This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3822610b-37ee-3c20-98d6-c3c34a737686.roa File: 3822610b-37ee-3c20-98d6-c3c34a737686.roa (raw, json) Hash identifier: OhvXNXiKUdQbNpbYWfPkj4FYFrZZMMsbRro1vuF0lHQ= Subject key identifier: 64:50:BE:98:7D:2A:AA:41:9A:FE:1D:3B:52:E4:73:D4:B7:7B:5A:8A Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C523667B351535AB1B2ECBE00 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3822610b-37ee-3c20-98d6-c3c34a737686.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 16509 IP address blocks: 161.107.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:67:b3:51:53:5a:b1:b2:ec:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=fcebf1a1-013b-428f-bbea-bc168577f13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8f:6e:41:85:06:c0:b1:a1:c3:9e:3e:3c:3b: 5b:c4:5a:96:71:7e:f9:4e:55:50:d9:42:1d:0c:92: 35:7d:1c:86:30:fa:1b:d6:8f:77:db:9e:7d:e3:93: e8:42:b5:d7:b0:80:52:cb:bb:05:10:90:ea:01:0c: 72:01:0c:7f:e4:b2:4a:09:e1:5b:63:8f:5d:68:70: a7:10:9d:b2:03:3c:56:91:c6:87:11:7c:66:9d:87: a6:9d:a1:af:50:bc:2f:00:76:2a:d2:fb:d1:a1:b8: 07:2e:1c:92:cc:5f:3d:94:55:a2:3a:a8:9d:69:a5: fb:9e:7b:53:48:18:35:72:77:e0:d1:52:41:72:26: 1c:1d:30:31:ad:5b:d8:5d:25:38:c4:3d:f9:65:fd: 33:22:60:90:cb:03:1f:42:38:b0:e5:07:73:3f:9d: 74:44:d0:52:15:0f:ad:6c:e2:a7:0e:7e:86:5f:f6: c0:59:2a:3e:17:9f:8e:c9:96:57:1d:91:fe:29:5c: a8:57:a1:c6:f5:70:10:44:6f:1b:80:87:57:24:e6: a2:8b:e3:78:63:f5:eb:2f:a9:b7:61:ed:fa:6f:12: eb:45:1d:fe:3c:4b:10:72:6a:02:80:a7:9c:07:19: e0:ff:99:ce:39:bc:45:be:98:ef:cd:00:28:95:a5: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:50:BE:98:7D:2A:AA:41:9A:FE:1D:3B:52:E4:73:D4:B7:7B:5A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3822610b-37ee-3c20-98d6-c3c34a737686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7e:e8:94:29:ab:91:9b:da:1d:a6:fd:23:5a:9b:38:c1:47: 0e:d3:d5:60:b3:67:0e:a7:c8:64:59:01:a0:a3:85:64:8e:d2: 3e:96:5c:23:35:ec:c6:9f:9c:bf:9e:2a:20:37:83:d9:43:b0: e0:df:73:48:ad:48:0f:aa:e6:fb:23:f9:0d:c6:23:e9:e1:0e: a4:4c:4c:ca:d2:bf:4b:52:99:fe:11:b0:a8:4c:96:fb:8a:78: be:33:64:39:48:e0:13:f1:78:08:d8:62:40:61:c3:a0:d7:b4: d4:d2:5e:37:10:dd:ff:58:3a:fe:5a:0a:c5:81:7c:30:0b:b0: 99:19:0b:13:a2:6a:69:99:30:29:2b:67:2d:75:03:60:1a:ad: 75:fc:4c:86:7f:01:8b:df:23:70:22:ed:ad:0c:d4:4b:7d:2c: 11:64:9c:1c:d6:4e:69:cf:dc:1a:f8:ca:4e:8f:7c:d4:94:5b: ed:39:86:52:0a:e9:67:aa:06:06:82:c7:52:62:92:b1:1f:ef: 50:0b:66:3a:96:6e:42:aa:c5:1d:d1:02:b4:69:09:5c:f3:08: a2:a0:df:51:19:bb:03:27:c1:1c:68:47:f8:fc:97:9d:b1:01: e5:88:40:0b:1b:fb:f2:10:42:86:7a:06:b8:4e:3e:5d:4e:65: 6c:d8:0f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExSNmezUVNasbLsvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk ZmNlYmYxYTEtMDEzYi00MjhmLWJiZWEtYmMxNjg1NzdmMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY9uQYUGwLGhw54+PDtbxFqWcX75TlVQ2UId DJI1fRyGMPob1o93255945PoQrXXsIBSy7sFEJDqAQxyAQx/5LJKCeFbY49daHCn EJ2yAzxWkcaHEXxmnYemnaGvULwvAHYq0vvRobgHLhySzF89lFWiOqidaaX7nntT SBg1cnfg0VJBciYcHTAxrVvYXSU4xD35Zf0zImCQywMfQjiw5QdzP510RNBSFQ+t bOKnDn6GX/bAWSo+F5+OyZZXHZH+KVyoV6HG9XAQRG8bgIdXJOaii+N4Y/XrL6m3 Ye36bxLrRR3+PEsQcmoCgKecBxng/5nOObxFvpjvzQAolaW5jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRQvph9KqpBmv4dO1Lkc9S3e1qKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMzgyMjYxMGItMzdlZS0z YzIwLTk4ZDYtYzNjMzRhNzM3Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV+6JQpq5Gb2h2m/SNamzjBRw7T1WCzZw6nyGRZAaCjhWSO0j6WXCM1 7MafnL+eKiA3g9lDsODfc0itSA+q5vsj+Q3GI+nhDqRMTMrSv0tSmf4RsKhMlvuK eL4zZDlI4BPxeAjYYkBhw6DXtNTSXjcQ3f9YOv5aCsWBfDALsJkZCxOiammZMCkr Zy11A2AarXX8TIZ/AYvfI3Ai7a0M1Et9LBFknBzWTmnP3Br4yk6PfNSUW+05hlIK 6WeqBgaCx1JikrEf71ALZjqWbkKqxR3RArRpCVzzCKKg31EZuwMnwRxoR/j8l52x AeWIQAsb+/IQQoZ6BrhOPl1OZWzYD70= -----END CERTIFICATE-----Generated at Fri Jan 2 14:28:52 2026 by rpki-client