This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa File: a5fade6e-275c-3ed2-a0be-b21ddef61294.roa (raw, json) Hash identifier: HjClbIKvbK2sXapwWibVr9r3vfEsosBNPsBMYT0L7/U= Subject key identifier: 8E:A6:45:F8:83:BE:F3:EA:97:6B:4F:F0:49:1B:B9:06:E6:40:2E:F7 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C42DBF401B32FFC14569CEE80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 63199 IP address blocks: 148.153.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:f4:01:b3:2f:fc:14:56:9c:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=1f5f87f2-ed58-4436-bf5c-381f9eac994f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:ad:e3:f1:e0:a2:3f:4a:1b:f3:f1:2c:21: 6e:74:da:dc:e2:63:2b:9a:9f:5e:e4:a5:69:51:a6: fd:51:42:f2:e1:f4:dd:87:44:0a:eb:12:4c:4c:b0: 3c:4e:39:77:d8:b9:e9:94:b5:f4:6f:c7:08:eb:1e: ba:a7:71:eb:a4:e9:0e:36:97:73:cd:b6:81:e8:1d: 83:cb:66:45:e4:0f:da:cd:9d:be:74:de:4c:60:ad: 0e:e6:a6:c1:57:1f:84:59:f2:41:50:7b:df:b4:8e: 29:91:77:62:49:8e:27:35:42:76:c5:bd:00:7e:4e: 86:5d:8c:63:f7:c4:76:99:a3:ba:68:0b:67:1c:f4: 76:cf:b4:17:0e:d3:50:07:5e:70:2f:89:f6:85:b1: ea:85:c7:c5:f0:b6:30:89:83:27:a6:9c:30:80:cd: a6:ff:fc:8d:7d:90:86:60:77:7d:3f:3b:7c:b7:32: f5:b8:7d:15:ec:17:e1:82:fa:19:c9:c4:97:14:8c: 76:a0:ce:4d:e7:ba:8f:32:44:81:33:ca:c5:0c:bd: f3:da:54:18:d7:b7:50:06:f3:2c:14:ba:5a:26:d0: 47:2e:92:a4:c0:f0:81:4a:f4:9c:ae:66:44:bb:9f: 7c:32:8b:3c:40:41:96:7f:fc:93:0d:15:c0:c8:ba: 59:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:45:F8:83:BE:F3:EA:97:6B:4F:F0:49:1B:B9:06:E6:40:2E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b4:ed:fa:60:a6:aa:98:a7:77:22:02:47:41:68:2b:5f:a5: 07:83:2f:6d:44:c8:ed:b3:41:00:2b:cb:24:03:6a:a5:5c:14: 00:5c:22:49:33:bd:0c:f1:38:58:7e:65:b0:33:81:82:76:3e: 61:2c:a9:f5:b2:fd:4d:2f:54:7d:49:22:98:2c:b9:93:21:08: 26:e0:30:50:de:9e:de:08:91:8c:cb:62:de:57:c1:58:41:1f: 20:ab:a9:97:3d:cf:b0:f1:e3:00:b1:9a:1b:74:14:1f:a5:05: c7:f8:f8:af:1e:91:2c:3d:87:4d:2a:ec:9a:13:3a:16:8c:72: 27:77:77:2a:16:97:cf:74:d3:1b:6d:bc:0f:b8:e4:3e:a3:d9: d2:63:96:04:d7:89:2a:a0:68:48:1d:2b:53:6c:84:d7:72:86: 35:56:26:46:3b:38:78:2d:09:4c:fd:c0:9d:22:e8:10:b8:de: c8:6e:e4:75:42:80:b8:f1:ae:7a:b6:0f:89:cc:98:31:48:73: 9b:eb:50:1d:cd:0c:33:5e:c9:97:3b:4f:d0:30:7b:f9:aa:81: db:9a:c8:5e:fb:e0:33:9c:ca:ee:05:1a:ed:b5:02:2e:b3:bc: 8e:35:c2:61:6b:aa:cd:72:2a:05:45:d1:43:ed:64:94:c6:48: f5:81:5c:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/QBsy/8FFac7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MWY1Zjg3ZjItZWQ1OC00NDM2LWJmNWMtMzgxZjllYWM5OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc6t4/Hgoj9KG/PxLCFudNrc4mMrmp9e5KVp Uab9UULy4fTdh0QK6xJMTLA8Tjl32LnplLX0b8cI6x66p3HrpOkONpdzzbaB6B2D y2ZF5A/azZ2+dN5MYK0O5qbBVx+EWfJBUHvftI4pkXdiSY4nNUJ2xb0Afk6GXYxj 98R2maO6aAtnHPR2z7QXDtNQB15wL4n2hbHqhcfF8LYwiYMnppwwgM2m//yNfZCG YHd9Pzt8tzL1uH0V7BfhgvoZycSXFIx2oM5N57qPMkSBM8rFDL3z2lQY17dQBvMs FLpaJtBHLpKkwPCBSvScrmZEu598Mos8QEGWf/yTDRXAyLpZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6mRfiDvvPql2tP8EkbuQbmQC73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTVmYWRlNmUtMjc1Yy0z ZWQyLWEwYmUtYjIxZGRlZjYxMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW07fpgpqqYp3ciAkdBaCtfpQeDL21EyO2zQQAryyQDaqVcFABcIkkz vQzxOFh+ZbAzgYJ2PmEsqfWy/U0vVH1JIpgsuZMhCCbgMFDent4IkYzLYt5XwVhB HyCrqZc9z7Dx4wCxmht0FB+lBcf4+K8ekSw9h00q7JoTOhaMcid3dyoWl8900xtt vA+45D6j2dJjlgTXiSqgaEgdK1NshNdyhjVWJkY7OHgtCUz9wJ0i6BC43shu5HVC gLjxrnq2D4nMmDFIc5vrUB3NDDNeyZc7T9Awe/mqgduayF774DOcyu4FGu21Ai6z vI41wmFrqs1yKgVF0UPtZJTGSPWBXN4= -----END CERTIFICATE-----Generated at Mon Jan 19 17:13:23 2026 by rpki-client