This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa File: 40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa (raw, json) Hash identifier: vM6lO5ySwSOIz2NvKc+0Wp3x2u1lsNFEjgUlSNKKQ40= Subject key identifier: 89:E1:25:ED:32:DC:E7:13:D3:D5:58:67:F4:9A:1C:E7:CF:8B:A2:E2 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C470BB305C091AD499585BCC0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 63199 IP address blocks: 148.153.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:b3:05:c0:91:ad:49:95:85:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=b56ceaa4-3a31-41a0-b7f1-53b7ac20ee04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:20:4c:09:06:a4:82:e0:48:4f:61:b0:e2:58: 3c:49:32:57:82:5a:d6:a6:b5:79:7e:55:e5:0d:8b: 4f:ef:0f:83:c7:d1:b1:c2:b7:cc:41:df:b4:db:ae: 89:a2:f1:db:d1:fb:1e:f9:24:bb:59:05:cc:c0:61: 59:f5:16:cf:cf:63:45:16:04:1a:4f:3c:6a:5c:2b: 77:ee:d4:7b:e5:cf:7a:f7:4b:da:b7:46:0f:ff:4f: d7:97:5f:f2:b9:95:c3:8b:51:b1:75:d5:8c:b3:43: e1:27:26:99:5e:21:3a:d0:60:c9:ef:39:4c:df:5d: c6:4b:b2:9b:b8:85:fb:2f:2d:fc:e1:6d:4d:dc:ba: 5d:e6:1f:31:b3:03:74:0a:0e:d7:dc:14:3d:82:9a: 80:53:ee:f6:8b:5f:88:3b:f4:09:e6:8e:13:ac:ac: 4c:ef:8e:30:74:d2:18:87:23:8e:cb:7b:48:e9:c4: 26:e7:e1:fe:30:f4:09:23:8c:17:83:21:a6:5e:83: a5:93:51:7e:f9:76:2f:a7:81:91:61:34:ea:d5:a2: 2a:df:07:24:82:32:59:8b:2a:a8:23:c9:ce:cc:7a: a1:52:b3:a3:54:65:73:24:b2:61:57:9b:50:ce:93: de:41:87:c6:d6:57:85:40:23:91:d3:74:bd:eb:4f: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E1:25:ED:32:DC:E7:13:D3:D5:58:67:F4:9A:1C:E7:CF:8B:A2:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:37:40:3d:6f:12:69:12:11:2d:cb:05:91:72:4c:49:95:51: e9:48:de:5f:69:b7:ff:0d:bb:30:be:c9:60:c7:1d:94:c0:61: 50:3c:14:8c:e8:f7:ed:3a:ea:ce:c8:9d:7f:ec:7a:49:fb:93: fa:74:81:61:59:dc:ba:3f:14:90:c1:85:83:ab:65:c2:f2:75: 06:69:ba:e6:9f:6f:b7:1c:10:b1:3f:57:59:31:d4:32:c1:d3: 9b:79:bb:41:27:2f:cf:e8:a8:8b:5e:24:aa:07:36:54:d4:06: c8:66:37:21:bb:e2:f1:2b:16:9d:80:29:ff:2c:fa:dd:bb:27: 75:56:1a:ca:4c:45:91:70:41:e1:10:c1:79:5f:b3:f9:69:42: 59:b4:5c:c7:83:e3:83:18:63:cd:f3:ac:e2:31:6d:ec:2f:43: 52:cf:af:13:97:b4:be:6c:68:b8:00:9a:2a:a0:37:63:3c:d8: a4:70:1f:9f:cd:28:53:90:06:13:d3:f2:99:dc:07:0e:73:43: e8:08:93:1b:e7:24:e7:fc:e1:91:a3:fb:47:1e:7b:13:38:be: ac:fd:b5:b7:3f:69:bd:72:9f:b6:b7:a5:6f:9a:74:c9:15:b6: 36:d9:97:94:4e:7f:c3:65:9e:f5:30:08:9c:b4:a2:39:a9:80: e0:7d:5d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC7MFwJGtSZWFvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk YjU2Y2VhYTQtM2EzMS00MWEwLWI3ZjEtNTNiN2FjMjBlZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyBMCQakguBIT2Gw4lg8STJXglrWprV5flXl DYtP7w+Dx9GxwrfMQd+0266JovHb0fse+SS7WQXMwGFZ9RbPz2NFFgQaTzxqXCt3 7tR75c9690vat0YP/0/Xl1/yuZXDi1GxddWMs0PhJyaZXiE60GDJ7zlM313GS7Kb uIX7Ly384W1N3Lpd5h8xswN0Cg7X3BQ9gpqAU+72i1+IO/QJ5o4TrKxM744wdNIY hyOOy3tI6cQm5+H+MPQJI4wXgyGmXoOlk1F++XYvp4GRYTTq1aIq3wckgjJZiyqo I8nOzHqhUrOjVGVzJLJhV5tQzpPeQYfG1leFQCOR03S9608IQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInhJe0y3OcT09VYZ/SaHOfPi6LiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDBiOWM5ODItMDVkMS0z ZTRhLTg4NDEtZjJkN2RiZGIxMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA3QD1vEmkSES3LBZFyTEmVUelI3l9pt/8NuzC+yWDHHZTAYVA8FIzo 9+066s7InX/sekn7k/p0gWFZ3Lo/FJDBhYOrZcLydQZpuuafb7ccELE/V1kx1DLB 05t5u0EnL8/oqIteJKoHNlTUBshmNyG74vErFp2AKf8s+t27J3VWGspMRZFwQeEQ wXlfs/lpQlm0XMeD44MYY83zrOIxbewvQ1LPrxOXtL5saLgAmiqgN2M82KRwH5/N KFOQBhPT8pncBw5zQ+gIkxvnJOf84ZGj+0ceexM4vqz9tbc/ab1yn7a3pW+adMkV tjbZl5ROf8NlnvUwCJy0ojmpgOB9XQA= -----END CERTIFICATE-----Generated at Mon Jan 19 17:13:23 2026 by rpki-client