This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa File: 4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa (raw, json) Hash identifier: vA3hN+css+oLkn94wbyS/nrJjEa+Do3nl23gKnSxGI8= Subject key identifier: 24:63:FB:25:66:51:97:E3:EE:27:9E:3F:B0:D6:DF:20:4C:C9:7E:B7 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C523666F7B9AE91CBBAB19840 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 17275 IP address blocks: 161.107.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:66:f7:b9:ae:91:cb:ba:b1:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=95fcd7a9-9b4f-4a6d-ae94-94478783b490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:d8:ab:e9:7e:ec:c9:3e:be:4f:8c:fa:18: 63:30:df:f5:bd:b2:f5:19:86:ed:93:a3:7d:4c:d9: cf:79:0d:66:e5:9e:03:bb:ba:4f:1c:ec:4e:61:e5: a0:5d:59:37:e6:a5:5d:08:9d:ae:41:54:c3:31:d7: d7:7a:17:bc:41:f5:bc:90:ad:28:e4:5e:73:ee:fe: 78:96:08:02:bf:05:aa:e4:64:77:20:59:03:cb:67: 42:4d:8e:78:a9:45:d2:ec:34:83:5a:63:35:68:f5: e7:21:e0:92:ea:9b:be:94:25:9e:d8:f5:6d:6f:80: 06:c1:99:80:a3:3a:c5:57:2b:2f:20:d0:c8:18:c5: ca:35:8c:9b:eb:83:61:b5:f2:b3:dd:03:cd:49:e4: 1c:f4:1d:8f:f4:f8:37:fc:60:f8:98:69:a5:8e:ee: 08:87:04:1f:3d:4d:14:52:c7:bc:48:f6:69:17:85: c8:1a:20:f4:f9:94:a3:3b:36:58:8f:c9:b8:fc:93: 86:5d:43:f5:cf:38:21:23:aa:a7:56:58:ac:a6:5c: 1d:3b:cd:ad:5a:bd:ba:d0:b0:d9:14:01:25:fa:5e: 09:5b:6e:2e:81:24:c9:31:a3:c7:60:a9:9e:ab:f4: f3:fe:79:5a:65:45:e1:97:86:15:0c:d6:bc:69:f2: eb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:63:FB:25:66:51:97:E3:EE:27:9E:3F:B0:D6:DF:20:4C:C9:7E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:01:d9:92:ba:ab:b7:60:8e:3f:59:b4:fc:2d:94:06:7d:4b: 9b:09:23:fd:4b:0e:da:52:6f:31:58:1b:76:25:ae:ab:5d:97: 72:d8:e5:e3:8e:f2:92:85:b6:d2:a9:58:e1:ab:9a:95:40:16: be:1d:fe:e3:fc:85:2d:91:c1:2c:37:60:c7:ea:74:0f:6c:85: 2b:a7:b3:05:82:4b:33:26:11:a0:bb:67:0f:5c:fc:66:28:d6: 70:30:ce:6e:a0:d4:56:07:14:c2:ff:af:d4:6e:05:34:90:2d: 14:ae:10:9a:21:ab:d3:a3:55:ab:4b:ba:8d:ee:96:b0:87:1f: ae:3a:e1:15:e9:66:6f:1e:9e:26:22:02:a8:25:0f:a9:52:8e: f0:4a:09:2c:a1:cb:6d:a0:05:03:3f:b7:4b:89:65:a2:11:93: 6a:52:b9:ac:87:a6:ab:e7:c4:67:d5:24:da:16:99:2f:25:a4: dc:e0:59:a8:e4:25:03:9c:74:a0:d9:47:8b:d8:f4:da:cc:6b: 26:c1:f6:15:a1:ad:a8:3b:b5:9f:8b:d7:5c:68:8a:2e:11:fa: a4:45:f9:a0:03:45:13:99:04:a3:72:39:14:dd:e6:6f:40:5f: 61:fc:88:f0:49:f3:4e:be:21:bf:28:2c:4b:bd:5b:b6:c7:34: 37:5d:b4:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExSNmb3ua6Ry7qxmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk OTVmY2Q3YTktOWI0Zi00YTZkLWFlOTQtOTQ0Nzg3ODNiNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1HYq+l+7Mk+vk+M+hhjMN/1vbL1GYbtk6N9 TNnPeQ1m5Z4Du7pPHOxOYeWgXVk35qVdCJ2uQVTDMdfXehe8QfW8kK0o5F5z7v54 lggCvwWq5GR3IFkDy2dCTY54qUXS7DSDWmM1aPXnIeCS6pu+lCWe2PVtb4AGwZmA ozrFVysvINDIGMXKNYyb64NhtfKz3QPNSeQc9B2P9Pg3/GD4mGmlju4IhwQfPU0U Use8SPZpF4XIGiD0+ZSjOzZYj8m4/JOGXUP1zzghI6qnVlisplwdO82tWr260LDZ FAEl+l4JW24ugSTJMaPHYKmeq/Tz/nlaZUXhl4YVDNa8afLrcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRj+yVmUZfj7ieeP7DW3yBMyX63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNGU1OTFiNWUtNjU4Ny0z ZmI1LWE2ZDgtNWRkZTJiODI3MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkB2ZK6q7dgjj9ZtPwtlAZ9S5sJI/1LDtpSbzFYG3Ylrqtdl3LY5eOO 8pKFttKpWOGrmpVAFr4d/uP8hS2RwSw3YMfqdA9shSunswWCSzMmEaC7Zw9c/GYo 1nAwzm6g1FYHFML/r9RuBTSQLRSuEJohq9OjVatLuo3ulrCHH6464RXpZm8eniYi AqglD6lSjvBKCSyhy22gBQM/t0uJZaIRk2pSuayHpqvnxGfVJNoWmS8lpNzgWajk JQOcdKDZR4vY9NrMaybB9hWhrag7tZ+L11xoii4R+qRF+aADRROZBKNyORTd5m9A X2H8iPBJ806+Ib8oLEu9W7bHNDddtMg= -----END CERTIFICATE-----Generated at Fri Jan 9 17:46:24 2026 by rpki-client