This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa File: 0399118c-609b-3b8a-8490-f03a3e398256.roa (raw, json) Hash identifier: /2iGWJIM5oyr0KqclwkWPGdWhAq+9R+Ag/tAE4c7BRM= Subject key identifier: CD:82:8C:C0:C4:B9:16:6D:1B:FA:D6:B2:5C:6E:9F:FB:86:BD:D9:C3 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C93D1B629C53F0FEFB9008A00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa Signing time: Mon 19 Jan 2026 14:00:38 +0000 ROA not before: Mon 19 Jan 2026 14:00:38 +0000 ROA not after: Sun 19 Apr 2026 13:00:38 +0000 asID: 63199 IP address blocks: 148.153.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:93:d1:b6:29:c5:3f:0f:ef:b9:00:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jan 19 14:00:38 2026 GMT Not After : Apr 19 13:00:38 2026 GMT Subject: CN=e567886e-c157-43e7-87b1-8ba112aece95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dd:0b:90:a8:43:e9:c8:06:fb:08:a4:d4:58: 17:e1:39:14:87:8c:2c:e2:e5:b9:99:f9:b0:84:24: 19:b1:7b:ab:ce:f6:09:72:13:37:4b:1d:32:af:eb: 3c:1d:3b:fe:71:4c:f5:7d:0b:4c:09:1c:9f:97:09: 1c:96:9a:fc:66:88:37:d5:dd:da:cf:6c:cd:85:c9: ee:23:01:dd:41:79:c4:68:85:cc:55:dc:6a:66:44: bf:e6:f2:51:9b:55:c3:8e:06:71:8f:18:8f:50:28: 7c:89:65:68:27:59:df:2e:a0:14:0d:fb:41:9c:55: 3a:29:c8:ad:0f:cb:23:f2:f2:83:dd:1f:50:53:77: 69:f8:3f:86:99:19:06:99:27:ab:da:73:2e:08:42: cd:14:dd:5b:93:05:9b:42:8f:27:47:ae:a2:da:dc: bb:3d:42:15:b0:14:5d:b6:bf:a7:06:86:86:4f:65: e5:0a:dc:bf:80:66:f4:36:cd:dc:50:90:d9:89:4b: cb:c8:50:d0:72:a5:35:81:5e:ec:d9:22:21:b7:00: 00:af:60:01:41:b5:d3:c6:e5:00:69:8c:74:e0:37: c5:12:a1:50:a4:77:8d:50:6f:1d:9f:be:b8:45:54: fd:02:30:8b:09:50:4a:19:0e:05:27:a7:03:a9:32: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:82:8C:C0:C4:B9:16:6D:1B:FA:D6:B2:5C:6E:9F:FB:86:BD:D9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0b:ae:e1:46:f5:ec:8f:b8:ef:7b:d7:0d:d7:54:03:da:ac: d9:d5:71:e3:22:0f:3e:a0:c1:23:c7:97:9f:3c:35:43:41:f9: cd:63:42:76:65:62:a8:05:2f:13:43:0e:84:e4:90:7c:b9:60: 7b:cc:42:66:b5:30:5e:9e:cd:dc:e6:fb:5b:e7:52:ea:3b:e2: 79:d1:aa:85:fe:d1:80:d1:60:51:73:2b:67:96:ab:64:c1:cc: 8c:79:3a:a8:5d:59:5e:4c:1e:d1:a3:86:76:f9:09:f4:7f:5b: 03:ee:f6:f9:7b:ae:1d:d0:10:c8:eb:a5:9e:cb:20:c0:09:ea: 47:84:14:ab:f3:d4:cd:d3:98:f4:92:e6:8f:43:e2:02:9c:75: 97:ce:57:58:99:30:39:e1:44:fd:4d:ec:e1:c2:d3:81:3b:c2: e8:0a:b5:8b:04:d7:a0:c5:5d:7c:00:e1:0f:71:75:e4:b8:6c: 2c:c9:79:b6:22:b7:0b:c2:07:06:0a:aa:66:4b:f2:33:45:67: 27:19:6f:03:a4:5d:d6:27:d3:c0:39:0f:f7:ff:68:2f:8f:5d: 79:c5:0f:ab:8c:1a:01:7c:01:3f:59:67:41:77:a1:de:4c:2c: c0:48:af:ed:d4:ed:04:af:63:c4:57:01:fb:54:d7:4e:0e:fc: 0a:64:99:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyT0bYpxT8P77kAigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk ZTU2Nzg4NmUtYzE1Ny00M2U3LTg3YjEtOGJhMTEyYWVjZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh90LkKhD6cgG+wik1FgX4TkUh4ws4uW5mfmw hCQZsXurzvYJchM3Sx0yr+s8HTv+cUz1fQtMCRyflwkclpr8Zog31d3az2zNhcnu IwHdQXnEaIXMVdxqZkS/5vJRm1XDjgZxjxiPUCh8iWVoJ1nfLqAUDftBnFU6Kcit D8sj8vKD3R9QU3dp+D+GmRkGmSer2nMuCELNFN1bkwWbQo8nR66i2ty7PUIVsBRd tr+nBoaGT2XlCty/gGb0Ns3cUJDZiUvLyFDQcqU1gV7s2SIhtwAAr2ABQbXTxuUA aYx04DfFEqFQpHeNUG8dn764RVT9AjCLCVBKGQ4FJ6cDqTLt+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2CjMDEuRZtG/rWslxun/uGvdnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDM5OTExOGMtNjA5Yi0z YjhhLTg0OTAtZjAzYTNlMzk4MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABALruFG9eyPuO971w3XVAParNnVceMiDz6gwSPHl588NUNB+c1jQnZl YqgFLxNDDoTkkHy5YHvMQma1MF6ezdzm+1vnUuo74nnRqoX+0YDRYFFzK2eWq2TB zIx5OqhdWV5MHtGjhnb5CfR/WwPu9vl7rh3QEMjrpZ7LIMAJ6keEFKvz1M3TmPSS 5o9D4gKcdZfOV1iZMDnhRP1N7OHC04E7wugKtYsE16DFXXwA4Q9xdeS4bCzJebYi twvCBwYKqmZL8jNFZycZbwOkXdYn08A5D/f/aC+PXXnFD6uMGgF8AT9ZZ0F3od5M LMBIr+3U7QSvY8RXAftU104O/Apkmds= -----END CERTIFICATE-----Generated at Mon Jan 19 17:13:29 2026 by rpki-client