This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/db70a171-7d33-3fc2-9576-733bc49c0285.roa File: db70a171-7d33-3fc2-9576-733bc49c0285.roa (raw, json) Hash identifier: UrkrgGkohL1+gj+bVscLr4iau3II4b80o0VsyPryjRs= Subject key identifier: 18:7F:20:0C:18:4D:C8:FA:F2:AD:F7:42:E0:02:AF:3A:28:55:B5:A8 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C4F6BD13AF28B4FCF08C568A8 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/db70a171-7d33-3fc2-9576-733bc49c0285.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 13335 IP address blocks: 161.107.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:d1:3a:f2:8b:4f:cf:08:c5:68:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=3625e576-5ad4-4aee-bd73-27cb2f032726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:c8:e3:6c:a3:9d:74:2a:38:70:c4:fc:8b: 4f:ab:a8:36:fa:41:63:e6:33:60:31:76:9f:e4:e8: 5a:ea:62:69:ff:d2:3c:82:d7:df:39:c8:1b:82:bb: 8b:5f:90:7b:65:89:93:02:90:45:fa:4e:99:a2:fb: c8:bd:10:85:59:94:7c:83:6c:59:7e:3f:7c:8c:34: 4c:16:88:0c:3a:78:d8:4c:33:ea:a9:fd:9a:ca:b6: 13:a4:b5:d9:97:dc:3a:6e:61:2a:45:bd:54:05:41: 5f:e3:75:fc:bd:6e:f2:61:66:82:b0:be:9d:19:92: 23:c6:1f:91:4e:e5:14:98:16:52:ef:0e:8f:5b:af: c7:5e:9e:9f:f3:cf:64:0c:26:78:fe:82:31:0b:00: e9:99:8a:36:b4:b4:14:01:d5:63:c5:3f:ff:3b:85: f7:db:2d:7f:67:59:fc:5b:51:95:6b:44:f8:4f:ee: 1d:df:40:28:a8:fe:11:8a:51:05:29:dd:e8:13:43: c3:a2:65:09:26:50:e2:56:50:ae:1f:38:02:86:97: f7:52:e5:0b:30:4a:42:5c:07:1c:fa:32:5a:4c:7e: 3d:65:bf:80:d6:69:f0:e9:5d:8e:ad:18:c4:93:01: 59:5b:21:86:87:0f:7e:94:5d:b7:d2:7b:18:95:9c: 76:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7F:20:0C:18:4D:C8:FA:F2:AD:F7:42:E0:02:AF:3A:28:55:B5:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/db70a171-7d33-3fc2-9576-733bc49c0285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2f:ba:63:51:50:e3:4d:9d:fe:c6:94:cc:aa:89:b9:a7:46: c4:a6:fd:35:1d:69:06:5c:0d:cb:fd:c4:85:e9:7c:94:ad:b6: 83:91:e4:c4:47:8a:15:65:56:4e:75:c3:9f:2f:99:a3:9f:f9: 7a:f0:4f:c2:06:77:ef:dd:1e:66:d6:32:4c:9c:63:07:92:de: f5:63:da:c9:43:e1:a8:59:12:15:83:bc:d2:29:da:a7:c5:41: b0:d1:92:b0:f1:e6:60:b2:e2:58:a9:a1:a4:db:9c:30:67:ce: 60:43:00:4e:15:27:8a:b2:2e:2e:a2:59:43:db:53:f8:d4:41: 9b:da:cd:43:78:f8:dc:b0:b3:c1:94:14:0c:84:59:9d:7c:60: 77:9b:30:fb:0d:32:33:68:37:e8:2d:bb:7a:f3:07:c8:7a:21: d7:67:64:7e:1c:4e:fe:70:c6:6a:42:0e:c3:a5:89:5f:eb:da: af:e8:fd:eb:72:3b:97:1d:29:1d:8f:26:d3:83:96:0a:47:23: 1d:78:86:03:3e:44:2a:3c:a5:3e:36:da:c5:fe:a8:a5:2a:37: 73:54:6e:6b:29:c3:5b:6c:c6:51:61:dd:8e:9b:ce:63:9f:10: 79:11:59:4a:3b:73:12:a8:b9:27:11:19:2e:82:db:cc:5d:7c: d7:ac:41:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa9E68otPzwjFaKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk MzYyNWU1NzYtNWFkNC00YWVlLWJkNzMtMjdjYjJmMDMyNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupDI42yjnXQqOHDE/ItPq6g2+kFj5jNgMXaf 5Oha6mJp/9I8gtffOcgbgruLX5B7ZYmTApBF+k6ZovvIvRCFWZR8g2xZfj98jDRM FogMOnjYTDPqqf2ayrYTpLXZl9w6bmEqRb1UBUFf43X8vW7yYWaCsL6dGZIjxh+R TuUUmBZS7w6PW6/HXp6f889kDCZ4/oIxCwDpmYo2tLQUAdVjxT//O4X32y1/Z1n8 W1GVa0T4T+4d30AoqP4RilEFKd3oE0PDomUJJlDiVlCuHzgChpf3UuULMEpCXAcc +jJaTH49Zb+A1mnw6V2OrRjEkwFZWyGGhw9+lF230nsYlZx2LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh/IAwYTcj68q33QuACrzooVbWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZGI3MGExNzEtN2QzMy0z ZmMyLTk1NzYtNzMzYmM0OWMwMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIvumNRUONNnf7GlMyqibmnRsSm/TUdaQZcDcv9xIXpfJSttoOR5MRH ihVlVk51w58vmaOf+XrwT8IGd+/dHmbWMkycYweS3vVj2slD4ahZEhWDvNIp2qfF QbDRkrDx5mCy4lipoaTbnDBnzmBDAE4VJ4qyLi6iWUPbU/jUQZvazUN4+Nyws8GU FAyEWZ18YHebMPsNMjNoN+gtu3rzB8h6IddnZH4cTv5wxmpCDsOliV/r2q/o/ety O5cdKR2PJtODlgpHIx14hgM+RCo8pT422sX+qKUqN3NUbmspw1tsxlFh3Y6bzmOf EHkRWUo7cxKouScRGS6C28xdfNesQdo= -----END CERTIFICATE-----Generated at Sun Jan 18 11:07:19 2026 by rpki-client