This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa File: 1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa (raw, json) Hash identifier: rrS1BhOaP0a77DsgwexKSz3HOTne1VGH/d4o68m48hU= Subject key identifier: D6:BF:F7:E2:1A:6D:5F:92:43:A5:83:9F:FF:F4:4E:20:2B:1E:C2:AF Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C215B8C6E5FEC46A621D81040 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 63199 IP address blocks: 148.153.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:8c:6e:5f:ec:46:a6:21:d8:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=9fe14a77-d672-4c10-97bf-1536ac27400b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:46:23:d8:43:6d:96:b8:6c:d0:fc:07:45: 81:65:f5:96:2c:0d:2f:90:ba:cf:e4:f0:12:0b:60: 00:ba:f1:37:0a:a3:06:80:63:72:db:2d:ea:59:7f: ea:f2:ac:a6:ca:bf:dc:20:49:24:5a:b0:30:7d:c8: fc:7a:ed:59:79:10:86:60:d6:45:83:82:b0:16:20: d9:a3:85:51:e1:79:66:cb:32:52:4d:14:9f:de:bd: e7:63:81:84:19:ae:a4:b1:e2:41:c7:72:a1:a3:0f: 9e:c6:c3:7b:d1:cf:e5:22:ef:c3:0d:6b:d5:a7:a6: 37:65:66:7c:27:27:b5:3b:bf:09:87:db:a7:24:bc: f9:64:4f:d8:46:fe:4f:51:71:d6:2a:b5:3f:51:f1: e6:ba:8d:24:6a:81:75:66:e7:24:a5:a9:81:9e:8b: 33:33:fb:17:b7:59:a5:d6:a1:44:12:84:88:cc:9b: 14:ff:b3:4f:3b:c9:f7:66:ce:c2:a9:22:b4:78:55: 31:f7:0c:28:f7:2e:4a:05:8f:bc:9f:f9:73:9e:8c: a5:83:48:52:b1:2f:3f:c4:cd:54:8c:84:91:55:1d: 22:43:70:f5:97:49:47:d2:e0:6c:78:08:1c:d0:f1: 1f:ea:34:1b:99:69:90:b9:85:1b:40:30:56:ca:0a: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:F7:E2:1A:6D:5F:92:43:A5:83:9F:FF:F4:4E:20:2B:1E:C2:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:21:eb:27:c4:92:ba:0d:a7:a8:ab:ce:31:be:c0:5d:6f:f9: ba:d3:99:3d:32:25:05:e6:89:21:a0:ac:cc:f2:3b:95:3b:2e: bc:0c:60:a0:4c:09:38:2a:d2:fd:17:36:90:21:ba:20:db:89: 8c:cb:46:0f:da:76:42:14:34:63:08:81:90:9e:17:0f:c2:44: 34:e9:1a:d9:51:e6:27:32:a6:02:6d:5c:d7:0f:4b:f9:69:34: 44:9f:6a:a7:9d:35:b0:73:ea:ad:15:e1:f6:d9:07:7d:95:f8: 74:cd:ba:c4:f4:96:ed:c0:51:fd:a4:ab:eb:f0:20:a7:42:d9: 28:ed:75:1d:c7:15:71:dc:9f:cf:fb:b7:c6:94:69:05:8e:83: 29:b3:9f:30:1d:0b:1b:0b:d3:20:10:a7:dd:b3:4a:43:8a:98: f7:9e:7e:a6:ab:78:2c:9a:a1:9d:18:13:43:bd:3d:c0:ee:29: 06:f0:ef:16:19:4b:8e:59:7e:d1:dc:09:27:6b:a2:1a:38:57: f7:32:12:6f:55:d3:1d:de:73:1b:0f:3c:ff:52:51:df:fe:46: 16:fa:69:4a:77:77:7a:0f:82:ca:0e:e4:7e:0a:0a:57:ca:28: 3f:46:10:73:0a:d1:8e:d1:d0:e3:c3:33:e8:7b:a8:06:e9:6a: 21:06:7a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW4xuX+xGpiHYEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk OWZlMTRhNzctZDY3Mi00YzEwLTk3YmYtMTUzNmFjMjc0MDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpNGI9hDbZa4bND8B0WBZfWWLA0vkLrP5PAS C2AAuvE3CqMGgGNy2y3qWX/q8qymyr/cIEkkWrAwfcj8eu1ZeRCGYNZFg4KwFiDZ o4VR4XlmyzJSTRSf3r3nY4GEGa6kseJBx3Khow+exsN70c/lIu/DDWvVp6Y3ZWZ8 Jye1O78Jh9unJLz5ZE/YRv5PUXHWKrU/UfHmuo0kaoF1ZuckpamBnoszM/sXt1ml 1qFEEoSIzJsU/7NPO8n3Zs7CqSK0eFUx9wwo9y5KBY+8n/lznoylg0hSsS8/xM1U jISRVR0iQ3D1l0lH0uBseAgc0PEf6jQbmWmQuYUbQDBWygoTTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNa/9+IabV+SQ6WDn//0TiArHsKvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMWViNmFjMjYtZGU4YS0z NTU4LTkzOWYtYTdkY2FjNWNiOGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIh6yfEkroNp6irzjG+wF1v+brTmT0yJQXmiSGgrMzyO5U7LrwMYKBM CTgq0v0XNpAhuiDbiYzLRg/adkIUNGMIgZCeFw/CRDTpGtlR5icypgJtXNcPS/lp NESfaqedNbBz6q0V4fbZB32V+HTNusT0lu3AUf2kq+vwIKdC2SjtdR3HFXHcn8/7 t8aUaQWOgymznzAdCxsL0yAQp92zSkOKmPeefqareCyaoZ0YE0O9PcDuKQbw7xYZ S45ZftHcCSdroho4V/cyEm9V0x3ecxsPPP9SUd/+Rhb6aUp3d3oPgsoO5H4KClfK KD9GEHMK0Y7R0OPDM+h7qAbpaiEGeoM= -----END CERTIFICATE-----Generated at Mon Jan 19 17:12:12 2026 by rpki-client