This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/9595c0f3-b9b6-3371-b53a-cfa35ef00bed.roa File: 9595c0f3-b9b6-3371-b53a-cfa35ef00bed.roa (raw, json) Hash identifier: cLyyUx7t6Uc9jUf90doBDRuY/AuZGAICLtNfRitwnpg= Subject key identifier: A9:42:D8:A1:B9:A7:41:58:C2:B6:E0:61:4C:3E:32:2D:86:0D:E0:DB Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C4F6BD243891C628CB612D880 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/9595c0f3-b9b6-3371-b53a-cfa35ef00bed.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 17275 IP address blocks: 161.107.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:d2:43:89:1c:62:8c:b6:12:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=1fba789a-ba5f-4bc2-be4c-9bbfccc69239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:10:bd:53:4e:56:bf:8a:0d:15:a9:dd:d3: bb:5b:1c:51:3a:06:1a:d6:49:1e:b9:56:a6:34:88: c6:5e:f6:43:1d:dd:30:4c:5d:38:8d:79:7c:71:49: 91:0e:1c:b3:0d:75:01:f7:c4:db:c0:4e:82:b0:19: 88:72:fa:3b:cd:f4:d0:a7:73:b2:8e:66:af:74:17: 4c:c0:d5:56:ff:00:92:dd:f5:d9:d1:cf:1c:d5:dd: 1a:ba:84:3c:68:e1:17:67:c6:6c:13:d4:37:ea:8b: 83:63:6b:3e:bc:e7:bc:0a:65:56:4b:29:b7:5b:da: 02:de:88:80:a5:d2:e7:94:82:50:30:06:85:7e:d3: 26:37:18:d8:23:2f:12:8e:d2:fc:3d:e0:24:dd:8a: 70:21:85:69:08:7c:d8:ae:bb:7f:37:19:a6:62:a9: fe:f1:22:9b:57:fb:64:6f:bd:72:f9:50:c5:8d:7b: 37:08:44:68:b4:21:be:b8:57:7d:95:14:e2:d1:40: c6:9d:41:7d:7d:b4:51:ba:8e:04:a9:53:07:65:bb: eb:1f:a8:88:05:0a:d1:75:4a:d4:9f:08:a8:34:7d: 4b:eb:4b:9f:3e:0f:02:1a:26:db:4c:77:bf:93:1e: 7d:a8:4e:dd:d8:b8:ad:e4:3d:c7:b4:f3:a1:4a:f4: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:42:D8:A1:B9:A7:41:58:C2:B6:E0:61:4C:3E:32:2D:86:0D:E0:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/9595c0f3-b9b6-3371-b53a-cfa35ef00bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e7:04:f5:45:c9:63:db:7c:d7:75:16:76:f0:b8:6a:82:17: ae:e8:8f:43:d2:36:d2:ad:b2:11:26:c4:f2:01:d2:95:d4:35: c1:b6:65:b1:7a:52:aa:01:b1:0b:65:12:41:ab:fc:91:a5:db: 63:c2:60:65:9b:06:0a:1d:f1:8a:69:00:f8:2f:99:98:aa:b5: 18:b3:52:32:b3:b0:48:09:09:ae:b2:b8:e3:65:b4:29:76:82: b4:df:51:51:a8:4f:f4:9c:50:79:f2:39:bb:57:cb:b3:72:32: a9:ea:4d:e5:aa:33:a2:aa:f1:be:5c:5e:0e:c7:10:bc:9e:b8: ba:a5:1d:92:65:15:27:63:fd:d3:ec:44:eb:ec:3f:67:0f:99: 40:7e:60:b6:cf:af:f6:20:1c:e8:7a:b7:47:25:9e:e0:0e:69: c1:de:b5:36:2a:17:da:ce:f1:27:ea:f3:9a:57:3c:a4:9d:b1: 5f:af:90:2a:6d:c2:db:32:24:e8:cc:fd:27:34:81:49:dd:f3: 6d:1d:b9:36:ce:c6:ba:29:c8:87:d7:c6:eb:4b:8f:20:6b:0f: 21:ec:08:5b:5f:6b:ba:65:f7:d0:01:2a:1a:65:35:92:01:e8: 75:d4:09:e0:fb:18:64:29:76:68:8b:b2:55:b8:f5:84:e5:ed: 31:60:50:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa9JDiRxijLYS2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWZiYTc4OWEtYmE1Zi00YmMyLWJlNGMtOWJiZmNjYzY5MjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdYQvVNOVr+KDRWp3dO7WxxROgYa1kkeuVam NIjGXvZDHd0wTF04jXl8cUmRDhyzDXUB98TbwE6CsBmIcvo7zfTQp3OyjmavdBdM wNVW/wCS3fXZ0c8c1d0auoQ8aOEXZ8ZsE9Q36ouDY2s+vOe8CmVWSym3W9oC3oiA pdLnlIJQMAaFftMmNxjYIy8SjtL8PeAk3YpwIYVpCHzYrrt/NxmmYqn+8SKbV/tk b71y+VDFjXs3CERotCG+uFd9lRTi0UDGnUF9fbRRuo4EqVMHZbvrH6iIBQrRdUrU nwioNH1L60ufPg8CGibbTHe/kx59qE7d2Lit5D3HtPOhSvTivQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlC2KG5p0FYwrbgYUw+Mi2GDeDbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvOTU5NWMwZjMtYjliNi0z MzcxLWI1M2EtY2ZhMzVlZjAwYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/nBPVFyWPbfNd1FnbwuGqCF67oj0PSNtKtshEmxPIB0pXUNcG2ZbF6 UqoBsQtlEkGr/JGl22PCYGWbBgod8YppAPgvmZiqtRizUjKzsEgJCa6yuONltCl2 grTfUVGoT/ScUHnyObtXy7NyMqnqTeWqM6Kq8b5cXg7HELyeuLqlHZJlFSdj/dPs ROvsP2cPmUB+YLbPr/YgHOh6t0clnuAOacHetTYqF9rO8Sfq85pXPKSdsV+vkCpt wtsyJOjM/Sc0gUnd820duTbOxropyIfXxutLjyBrDyHsCFtfa7pl99ABKhplNZIB 6HXUCeD7GGQpdmiLslW49YTl7TFgUPU= -----END CERTIFICATE-----Generated at Fri Jan 9 17:46:58 2026 by rpki-client