This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa File: 00a67443-0fc8-3ea5-9b70-edf9d806b098.roa (raw, json) Hash identifier: iJ6zsJ/BM/HRQxb80CQgyrfWr8SoH3Bzcf92RA1FGQc= Subject key identifier: A6:41:86:22:CE:E8:5F:B4:A9:4E:75:EF:DF:4B:50:A5:14:D6:77:CF Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C42DBF3CFCF25A3CE14D94380 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 63199 IP address blocks: 148.153.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:f3:cf:cf:25:a3:ce:14:d9:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=ae11ac28-8cef-433e-b94d-0462939ac749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:ee:d1:04:d8:0a:a6:35:58:1a:4b:88:f4: 29:01:5b:69:21:f0:d7:62:b4:d7:f5:d1:fb:63:be: 5a:fc:10:f5:c3:71:73:63:78:35:3c:0e:80:7b:10: 10:fd:73:89:00:5e:ad:3f:6e:a9:a7:84:1d:30:dd: 95:43:5a:7e:65:7e:32:8e:63:b3:97:6a:a5:c8:fd: b7:a4:05:ba:e8:b9:59:6d:88:1e:16:67:a6:89:90: 6f:85:ef:c3:da:ab:69:d1:7b:54:b0:31:3b:9a:85: e5:79:57:79:2a:cb:14:44:19:46:00:91:76:95:32: d4:07:34:7a:71:12:24:35:ff:6f:f9:ba:34:07:5f: 12:cb:51:4c:05:a9:7b:06:e2:e1:b0:0b:60:9a:01: 35:66:0b:f8:ed:63:2e:71:66:2e:62:72:3e:05:44: 19:e1:fe:01:63:63:6b:27:29:52:2f:59:fc:77:f3: cf:01:70:19:28:f4:b8:0f:8c:31:14:37:79:9b:1b: 0e:59:bc:52:fc:10:8d:a8:1e:39:bb:d1:50:54:5f: 76:f0:11:17:60:8d:4f:32:80:40:45:95:ec:4d:dd: 5c:a1:ef:3e:bc:4e:66:92:7a:d1:13:37:7b:9b:7a: 1e:8f:82:bb:f4:4f:37:0a:1a:5d:da:29:5d:22:8d: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:41:86:22:CE:E8:5F:B4:A9:4E:75:EF:DF:4B:50:A5:14:D6:77:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:50:46:e9:39:8a:f7:a2:bc:e1:cf:3d:14:3d:58:af:b5:e3: b8:39:80:4f:dd:35:fc:27:30:8a:36:d8:9c:30:07:11:3f:4d: cf:2a:6e:8c:45:36:d0:a9:3f:48:0d:2c:80:d9:e4:fd:1e:43: 2c:a6:73:09:c0:f3:8f:da:61:f8:9d:fb:81:72:f2:7e:d8:50: 40:2f:32:83:ff:56:2d:69:89:07:bc:e8:f7:37:3b:af:da:e2: 48:a9:2c:91:cf:98:9f:58:79:17:58:b7:47:3a:90:6a:11:0c: bf:d1:a1:a4:a6:c4:b1:97:91:c6:44:dd:6c:e5:e5:6e:f8:30: 09:db:fa:53:bc:4e:ae:a9:11:25:e0:de:7e:13:c6:6b:02:e4: 66:0a:87:dd:0b:cd:3c:54:4f:93:36:59:63:0a:17:98:5c:db: 0c:d1:99:48:ba:18:3f:b1:53:bf:7d:d1:e5:ea:16:a6:0d:28: 25:b5:93:c6:71:52:72:c1:4f:cb:7f:d8:5b:f5:82:5d:14:3a: 1a:f5:86:6e:4d:8f:c1:cc:53:6a:68:9c:c7:0b:0d:5d:b2:d4: ca:18:8a:fe:7f:45:79:df:d8:56:b3:0a:02:01:b9:7d:17:98: 96:f4:11:a2:cb:45:7e:3f:7d:8e:ee:c8:70:51:bd:6b:4c:6e: 4e:bf:76:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/PPzyWjzhTZQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YWUxMWFjMjgtOGNlZi00MzNlLWI5NGQtMDQ2MjkzOWFjNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD7u0QTYCqY1WBpLiPQpAVtpIfDXYrTX9dH7 Y75a/BD1w3FzY3g1PA6AexAQ/XOJAF6tP26pp4QdMN2VQ1p+ZX4yjmOzl2qlyP23 pAW66LlZbYgeFmemiZBvhe/D2qtp0XtUsDE7moXleVd5KssURBlGAJF2lTLUBzR6 cRIkNf9v+bo0B18Sy1FMBal7BuLhsAtgmgE1Zgv47WMucWYuYnI+BUQZ4f4BY2Nr JylSL1n8d/PPAXAZKPS4D4wxFDd5mxsOWbxS/BCNqB45u9FQVF928BEXYI1PMoBA RZXsTd1coe8+vE5mknrREzd7m3oej4K79E83Chpd2ildIo0mGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZBhiLO6F+0qU51799LUKUU1nfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDBhNjc0NDMtMGZjOC0z ZWE1LTliNzAtZWRmOWQ4MDZiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1QRuk5iveivOHPPRQ9WK+147g5gE/dNfwnMIo22JwwBxE/Tc8qboxF NtCpP0gNLIDZ5P0eQyymcwnA84/aYfid+4Fy8n7YUEAvMoP/Vi1piQe86Pc3O6/a 4kipLJHPmJ9YeRdYt0c6kGoRDL/RoaSmxLGXkcZE3Wzl5W74MAnb+lO8Tq6pESXg 3n4TxmsC5GYKh90LzTxUT5M2WWMKF5hc2wzRmUi6GD+xU7990eXqFqYNKCW1k8Zx UnLBT8t/2Fv1gl0UOhr1hm5Nj8HMU2ponMcLDV2y1MoYiv5/RXnf2FazCgIBuX0X mJb0EaLLRX4/fY7uyHBRvWtMbk6/dnI= -----END CERTIFICATE-----Generated at Mon Jan 19 17:12:08 2026 by rpki-client