This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa File: 2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa (raw, json) Hash identifier: TwxQcjlZs7SwK05Qsi4MlPdpFFthPLv60Ysv6Ko2PWg= Subject key identifier: 1F:9F:1F:6E:F9:F8:BC:AF:DD:74:13:55:0A:91:A2:EF:68:0B:69:3D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C7D7C618D1449948849A6AC80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 63199 IP address blocks: 148.153.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:61:8d:14:49:94:88:49:a6:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=0706ea85-7b76-44f4-ad24-6c23ae7e7bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:77:ff:12:3e:33:3e:17:b8:07:e3:bf:79: 63:79:9f:25:2e:0e:2b:af:18:c3:5c:ab:1b:8c:42: 60:8f:15:2c:8a:6e:c3:38:b7:1f:28:08:85:ac:52: fe:35:86:85:38:aa:df:35:2d:67:44:61:37:4a:87: a1:ea:43:7e:67:22:6f:c1:83:f0:50:0e:b0:68:15: 73:da:99:d1:4a:da:d9:0e:9e:45:64:14:14:bc:08: 28:f7:fc:7e:a8:f7:aa:c5:91:e2:75:62:e3:cd:d2: 5a:30:85:21:80:60:4f:b5:14:dd:00:a8:6a:ee:41: 11:3f:de:00:93:41:15:62:1e:8c:81:5c:97:f9:bc: d3:18:e4:5b:4a:c0:bf:d9:98:b2:21:80:f0:20:38: bc:3a:23:83:02:24:da:41:55:23:e8:dd:1b:e7:dc: 02:a0:cf:01:8f:8d:45:63:8d:d7:a1:2b:db:18:76: 74:2b:8d:e9:86:12:b9:89:e4:d9:1d:5d:7b:ac:d2: 63:63:44:2a:85:85:f3:b2:41:35:f2:cd:bf:ce:ef: c6:40:fb:d5:fc:3c:8e:1c:fb:0e:23:31:cf:d1:69: 49:b4:34:1d:e5:06:6c:57:c5:2c:00:d4:a0:5f:02: 55:87:6c:f7:d2:e2:1e:88:a7:50:fd:c2:14:81:1b: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9F:1F:6E:F9:F8:BC:AF:DD:74:13:55:0A:91:A2:EF:68:0B:69:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0d:ee:3e:2c:9a:5b:b1:78:12:28:fe:4b:c6:38:d2:3b:83: c4:a4:1c:47:76:ff:6f:40:2c:e4:72:94:be:49:a1:3c:fb:23: 1d:04:fc:46:e7:69:10:63:da:63:17:18:8a:4b:38:a6:49:48: 6d:19:ba:24:db:b1:6e:97:bf:ab:0c:68:ef:23:ef:2a:11:ac: a6:1f:31:4b:c7:14:59:99:05:7c:9d:8a:66:df:88:a0:c4:56: e6:7d:59:95:06:26:11:71:55:73:0e:1e:a9:ad:0f:b9:62:af: 27:87:32:0d:fa:74:55:5d:ac:4c:08:ed:74:b3:0f:76:9b:8c: d6:2c:d8:39:23:ac:c3:66:d4:57:00:1a:0c:b0:4a:71:4f:ee: d7:95:4f:d9:90:a6:30:71:a8:e8:b7:9d:d3:70:6d:86:ab:ff: 96:72:ba:18:5a:f5:c2:e9:46:03:0d:03:5e:06:8c:37:57:df: da:4a:aa:80:c2:2d:66:04:2e:bd:d3:c2:7d:b4:a0:aa:53:8f: 8c:4a:a9:3b:5d:64:a5:ff:12:01:97:72:0f:bf:58:db:fa:43: 99:62:51:ad:8a:f6:0b:06:0d:c4:1f:ef:1b:b2:0e:14:b2:31: 56:72:f8:07:61:f7:5a:f3:ca:b9:86:cf:aa:ed:22:7d:00:e4: b8:59:c8:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fGGNFEmUiEmmrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk MDcwNmVhODUtN2I3Ni00NGY0LWFkMjQtNmMyM2FlN2U3YmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvld3/xI+Mz4XuAfjv3ljeZ8lLg4rrxjDXKsb jEJgjxUsim7DOLcfKAiFrFL+NYaFOKrfNS1nRGE3Soeh6kN+ZyJvwYPwUA6waBVz 2pnRStrZDp5FZBQUvAgo9/x+qPeqxZHidWLjzdJaMIUhgGBPtRTdAKhq7kERP94A k0EVYh6MgVyX+bzTGORbSsC/2ZiyIYDwIDi8OiODAiTaQVUj6N0b59wCoM8Bj41F Y43XoSvbGHZ0K43phhK5ieTZHV17rNJjY0QqhYXzskE18s2/zu/GQPvV/DyOHPsO IzHP0WlJtDQd5QZsV8UsANSgXwJVh2z30uIeiKdQ/cIUgRueSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+fH275+Lyv3XQTVQqRou9oC2k9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmMyMGQyMWItOGEwZS0z ZGY0LTkxMTMtYzg2NmY1Yjk4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJm5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAN7j4smluxeBIo/kvGONI7g8SkHEd2/29ALORylL5JoTz7Ix0E/Ebn aRBj2mMXGIpLOKZJSG0ZuiTbsW6Xv6sMaO8j7yoRrKYfMUvHFFmZBXydimbfiKDE VuZ9WZUGJhFxVXMOHqmtD7liryeHMg36dFVdrEwI7XSzD3abjNYs2DkjrMNm1FcA GgywSnFP7teVT9mQpjBxqOi3ndNwbYar/5Zyuhha9cLpRgMNA14GjDdX39pKqoDC LWYELr3Twn20oKpTj4xKqTtdZKX/EgGXcg+/WNv6Q5liUa2K9gsGDcQf7xuyDhSy MVZy+Adh91rzyrmGz6rtIn0A5LhZyG4= -----END CERTIFICATE-----Generated at Mon Jan 19 17:12:13 2026 by rpki-client