgGtYg8sN0AOcYIAYuYRumn00hubLWu47r4t2uPq/8/iOfo1cb t1q2u9TT9nAe8vIGZvdfCJcM6NzzKPxVo7LVd1xUMnD6gkT3e9p3s63e/Z59YVIb rQvTTPOtzf2HE9GnK804wadZCJwILuZ3CWYruQLu9X944YAYAWl4KjlPWGzUmZQK QK+PgXHNdEmC+hlgvyRFEt2CaLQiNV4EI6GznE29P7v9PH9MKQyLrBGBdFAcdd6c INwRQ5+qnrt+6aJEc4kz97YztwpsGdfD4LOOWnGWqhUT28P0MTF16wUf0Kjt8rTG aAW1argpNco0RVBlCoBlW+Q9D/G54Qw= -----END CERTIFICATE-----Generated at Tue Dec 23 16:57:53 2025 by rpki-client