This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6d9a77e0-b762-3686-a999-6668700e8c1a.roa File: 6d9a77e0-b762-3686-a999-6668700e8c1a.roa (raw, json) Hash identifier: H5PpK4BK1DFP5dstSvl45kIkhg/OlMbky8XySj/NJt0= Subject key identifier: 03:EB:02:03:CD:91:10:75:9C:6A:81:6B:72:20:31:CA:A2:F4:BB:E1 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584C80CA4EEF3ED96663B47BAA10 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6d9a77e0-b762-3686-a999-6668700e8c1a.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 17275 IP address blocks: 161.107.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:ca:4e:ef:3e:d9:66:63:b4:7b:aa:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=5c9bc06b-4653-4a9f-b0a2-b33e733f7f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:44:60:ec:ac:53:60:ce:3e:1a:1c:c8:d5: d7:85:c4:8c:9a:f9:b5:0d:bf:66:aa:f0:4b:49:0c: 8c:04:9a:7b:20:6f:26:be:a2:29:51:cc:b7:b0:e0: 1f:ec:b0:47:d5:87:5f:74:a6:8b:39:d8:d6:71:7b: 20:91:c4:6d:55:fe:6c:c3:68:36:44:27:56:cb:93: ae:26:98:f1:81:a4:0b:08:76:1d:1c:8c:1b:b2:1a: 51:12:25:20:cb:e7:1c:99:4c:a4:8d:33:50:68:6c: b3:67:e3:41:9f:c5:24:58:a4:42:1f:40:f1:5d:e0: 3c:22:74:a7:82:c3:0c:a6:ca:28:05:86:3e:c6:6c: 70:33:f5:50:91:14:5f:fb:b1:17:02:24:6b:b3:56: 6d:85:ec:d7:0b:f8:f0:e2:d8:09:b5:6b:e8:fb:9a: 23:60:20:fc:b4:49:9c:af:e7:ec:82:30:f3:54:8a: b4:a1:dd:89:1d:2f:f3:68:29:ec:59:8b:51:cb:65: 35:45:74:72:9a:f2:b6:21:ff:0a:45:15:f2:1b:97: d0:31:72:65:58:bb:9c:5e:bf:4c:3a:fd:cc:0b:22: 5c:7d:1b:cf:f2:39:2a:0e:f0:75:cb:28:e8:ca:bb: ff:aa:44:db:a3:5c:2b:92:50:e4:cc:93:7e:24:fb: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EB:02:03:CD:91:10:75:9C:6A:81:6B:72:20:31:CA:A2:F4:BB:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6d9a77e0-b762-3686-a999-6668700e8c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f9:7f:d0:ef:1d:74:18:c7:eb:78:c9:90:4e:8a:7b:60:3d: a3:c4:1d:6a:58:ee:6e:49:4f:be:2e:8d:b2:1e:c2:a9:3c:9d: 41:9a:ce:18:cf:55:54:78:b9:50:07:83:da:cd:23:85:22:56: 32:a8:92:ab:4a:e1:b2:2d:aa:37:ec:06:f4:b3:ae:2c:b3:50: 6c:be:9a:8d:23:93:e8:3a:07:8a:ea:13:4f:17:67:9f:92:94: 5c:88:0a:e9:b6:40:37:e7:b3:06:58:c5:a2:66:e6:26:cc:36: 00:c5:db:cc:67:bf:67:f3:f1:66:50:59:bd:33:bc:14:50:60: 07:a7:fc:0d:f7:b6:a2:a4:e3:84:c8:61:f9:f2:81:01:ad:1b: a5:1e:40:01:41:46:47:a0:05:62:b4:c8:10:dd:89:e2:71:d1: 66:77:3f:2a:76:df:c5:7d:2f:1d:00:74:dc:0b:b9:40:9e:a2: b7:ee:01:5a:ea:7e:66:d9:b1:70:87:5a:62:9a:ce:a9:8d:c0: d5:0d:35:f3:b1:23:27:68:77:7a:d1:69:44:73:c4:51:26:b8: 64:da:26:d4:26:d9:53:81:21:c2:64:25:cd:8b:83:7d:5f:b5: 0e:54:9a:a5:38:88:24:57:c3:82:a8:5a:9a:3e:1d:c6:41:55: 1e:a8:28:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyAyk7vPtlmY7R7qhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk NWM5YmMwNmItNDY1My00YTlmLWIwYTItYjMzZTczM2Y3ZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aZEYOysU2DOPhocyNXXhcSMmvm1Db9mqvBL SQyMBJp7IG8mvqIpUcy3sOAf7LBH1YdfdKaLOdjWcXsgkcRtVf5sw2g2RCdWy5Ou JpjxgaQLCHYdHIwbshpREiUgy+ccmUykjTNQaGyzZ+NBn8UkWKRCH0DxXeA8InSn gsMMpsooBYY+xmxwM/VQkRRf+7EXAiRrs1ZthezXC/jw4tgJtWvo+5ojYCD8tEmc r+fsgjDzVIq0od2JHS/zaCnsWYtRy2U1RXRymvK2If8KRRXyG5fQMXJlWLucXr9M Ov3MCyJcfRvP8jkqDvB1yyjoyrv/qkTbo1wrklDkzJN+JPtPRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPrAgPNkRB1nGqBa3IgMcqi9LvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNmQ5YTc3ZTAtYjc2Mi0z Njg2LWE5OTktNjY2ODcwMGU4YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoWtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT5f9DvHXQYx+t4yZBOintgPaPEHWpY7m5JT74ujbIewqk8nUGazhjP VVR4uVAHg9rNI4UiVjKokqtK4bItqjfsBvSzriyzUGy+mo0jk+g6B4rqE08XZ5+S lFyICum2QDfnswZYxaJm5ibMNgDF28xnv2fz8WZQWb0zvBRQYAen/A33tqKk44TI YfnygQGtG6UeQAFBRkegBWK0yBDdieJx0WZ3Pyp238V9Lx0AdNwLuUCeorfuAVrq fmbZsXCHWmKazqmNwNUNNfOxIydod3rRaURzxFEmuGTaJtQm2VOBIcJkJc2Lg31f tQ5UmqU4iCRXw4KoWpo+HcZBVR6oKLI= -----END CERTIFICATE-----Generated at Sun Jan 25 10:00:59 2026 by rpki-client