This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa File: efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa (raw, json) Hash identifier: F9Q2e0jsHOrZTDNJllhWHRb0FCYX6Rp93CapxCWvDd0= Subject key identifier: EA:C1:A7:B6:E1:83:C8:41:98:29:3A:BF:B3:3C:0F:7F:77:23:9F:51 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C52366671D0D7B79AC276FF70 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 17275 IP address blocks: 161.107.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:66:71:d0:d7:b7:9a:c2:76:ff:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=3003c233-a314-42b8-b0fb-5e3f75936935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7e:4b:ef:33:4c:0f:58:fe:cc:27:da:75:45: 9a:42:26:59:5a:91:ae:1f:6b:2d:9e:94:e3:31:fd: 1b:7e:5a:50:4e:4a:85:e5:5a:23:37:06:d6:7a:0d: 97:1b:78:36:6d:de:5e:0f:84:54:45:e6:1c:c2:e9: b7:9a:cd:27:72:5e:b0:24:f0:73:2c:3a:01:73:c0: 3e:dd:ca:ac:6c:fc:98:ff:6d:21:4f:3b:8b:5d:e7: 55:8b:38:2b:18:22:7d:89:db:e5:2c:61:e5:db:82: af:c8:5f:a5:5d:0f:9a:6a:5b:a3:2a:6d:26:42:e0: 45:17:e0:eb:e4:d1:69:7e:e9:a5:d4:9c:3d:28:33: 9c:bc:dd:f2:2e:52:d4:f0:87:00:10:1a:4b:98:47: 0c:ae:a2:35:a5:83:60:16:5f:1b:85:6a:62:ce:53: 12:30:20:5e:83:9c:b1:6c:3b:f6:cf:66:81:44:76: 1f:dc:3f:f9:8b:69:bd:43:85:ae:d9:dd:8d:51:a5: 42:6c:42:54:4a:82:ec:4c:5d:64:1b:5b:32:cd:45: 6d:3f:ad:a2:75:64:b4:76:2b:82:bf:a5:92:bc:ba: 22:d8:43:b0:f6:26:9a:dc:73:eb:b5:43:dd:66:a4: 74:96:11:d0:e3:39:34:31:d1:46:8d:63:31:a2:04: 10:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C1:A7:B6:E1:83:C8:41:98:29:3A:BF:B3:3C:0F:7F:77:23:9F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:5a:a3:32:f2:ea:d8:e9:c4:1e:39:6d:89:90:00:92:b7:d8: 44:83:9c:ec:e3:ab:51:2f:75:eb:d6:7b:26:30:3b:c7:71:e1: f0:09:1e:8f:ea:18:b7:78:1f:35:52:68:18:0b:d0:ad:01:30: 81:75:80:0e:ba:63:2c:c7:85:c6:f8:09:bc:75:04:80:58:6e: b1:f2:89:72:5a:70:f0:32:8b:9f:9e:95:72:dd:25:61:0c:ea: 41:45:55:e6:f9:29:be:8b:c7:de:c8:eb:b4:04:38:63:0d:b4: 7d:03:26:a9:5a:00:e2:e3:3c:9e:84:84:db:1d:28:2d:f1:de: c9:d5:30:59:f4:b2:ad:31:c6:58:f5:ef:a0:62:a3:76:b3:8d: dc:67:c8:b8:d9:07:ce:3e:2d:13:e1:ae:94:c5:d2:8b:d0:8b: 26:42:b5:6b:7a:05:05:c9:61:87:96:51:8e:4a:de:5a:d3:aa: 8c:8e:08:5b:31:86:9a:64:de:23:cd:b3:00:d7:09:64:1a:0e: a2:e1:5f:da:97:b6:e2:ac:ea:62:23:7b:67:5c:12:fb:99:a5: d0:86:c7:b1:59:63:e9:90:07:d3:25:dc:c8:35:09:bf:59:73: d4:c8:f2:69:b3:aa:05:d5:c0:07:3f:cc:dd:37:bb:26:1e:69: 45:2a:1b:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExSNmZx0Ne3msJ2/3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk MzAwM2MyMzMtYTMxNC00MmI4LWIwZmItNWUzZjc1OTM2OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi35L7zNMD1j+zCfadUWaQiZZWpGuH2stnpTj Mf0bflpQTkqF5VojNwbWeg2XG3g2bd5eD4RUReYcwum3ms0ncl6wJPBzLDoBc8A+ 3cqsbPyY/20hTzuLXedVizgrGCJ9idvlLGHl24KvyF+lXQ+aalujKm0mQuBFF+Dr 5NFpfuml1Jw9KDOcvN3yLlLU8IcAEBpLmEcMrqI1pYNgFl8bhWpizlMSMCBeg5yx bDv2z2aBRHYf3D/5i2m9Q4Wu2d2NUaVCbEJUSoLsTF1kG1syzUVtP62idWS0diuC v6WSvLoi2EOw9iaa3HPrtUPdZqR0lhHQ4zk0MdFGjWMxogQQOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrBp7bhg8hBmCk6v7M8D393I59RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZWZjYzg3ZjItZjg5ZC0z MGEyLTliNWItZmNmYTY4ZjdmMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZaozLy6tjpxB45bYmQAJK32ESDnOzjq1EvdevWeyYwO8dx4fAJHo/q GLd4HzVSaBgL0K0BMIF1gA66YyzHhcb4Cbx1BIBYbrHyiXJacPAyi5+elXLdJWEM 6kFFVeb5Kb6Lx97I67QEOGMNtH0DJqlaAOLjPJ6EhNsdKC3x3snVMFn0sq0xxlj1 76Bio3azjdxnyLjZB84+LRPhrpTF0ovQiyZCtWt6BQXJYYeWUY5K3lrTqoyOCFsx hppk3iPNswDXCWQaDqLhX9qXtuKs6mIje2dcEvuZpdCGx7FZY+mQB9Ml3Mg1Cb9Z c9TI8mmzqgXVwAc/zN03uyYeaUUqG7U= -----END CERTIFICATE-----Generated at Fri Jan 9 17:47:31 2026 by rpki-client