This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/48d5e969-a007-31a6-842d-607947a27601.roa File: 48d5e969-a007-31a6-842d-607947a27601.roa (raw, json) Hash identifier: SSPOFbkkz2LTtS6n1esVsVKMTqd6nPLABOYOXVR3Vco= Subject key identifier: 63:3F:12:77:81:EA:D9:3F:03:34:4D:F5:62:6E:DB:22:B7:5A:DE:45 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C4F6BD161FCE1E30C1EB9B320 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/48d5e969-a007-31a6-842d-607947a27601.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 17275 IP address blocks: 161.107.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:d1:61:fc:e1:e3:0c:1e:b9:b3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=1cb2b3bf-3092-4218-9d7f-6ecee4d440a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:b6:7f:ed:39:41:3c:24:43:fd:39:d9:fc: 9b:12:f2:b3:24:c5:18:3e:aa:2f:cc:b7:d7:7f:87: 25:e4:4b:4a:d6:4f:6e:29:b2:aa:0e:68:ab:c2:32: 21:99:e2:8f:02:7b:a2:68:d4:7f:a7:0f:5e:ee:fe: 97:f3:60:f4:4d:30:a5:3c:6a:79:38:f9:a0:b5:b5: c1:f5:b2:a9:70:8e:1e:f9:24:f1:57:b7:a4:93:97: 03:7c:a4:3d:fe:98:92:aa:97:ee:d1:85:35:49:c4: f4:47:7a:57:36:95:3a:e4:0f:05:85:af:a3:70:c3: 79:81:61:a9:31:a0:85:65:fa:ba:d8:a2:2d:bf:7c: 7c:9b:fc:92:ac:54:9c:ea:a2:3f:db:f9:1e:33:9a: 02:6e:a6:e9:2a:f4:fd:bd:79:57:90:7d:b3:c0:bc: fa:47:d0:21:c5:23:72:15:ec:4f:94:81:7a:73:b8: 15:d5:fd:94:6f:c5:a2:10:5e:d0:d5:b6:09:1c:3b: 47:dd:f9:bc:2d:c9:3c:2d:25:7b:93:89:b1:f2:60: 45:79:3e:df:f9:a8:69:a3:64:a2:93:a3:ec:4d:51: 42:da:6d:28:cb:59:15:12:de:ee:fd:05:3a:e9:d8: 4b:ba:62:fa:2b:a4:33:b0:24:9e:f2:2e:eb:d7:79: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3F:12:77:81:EA:D9:3F:03:34:4D:F5:62:6E:DB:22:B7:5A:DE:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/48d5e969-a007-31a6-842d-607947a27601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8d:23:28:06:4e:27:f2:10:b6:ef:18:98:67:c2:21:dc:d8: af:70:5c:4a:3a:75:04:38:b5:b6:02:3b:bc:00:d2:bb:ed:d5: f7:0c:1a:0e:a6:e7:bc:50:cb:93:d3:e8:01:33:67:4f:b2:dc: f0:22:b9:1f:6f:9d:6e:6d:83:78:d2:93:25:c0:97:08:3f:3c: 9b:9c:c7:38:d7:65:85:6f:c3:a0:40:4c:21:3b:1e:4e:a9:25: f7:1d:db:9b:1d:16:e0:c7:6f:a8:e1:19:63:00:e4:1e:03:91: c0:28:39:da:80:ad:cb:71:d3:77:1a:f3:68:ba:d3:31:bf:b6: ee:0a:8a:05:f3:33:58:36:8a:45:20:6e:5a:a6:56:9c:9f:e8: 04:b1:30:b0:b1:37:90:4a:2b:83:cb:de:ce:02:76:8c:e6:14: e3:cf:2c:2f:f5:10:17:09:6e:ec:11:55:e6:26:c3:ef:27:ed: 8e:e0:2d:05:76:19:f9:de:60:ec:5d:0c:ed:10:24:f2:15:dd: 61:ba:9c:58:59:f8:f2:41:18:66:19:7b:06:5e:00:8e:13:81: e0:8a:a6:d8:56:12:89:45:90:bf:5e:b3:74:52:06:6d:17:14: 54:34:5e:ee:cb:83:3e:15:18:bf:03:ca:68:52:ba:16:5a:55: ce:94:63:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa9Fh/OHjDB65syAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWNiMmIzYmYtMzA5Mi00MjE4LTlkN2YtNmVjZWU0ZDQ0MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBa2f+05QTwkQ/052fybEvKzJMUYPqovzLfX f4cl5EtK1k9uKbKqDmirwjIhmeKPAnuiaNR/pw9e7v6X82D0TTClPGp5OPmgtbXB 9bKpcI4e+STxV7ekk5cDfKQ9/piSqpfu0YU1ScT0R3pXNpU65A8Fha+jcMN5gWGp MaCFZfq62KItv3x8m/ySrFSc6qI/2/keM5oCbqbpKvT9vXlXkH2zwLz6R9AhxSNy FexPlIF6c7gV1f2Ub8WiEF7Q1bYJHDtH3fm8Lck8LSV7k4mx8mBFeT7f+ahpo2Si k6PsTVFC2m0oy1kVEt7u/QU66dhLumL6K6QzsCSe8i7r13k1MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGM/EneB6tk/AzRN9WJu2yK3Wt5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNDhkNWU5NjktYTAwNy0z MWE2LTg0MmQtNjA3OTQ3YTI3NjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaNIygGTifyELbvGJhnwiHc2K9wXEo6dQQ4tbYCO7wA0rvt1fcMGg6m 57xQy5PT6AEzZ0+y3PAiuR9vnW5tg3jSkyXAlwg/PJucxzjXZYVvw6BATCE7Hk6p Jfcd25sdFuDHb6jhGWMA5B4DkcAoOdqArctx03ca82i60zG/tu4KigXzM1g2ikUg blqmVpyf6ASxMLCxN5BKK4PL3s4CdozmFOPPLC/1EBcJbuwRVeYmw+8n7Y7gLQV2 GfneYOxdDO0QJPIV3WG6nFhZ+PJBGGYZewZeAI4TgeCKpthWEolFkL9es3RSBm0X FFQ0Xu7Lgz4VGL8DymhSuhZaVc6UYzk= -----END CERTIFICATE-----Generated at Fri Jan 9 17:49:27 2026 by rpki-client