This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa
File: 243aaf43-c9df-3a08-b963-f0e358be1f43.roa (raw, json)
Hash identifier: NRrORjQ/rKGO4FBYuAeCbZK5NAdt1ML3ERZ0vjpvwPM=
Subject key identifier: 34:FE:1D:66:A9:AA:6F:83:99:61:02:70:87:AE:39:52:9B:34:D3:65
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584BD1CB0C4D1CA5849AAACE7BD0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa
Signing time: Tue 11 Nov 2025 02:00:30 +0000
ROA not before: Tue 11 Nov 2025 02:00:30 +0000
ROA not after: Mon 09 Feb 2026 02:00:30 +0000
asID: 63199
IP address blocks: 148.153.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d1:cb:0c:4d:1c:a5:84:9a:aa:ce:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Nov 11 02:00:30 2025 GMT
Not After : Feb 9 02:00:30 2026 GMT
Subject: CN=507b6465-362c-41f8-8b84-19bb3fd0bf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:ae:dd:72:e1:70:24:95:ef:55:3a:d8:b1:
90:0d:13:9f:b3:e0:4f:b2:bf:ac:bc:71:0b:eb:b7:
c3:c0:b6:86:79:6a:c8:23:10:5d:b0:dc:48:4c:5c:
5d:b1:ba:11:3c:a3:d1:92:99:4c:5c:04:af:e8:c1:
f5:e7:41:69:b8:69:67:72:72:94:71:38:19:ec:e3:
e8:d1:81:b7:9a:56:2c:67:1f:b2:73:4b:c0:cb:d6:
8f:81:df:44:0c:aa:f3:67:84:b7:19:30:cb:68:9b:
be:15:6b:39:c4:06:ed:7b:eb:fa:fa:0d:16:06:49:
e8:98:52:95:bf:0a:7e:14:1b:16:86:20:56:d7:e6:
5f:52:72:14:94:30:c3:ff:a6:5a:45:66:73:4a:f5:
4b:36:9d:dc:35:82:f9:56:a7:72:0b:81:a7:77:0a:
96:dd:13:9f:83:73:29:61:f4:93:8a:5b:83:42:05:
e3:f1:0e:1f:23:b5:f3:d5:8c:ae:d2:8b:06:2d:71:
2e:53:b8:14:93:c8:1e:d4:bb:c0:d9:26:c0:62:10:
ad:1b:74:05:61:4e:2c:10:9b:38:b7:05:99:02:14:
81:ac:08:ef:cd:a5:08:3a:0b:0e:d3:61:54:75:e5:
12:b8:e4:31:90:2b:37:35:74:5d:8e:9e:94:b0:82:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FE:1D:66:A9:AA:6F:83:99:61:02:70:87:AE:39:52:9B:34:D3:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:a2:b9:05:4b:82:51:c0:b8:a0:65:0b:c7:f5:bd:bf:48:c0:
fa:92:3d:a5:a5:79:fd:8e:2b:50:63:30:2e:cb:22:f4:7a:9c:
55:80:d4:1f:21:67:86:ac:60:14:1d:84:38:18:ec:64:af:6d:
39:9a:99:9f:b9:14:07:af:14:07:0a:35:a5:98:47:27:02:66:
46:c3:88:d4:84:e9:63:c4:db:ba:22:e1:60:0a:57:d4:87:76:
ec:54:b1:92:2b:79:fe:fa:4e:8f:ef:bf:ad:17:44:bb:12:98:
5b:4d:b2:1b:7c:ee:36:0e:24:66:88:08:e5:bc:16:18:ce:cf:
6f:08:fe:8c:ac:68:8c:48:87:59:74:c4:89:06:be:b2:a8:a1:
2c:f1:35:d2:46:4f:f3:f8:a3:3c:df:7c:5e:fb:8b:b4:e2:82:
ec:f8:0c:b4:9f:fa:84:b9:35:50:a9:01:84:e7:8b:22:80:90:
a7:75:a3:f0:d5:b5:10:f3:77:b6:ab:29:91:bb:c4:87:fe:db:
41:42:a8:d4:90:bf:f5:b8:72:02:df:15:b3:89:90:f1:ec:fe:
fe:d7:1e:be:23:c8:55:4f:18:14:d1:38:a7:ef:88:0f:0c:c6:
7a:68:3a:c1:11:1c:d5:b0:6c:c8:6f:cf:0e:c8:20:81:76:5b:
e8:8d:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 12:26:07 2025 by rpki-client