This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/963103b6-8a88-31d3-81bd-cdbe5585fb06.roa File: 963103b6-8a88-31d3-81bd-cdbe5585fb06.roa (raw, json) Hash identifier: 2/5GVakgNtAd27QuNOH51wYRnjpVCgmKySXlAmaZKvU= Subject key identifier: 0A:64:66:B5:10:51:2A:2B:CF:93:B1:9E:13:6B:0D:F1:91:BC:21:DA Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C523666C2164A4BCFADD87E00 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/963103b6-8a88-31d3-81bd-cdbe5585fb06.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 14618 IP address blocks: 161.107.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:66:c2:16:4a:4b:cf:ad:d8:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=8bf527ef-f546-40e1-8140-0cd85dc2e720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:f7:17:dc:3b:40:2e:25:96:68:d9:99:5a: 5a:ee:c9:e1:e2:a2:30:cd:9c:75:16:d8:58:b9:d5: f8:12:18:04:01:6b:02:49:19:88:27:14:c6:08:8c: 35:46:aa:7a:2d:f5:b0:af:62:5f:c9:03:47:44:5d: 39:08:75:10:d8:0c:9e:b3:25:3e:f1:8b:02:13:1c: e2:6d:aa:fa:15:03:5b:4c:3d:81:a4:fb:d1:44:fc: e4:f4:98:92:e8:23:ca:29:77:c2:34:5e:3e:82:7e: 95:46:17:fb:3c:ab:07:91:60:25:d2:69:a1:ae:14: da:d3:64:8c:33:84:dd:37:d9:06:3b:64:93:09:f8: a3:7a:24:99:f0:72:86:61:3c:e2:ef:ec:8e:72:0c: 24:78:29:59:e6:fb:a1:b5:c2:eb:8e:9b:74:36:a5: f4:de:b9:3d:7c:07:27:8a:1f:12:45:2c:79:fc:53: a1:e6:ed:5b:af:c2:55:e6:89:51:2a:36:71:84:f8: b6:1e:bd:22:42:e2:81:7e:f3:6a:45:1c:6c:40:80: 8a:b2:7d:10:71:41:c8:85:35:fe:12:94:d3:f2:ab: a6:60:28:51:62:04:3a:2a:74:99:7c:b8:dd:67:37: 12:05:ab:66:d3:4b:60:2b:fb:7a:65:ec:8a:6c:04: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:64:66:B5:10:51:2A:2B:CF:93:B1:9E:13:6B:0D:F1:91:BC:21:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/963103b6-8a88-31d3-81bd-cdbe5585fb06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:68:19:0f:cc:8f:89:f4:1a:d3:f9:0f:37:0b:be:f0:77:c1: 70:38:96:5b:9e:c7:de:d8:7e:cc:9d:c3:7e:89:c2:fa:2f:4a: 1d:12:49:32:00:9d:a6:6d:d4:a0:c3:90:9c:27:81:f2:31:d5: 92:46:09:a2:70:98:79:25:1c:5e:36:b4:b6:46:77:17:a5:17: 07:69:05:07:e9:f7:03:6e:89:c4:3e:94:23:11:b5:ab:0d:3c: b4:07:36:f9:39:75:a0:9e:a5:96:8a:c1:e7:30:b3:98:0d:8b: 65:35:41:23:a3:9b:5c:6b:67:9e:65:66:18:e8:bd:ad:9b:52: f4:80:c2:c0:5d:61:59:12:59:88:a9:0a:fa:04:74:c2:3d:66: 4b:21:cc:b2:42:ed:5b:c8:1e:d3:0a:58:48:9b:17:1c:f1:7a: 15:c1:47:e5:71:90:a2:22:4a:9b:b2:d0:0c:2a:c8:22:aa:f9: 24:d0:6f:99:a7:6c:bb:89:bf:58:a7:1a:84:f8:ad:27:6e:0e: f1:72:2b:2d:3a:67:6f:83:cf:6f:78:bb:4f:46:9e:69:a4:75: 82:20:8b:29:58:f0:ea:d3:5a:49:76:6b:1e:b7:cd:4b:fa:27: 37:cc:18:2d:84:79:7c:f9:8a:93:28:ad:84:87:99:df:d2:02: 99:47:d0:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExSNmbCFkpLz63YfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk OGJmNTI3ZWYtZjU0Ni00MGUxLTgxNDAtMGNkODVkYzJlNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVH3F9w7QC4llmjZmVpa7snh4qIwzZx1FthY udX4EhgEAWsCSRmIJxTGCIw1Rqp6LfWwr2JfyQNHRF05CHUQ2AyesyU+8YsCExzi bar6FQNbTD2BpPvRRPzk9JiS6CPKKXfCNF4+gn6VRhf7PKsHkWAl0mmhrhTa02SM M4TdN9kGO2STCfijeiSZ8HKGYTzi7+yOcgwkeClZ5vuhtcLrjpt0NqX03rk9fAcn ih8SRSx5/FOh5u1br8JV5olRKjZxhPi2Hr0iQuKBfvNqRRxsQICKsn0QcUHIhTX+ EpTT8qumYChRYgQ6KnSZfLjdZzcSBatm00tgK/t6ZeyKbASApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApkZrUQUSorz5OxnhNrDfGRvCHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvOTYzMTAzYjYtOGE4OC0z MWQzLTgxYmQtY2RiZTU1ODVmYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJoGQ/Mj4n0GtP5DzcLvvB3wXA4lluex97Yfsydw36JwvovSh0SSTIA naZt1KDDkJwngfIx1ZJGCaJwmHklHF42tLZGdxelFwdpBQfp9wNuicQ+lCMRtasN PLQHNvk5daCepZaKwecws5gNi2U1QSOjm1xrZ55lZhjova2bUvSAwsBdYVkSWYip CvoEdMI9ZkshzLJC7VvIHtMKWEibFxzxehXBR+VxkKIiSpuy0AwqyCKq+STQb5mn bLuJv1inGoT4rSduDvFyKy06Z2+Dz294u09GnmmkdYIgiylY8OrTWkl2ax63zUv6 JzfMGC2EeXz5ipMorYSHmd/SAplH0C4= -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:07 2026 by rpki-client