This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/9ebcdc41-fa4a-35d6-86b2-19977c26cb65.roa File: 9ebcdc41-fa4a-35d6-86b2-19977c26cb65.roa (raw, json) Hash identifier: 6MLQ+2AvIvimAyHDry7ZnU7aRAl37hMuDrDBK4MopXU= Subject key identifier: 5D:67:0B:A5:1F:1A:4F:A0:18:95:69:11:4C:ED:F0:AF:56:C3:13:C8 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C75566C52B71F025CDD759800 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/9ebcdc41-fa4a-35d6-86b2-19977c26cb65.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 17275 IP address blocks: 161.107.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:56:6c:52:b7:1f:02:5c:dd:75:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=3e06300a-be5c-4e07-b3b8-c6168d3d5311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ea:c0:d2:1a:bc:02:6f:7d:20:d9:cd:e9:87: 8b:d1:f7:11:02:ee:64:9b:b1:6c:2a:85:8a:72:c3: f7:b4:07:83:76:02:0b:ab:fe:f3:e8:2e:a3:9d:16: eb:75:b6:23:b9:51:7e:0f:ce:7d:1a:43:ea:86:f3: a9:8b:ed:2b:32:49:02:43:49:54:84:7f:1e:e1:8a: 77:cb:5a:99:ca:aa:18:1d:3f:d6:dc:e6:60:1d:01: c5:bb:b0:b1:3b:e4:67:0f:6b:a5:bb:97:f1:cb:99: 3d:30:3d:d2:6e:25:d5:9a:43:c7:d8:f8:ac:66:e3: 7c:25:57:8c:5e:66:e3:13:23:3e:bc:4f:ba:8c:d6: 86:5c:e4:d4:21:64:0b:46:5e:ce:f5:4b:98:84:11: 32:fe:65:31:f6:60:41:f7:65:b7:95:37:c3:4f:db: 9d:02:f9:bc:70:1b:7e:a1:26:99:41:b3:19:bd:a2: 02:d9:97:4f:14:a8:9c:fc:3c:e6:92:80:4e:db:f8: 40:b7:c1:6b:70:c9:c2:a3:47:a1:fb:c1:16:e4:b7: 3f:69:22:c8:de:24:a9:ee:56:87:53:00:ce:ff:35: cd:78:87:89:5b:d7:23:45:af:0c:60:1e:42:5c:be: eb:39:36:67:d2:06:aa:a5:7d:19:ef:f0:f3:fb:97: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:0B:A5:1F:1A:4F:A0:18:95:69:11:4C:ED:F0:AF:56:C3:13:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/9ebcdc41-fa4a-35d6-86b2-19977c26cb65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e3:05:9f:b7:bc:9c:7b:14:ee:1c:f5:33:d3:cb:e5:bb:3f: ad:9d:c9:73:5b:04:3c:3a:98:4f:cb:63:61:7a:e7:14:ee:e2: 85:0d:2d:fa:cc:02:3c:df:cb:ab:30:f4:e8:2f:25:88:a9:f7: 3f:77:bc:2c:7f:0f:60:46:d6:c9:23:31:91:ff:de:8b:12:3c: 29:3b:89:a1:54:7a:e8:e8:1d:af:17:9d:a9:16:8e:df:1a:be: 1a:23:38:22:e9:12:e3:8e:06:b0:8c:f5:6f:68:94:52:d0:8f: 52:c8:5d:31:64:7c:d8:80:1a:5a:99:c6:c6:e8:5e:17:7a:97: e3:f5:8e:37:27:bc:5e:11:c1:92:c1:27:76:50:a4:32:ab:1d: 37:99:65:e3:e3:46:13:8c:9a:be:34:1e:5b:9e:36:b8:9c:ac: f1:ee:a9:3a:19:7b:f7:ed:4b:05:0c:a3:27:67:26:ed:36:4c: 88:be:a3:ce:25:c8:90:b6:b6:63:07:1d:1f:8f:bb:bf:2c:3a: ff:84:3d:c7:5d:9a:3a:bb:42:2e:45:3e:54:d6:24:0e:a9:c6: e0:a2:93:8e:b6:1d:60:b3:c6:f1:be:a6:86:53:56:a0:4e:df: f0:23:6b:bd:9f:92:56:f0:70:c0:a8:c3:c7:7b:15:d4:9c:2e: 42:a2:cc:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1VmxStx8CXN11mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk M2UwNjMwMGEtYmU1Yy00ZTA3LWIzYjgtYzYxNjhkM2Q1MzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+rA0hq8Am99INnN6YeL0fcRAu5km7FsKoWK csP3tAeDdgILq/7z6C6jnRbrdbYjuVF+D859GkPqhvOpi+0rMkkCQ0lUhH8e4Yp3 y1qZyqoYHT/W3OZgHQHFu7CxO+RnD2ulu5fxy5k9MD3SbiXVmkPH2PisZuN8JVeM XmbjEyM+vE+6jNaGXOTUIWQLRl7O9UuYhBEy/mUx9mBB92W3lTfDT9udAvm8cBt+ oSaZQbMZvaIC2ZdPFKic/DzmkoBO2/hAt8FrcMnCo0eh+8EW5Lc/aSLI3iSp7laH UwDO/zXNeIeJW9cjRa8MYB5CXL7rOTZn0gaqpX0Z7/Dz+5cijQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1nC6UfGk+gGJVpEUzt8K9WwxPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvOWViY2RjNDEtZmE0YS0z NWQ2LTg2YjItMTk5NzdjMjZjYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoWtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTjBZ+3vJx7FO4c9TPTy+W7P62dyXNbBDw6mE/LY2F65xTu4oUNLfrM Ajzfy6sw9OgvJYip9z93vCx/D2BG1skjMZH/3osSPCk7iaFUeujoHa8XnakWjt8a vhojOCLpEuOOBrCM9W9olFLQj1LIXTFkfNiAGlqZxsboXhd6l+P1jjcnvF4RwZLB J3ZQpDKrHTeZZePjRhOMmr40HlueNricrPHuqToZe/ftSwUMoydnJu02TIi+o84l yJC2tmMHHR+Pu78sOv+EPcddmjq7Qi5FPlTWJA6pxuCik462HWCzxvG+poZTVqBO 3/Aja72fklbwcMCow8d7FdScLkKizLI= -----END CERTIFICATE-----Generated at Fri Jan 9 17:46:24 2026 by rpki-client