This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa File: 33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa (raw, json) Hash identifier: z+Lw+asyyJPaIOAwn9r+5U+Y/s91Hrd/8OyltpjKl3I= Subject key identifier: BC:C8:F7:65:5B:B8:51:6C:89:E0:B8:A9:07:A7:3B:D5:33:CF:20:12 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584BE1260FD3E3D61560275D0640 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa Signing time: Sun 16 Nov 2025 14:00:39 +0000 ROA not before: Sun 16 Nov 2025 14:00:39 +0000 ROA not after: Sat 14 Feb 2026 14:00:39 +0000 asID: 63199 IP address blocks: 148.153.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:26:0f:d3:e3:d6:15:60:27:5d:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Nov 16 14:00:39 2025 GMT Not After : Feb 14 14:00:39 2026 GMT Subject: CN=d5af19b3-6932-4258-895f-02fdd79ff004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e4:80:3b:29:ce:6d:15:ff:5b:f4:9f:61:10: d5:bd:bc:a5:bc:28:6c:64:34:63:2f:89:81:53:38: 09:07:b7:1a:7a:d7:e8:fb:0e:37:df:78:28:2e:3b: cc:b3:a2:43:ea:d5:a5:db:4a:cb:26:00:ab:2a:d9: 2b:76:c5:3c:e9:01:d2:30:fb:3c:90:4e:2b:29:7d: a1:75:32:d6:93:d0:31:8a:eb:9e:4e:a5:f5:2c:e2: 70:fd:43:e5:8a:e4:07:0c:a5:8d:a6:77:8c:64:9b: 07:dc:31:15:f9:64:ba:87:e9:cb:19:c5:02:06:48: 0e:d3:a4:a8:76:78:47:f5:9d:5e:9a:6f:5e:57:eb: 35:2c:84:6c:51:84:9c:cf:c9:3d:6e:1d:4b:b2:bb: 45:39:b4:a5:6c:93:42:28:fb:40:56:bf:42:5b:8a: 0d:32:94:31:ae:e5:9a:51:1c:66:78:02:df:31:a7: cf:3d:4a:b5:cf:10:3d:ea:df:1e:de:b4:15:68:11: 6c:61:b1:5d:fc:90:78:53:9a:4a:6a:a1:82:52:2f: a9:37:d0:5a:d0:3c:0b:d3:cb:83:46:e7:9c:6d:79: b7:22:29:ce:3b:54:bf:f5:c6:73:10:40:ad:c6:a5: b9:21:13:39:44:62:bf:01:31:31:a3:95:64:e1:ec: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C8:F7:65:5B:B8:51:6C:89:E0:B8:A9:07:A7:3B:D5:33:CF:20:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a7:39:b1:d2:7f:16:d3:2d:2b:1b:6d:be:dd:1e:42:eb:92: f0:29:7d:52:b0:be:3a:d8:48:4d:83:ec:de:b7:cf:0b:0d:05: a3:41:7e:c9:8b:64:da:42:d3:f8:ca:47:63:ac:e4:07:7d:16: cb:10:e5:c5:ec:d3:7c:e9:f1:2a:d0:91:11:5b:b3:90:c0:cf: 20:40:98:d3:69:fc:c4:ca:4a:cb:c9:c6:80:db:a3:8c:5a:5d: 35:ed:3d:2a:1d:48:38:52:65:be:2f:a8:73:00:c0:37:ad:94: d1:38:a2:22:43:3c:51:08:7c:37:df:94:a5:75:54:44:45:81: 73:10:26:87:62:b5:ce:77:62:cf:cd:ed:b6:15:b4:de:a6:c7: ff:08:9b:50:e4:c0:66:2f:f5:22:49:c7:d6:66:8c:98:bd:57: 0d:60:fb:9a:1e:d3:2a:0f:54:3a:76:bb:23:ba:97:d1:73:aa: a1:bc:94:b3:5a:62:ca:8b:25:65:7a:32:4a:2e:8c:97:18:8d: 89:69:e6:de:7d:46:e4:d8:22:71:5a:a4:aa:f0:9d:92:8d:87: 0b:96:b5:76:e4:c5:1a:77:e4:fa:84:d3:5e:1f:e0:7c:cc:78: 54:19:16:c4:89:42:84:07:28:98:a9:c2:62:56:d3:2a:42:5e: 16:c2:bf:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvhJg/T49YVYCddBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTExNjE0MDAzOVoXDTI2MDIxNDE0MDAzOVowLzEtMCsGA1UEAxMk ZDVhZjE5YjMtNjkzMi00MjU4LTg5NWYtMDJmZGQ3OWZmMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuSAOynObRX/W/SfYRDVvbylvChsZDRjL4mB UzgJB7caetfo+w4333goLjvMs6JD6tWl20rLJgCrKtkrdsU86QHSMPs8kE4rKX2h dTLWk9AxiuueTqX1LOJw/UPliuQHDKWNpneMZJsH3DEV+WS6h+nLGcUCBkgO06So dnhH9Z1emm9eV+s1LIRsUYScz8k9bh1LsrtFObSlbJNCKPtAVr9CW4oNMpQxruWa URxmeALfMafPPUq1zxA96t8e3rQVaBFsYbFd/JB4U5pKaqGCUi+pN9Ba0DwL08uD RuecbXm3IinOO1S/9cZzEECtxqW5IRM5RGK/ATExo5Vk4eyGdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzI92VbuFFsieC4qQenO9UzzyASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMzNhNjE2YmUtY2U4MC0z NWMyLWI3ZjctZWE5YzAwYTJhNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGenObHSfxbTLSsbbb7dHkLrkvApfVKwvjrYSE2D7N63zwsNBaNBfsmL ZNpC0/jKR2Os5Ad9FssQ5cXs03zp8SrQkRFbs5DAzyBAmNNp/MTKSsvJxoDbo4xa XTXtPSodSDhSZb4vqHMAwDetlNE4oiJDPFEIfDfflKV1VERFgXMQJoditc53Ys/N 7bYVtN6mx/8Im1DkwGYv9SJJx9ZmjJi9Vw1g+5oe0yoPVDp2uyO6l9FzqqG8lLNa YsqLJWV6MkoujJcYjYlp5t59RuTYInFapKrwnZKNhwuWtXbkxRp35PqE014f4HzM eFQZFsSJQoQHKJipwmJW0ypCXhbCv0w= -----END CERTIFICATE-----Generated at Fri Dec 5 12:27:09 2025 by rpki-client