This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa File: dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa (raw, json) Hash identifier: 129p7tl2P1GqnxnmgG+uCMe/mch1evb6d9B0FFmLmwA= Subject key identifier: 62:AA:F6:9D:84:8F:8A:1D:B7:29:C4:B9:0D:08:2F:E4:04:D6:89:B5 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C5236679D11AABA74D8CEEC00 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 17275 IP address blocks: 161.107.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:67:9d:11:aa:ba:74:d8:ce:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=9de828d1-3793-4caa-b830-4c41008fe98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:01:0d:47:f4:5a:44:54:d2:2d:5c:58:80: 45:77:6f:0d:91:3c:e8:d5:4b:86:41:51:bb:43:d4: c2:30:7b:4c:4b:cd:6e:6c:7f:ff:b2:39:8d:aa:63: b6:2c:76:9a:08:a9:3b:c9:fa:c8:a5:fe:c1:a9:ed: 2a:68:6b:70:ad:f9:d6:94:17:fd:19:75:04:13:94: d1:1d:a2:ca:14:15:9c:5a:5a:78:60:06:c3:97:d9: 5a:50:5e:32:98:93:9c:f4:fd:d0:ce:47:72:60:95: 43:ed:78:0a:ea:4a:56:93:37:35:eb:63:cc:9d:8e: 55:7e:fc:9c:d3:a7:37:fd:f0:d2:92:02:fc:f2:f7: cd:ae:0e:d9:f1:d7:80:0c:f9:13:05:d1:1f:e9:19: aa:d1:71:62:82:0f:fe:b2:3b:54:6b:f3:8c:1c:03: 16:20:f0:91:a3:3d:38:a3:3e:3b:64:a4:47:33:19: e7:8d:0c:01:d3:1c:0e:20:c4:3e:c6:b8:4c:83:fd: 9a:3e:13:57:d0:ba:bb:d9:44:dc:21:7a:0b:ef:44: 15:09:e1:0d:0d:58:ec:ef:44:98:f2:bf:36:4d:04: 46:b9:43:d3:60:36:57:75:9e:76:50:c2:a1:2e:e3: 79:5a:f6:8f:09:f5:84:81:92:ab:23:b5:2d:29:2c: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AA:F6:9D:84:8F:8A:1D:B7:29:C4:B9:0D:08:2F:E4:04:D6:89:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:70:3f:f1:c7:63:0e:68:28:92:92:4b:b2:07:79:37:8e:36: 78:c4:e6:6a:34:d8:a5:0d:2f:16:8d:bd:f7:0b:3a:9c:eb:f3: ff:3f:2d:f9:26:f9:da:0e:14:29:be:8e:1f:5b:f4:ea:b4:5c: 05:01:36:47:06:36:53:40:1c:08:fd:a0:8f:68:cc:5d:e9:67: 58:78:42:73:e9:a1:bd:ed:7e:d9:33:d4:c9:04:0b:0f:5b:25: 7a:04:7b:e4:d7:8b:6d:66:e3:d7:a3:a3:c6:f5:7d:0e:56:34: 83:32:f7:8a:2f:ce:df:8c:ca:56:46:9d:09:11:c0:d9:7c:bb: d8:e2:cd:95:8d:da:61:97:2c:ab:12:d0:f9:c3:50:07:33:3c: 1e:73:9d:52:4a:2d:bd:91:e4:41:81:af:91:ea:92:f4:f8:08: a0:55:dd:d8:e5:30:fc:f3:b9:c7:51:0c:a4:e9:e6:7d:d9:31: fd:9b:dd:a0:65:c5:1f:0a:9c:7d:15:75:2c:ea:aa:25:0f:f9: d0:17:4e:6b:13:50:57:38:6d:b2:2f:2e:94:f3:da:ea:a6:23: 39:73:09:ed:7b:b5:2a:14:c3:e5:a6:63:14:27:05:9b:ba:8a: e9:d0:c8:1c:91:66:be:f6:08:77:bc:12:b2:eb:42:60:00:6f: 84:4a:86:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExSNmedEaq6dNjO7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk OWRlODI4ZDEtMzc5My00Y2FhLWI4MzAtNGM0MTAwOGZlOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDcBDUf0WkRU0i1cWIBFd28NkTzo1UuGQVG7 Q9TCMHtMS81ubH//sjmNqmO2LHaaCKk7yfrIpf7Bqe0qaGtwrfnWlBf9GXUEE5TR HaLKFBWcWlp4YAbDl9laUF4ymJOc9P3QzkdyYJVD7XgK6kpWkzc162PMnY5Vfvyc 06c3/fDSkgL88vfNrg7Z8deADPkTBdEf6Rmq0XFigg/+sjtUa/OMHAMWIPCRoz04 oz47ZKRHMxnnjQwB0xwOIMQ+xrhMg/2aPhNX0Lq72UTcIXoL70QVCeENDVjs70SY 8r82TQRGuUPTYDZXdZ52UMKhLuN5WvaPCfWEgZKrI7UtKSwxMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKq9p2Ej4odtynEuQ0IL+QE1om1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZGJkYmFmY2YtNThkOC0z MWRmLThlY2YtZTE2YWZiNDVkMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9wP/HHYw5oKJKSS7IHeTeONnjE5mo02KUNLxaNvfcLOpzr8/8/Lfkm +doOFCm+jh9b9Oq0XAUBNkcGNlNAHAj9oI9ozF3pZ1h4QnPpob3tftkz1MkECw9b JXoEe+TXi21m49ejo8b1fQ5WNIMy94ovzt+MylZGnQkRwNl8u9jizZWN2mGXLKsS 0PnDUAczPB5znVJKLb2R5EGBr5HqkvT4CKBV3djlMPzzucdRDKTp5n3ZMf2b3aBl xR8KnH0VdSzqqiUP+dAXTmsTUFc4bbIvLpTz2uqmIzlzCe17tSoUw+WmYxQnBZu6 iunQyByRZr72CHe8ErLrQmAAb4RKhhs= -----END CERTIFICATE-----Generated at Fri Jan 9 17:47:42 2026 by rpki-client