This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa File: 264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa (raw, json) Hash identifier: Ascqvrud71dFPuDSsxWRXtsrKRPxP2Y+3KimdSIjOq0= Subject key identifier: 08:85:6C:40:C1:BB:93:73:6B:0A:32:51:1A:A8:3D:F8:85:CE:EC:97 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C52367778DF08C9307BE8D100 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 63199 IP address blocks: 148.153.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:77:78:df:08:c9:30:7b:e8:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=a8851381-4ed4-4cd3-8be8-6e195ffae74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:98:fe:a5:3e:51:92:85:d5:c6:b6:ce:c2:fd: 05:5f:28:a1:af:0a:13:90:df:9b:81:34:e1:bd:21: 21:c4:39:14:94:3d:63:c1:90:d0:d8:b7:a3:49:30: ba:68:e1:73:7d:e7:93:fb:15:7c:8b:76:63:0b:8d: 93:16:3f:40:55:94:3f:e2:76:f6:1e:c2:1d:4c:ca: c4:62:bd:36:c5:51:2b:85:30:e6:b1:f0:65:4c:4d: 74:a6:7d:90:3a:76:96:eb:35:15:7b:6a:f9:fd:ca: 92:06:47:fd:b5:de:33:8f:b2:e2:7e:d1:bb:3f:d5: bc:d4:97:d8:a6:41:6a:4c:c4:8f:f3:1a:6c:87:f8: 61:0a:2a:50:85:71:26:9a:2d:94:e0:a1:91:dc:03: 98:2b:a6:9f:ea:d6:48:08:20:eb:85:4f:d0:cc:f9: 09:a4:f7:77:d7:c9:41:a2:db:21:3a:34:a2:24:c9: c4:47:78:2e:06:0c:75:45:60:99:8e:d9:e1:c0:1f: f0:2b:49:e7:2c:e0:25:ef:38:ff:c8:cb:91:8c:83: fa:87:be:e1:c1:c1:80:4c:9a:0f:4e:98:00:a8:92: 05:85:94:c6:d6:80:d6:df:cd:81:96:45:10:95:74: cc:8f:ba:aa:1b:4d:c3:6a:39:6c:47:2d:e1:75:b0: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:6C:40:C1:BB:93:73:6B:0A:32:51:1A:A8:3D:F8:85:CE:EC:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a1:76:f9:37:9a:47:bb:6a:6c:02:4f:d0:79:9b:a4:66:e0: 7e:06:e7:de:e8:7d:76:0e:9f:d4:d6:c5:3a:b3:5d:9b:68:b5: dc:64:96:8f:9d:3f:90:14:66:8d:04:d4:9f:89:f3:1a:d8:f6: 53:69:20:73:a5:39:2b:78:25:96:6d:63:21:ce:55:70:b4:bc: a0:d0:3a:64:49:34:2c:46:01:1e:da:9d:77:28:70:cb:27:69: 69:18:4c:bd:94:6f:91:14:00:ea:44:de:53:f7:4b:77:57:0f: 13:4d:84:44:1e:ee:1b:ef:7e:e5:8a:66:24:c2:89:b4:22:8c: d7:fb:8b:db:a6:ec:2a:bb:8b:ce:bd:7c:e0:be:0f:85:90:75: e7:b2:4f:53:28:75:b8:9e:81:de:40:28:45:5d:25:e5:44:f6: e7:e2:a8:16:7a:0e:2e:ba:dc:fe:78:58:dd:83:92:8e:2e:02: 60:e3:cf:af:a2:59:de:fa:5e:47:a1:ec:9e:56:87:f5:10:84: 06:52:ac:09:e0:f5:0a:c4:c7:e7:e1:56:24:3e:19:d9:d4:9e: 1b:25:fa:53:4f:d3:33:4a:45:92:ca:cd:4b:e3:43:9f:5d:d7: 7b:46:b3:25:19:ae:2a:b9:2f:18:bf:a1:dc:2f:8d:e0:a1:1b: 07:35:96:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExSNnd43wjJMHvo0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk YTg4NTEzODEtNGVkNC00Y2QzLThiZTgtNmUxOTVmZmFlNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pj+pT5RkoXVxrbOwv0FXyihrwoTkN+bgTTh vSEhxDkUlD1jwZDQ2LejSTC6aOFzfeeT+xV8i3ZjC42TFj9AVZQ/4nb2HsIdTMrE Yr02xVErhTDmsfBlTE10pn2QOnaW6zUVe2r5/cqSBkf9td4zj7LiftG7P9W81JfY pkFqTMSP8xpsh/hhCipQhXEmmi2U4KGR3AOYK6af6tZICCDrhU/QzPkJpPd318lB otshOjSiJMnER3guBgx1RWCZjtnhwB/wK0nnLOAl7zj/yMuRjIP6h77hwcGATJoP TpgAqJIFhZTG1oDW382BlkUQlXTMj7qqG03DajlsRy3hdbDKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiFbEDBu5NzawoyURqoPfiFzuyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjY0ZDc0OTgtYTAyYy0z ZWEzLWE4ZjYtMWZiZDEwYTJiZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2hdvk3mke7amwCT9B5m6Rm4H4G597ofXYOn9TWxTqzXZtotdxklo+d P5AUZo0E1J+J8xrY9lNpIHOlOSt4JZZtYyHOVXC0vKDQOmRJNCxGAR7anXcocMsn aWkYTL2Ub5EUAOpE3lP3S3dXDxNNhEQe7hvvfuWKZiTCibQijNf7i9um7Cq7i869 fOC+D4WQdeeyT1Modbiegd5AKEVdJeVE9ufiqBZ6Di663P54WN2Dko4uAmDjz6+i Wd76Xkeh7J5Wh/UQhAZSrAng9QrEx+fhViQ+GdnUnhsl+lNP0zNKRZLKzUvjQ59d 13tGsyUZriq5Lxi/odwvjeChGwc1lng= -----END CERTIFICATE-----Generated at Mon Jan 19 17:12:13 2026 by rpki-client