This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa File: a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa (raw, json) Hash identifier: w2r2TXiJ+fbcJXY2SliL05UlXAhvazKqqIqKEtV0aIY= Subject key identifier: B7:E2:CF:2B:D4:C7:55:29:F4:2E:05:C1:F9:39:5C:93:71:D7:88:C5 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C0B062ECAB32BBE832BC93580 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 63199 IP address blocks: 148.153.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:2e:ca:b3:2b:be:83:2b:c9:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=a552fe2d-614c-4845-afd8-7677aaa6c636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:0e:da:c4:f8:1c:dd:df:29:98:7c:96:56: 96:b5:30:08:86:75:87:ec:a3:b0:a1:85:79:c8:bf: 70:e9:24:20:9a:5d:bd:2d:b7:c9:74:ea:a1:66:51: 6e:64:90:9b:e7:bb:b4:04:46:7e:9f:89:18:94:aa: 65:87:94:e7:a9:0a:75:15:cc:e7:a3:e2:1e:68:cf: 06:91:9f:33:4c:00:ff:5b:c5:c3:97:f9:f8:4c:93: a0:f1:a7:78:f6:f5:3b:d8:bd:00:22:90:04:c2:ce: ee:b6:01:5e:fb:3b:0c:20:79:05:16:fb:d3:14:49: 4a:10:aa:9c:2e:cd:27:cd:52:21:62:93:59:58:5e: 5f:ae:3b:9c:89:69:c8:71:21:19:b8:65:98:14:e1: e9:17:be:ac:73:5c:d3:56:29:97:da:49:4c:28:b6: fe:da:14:bd:06:5b:ae:83:e4:75:11:f0:0f:2d:ff: 10:41:d2:39:0b:25:a0:8b:ce:28:21:e7:8c:cc:55: ac:d2:e2:49:bb:0a:51:65:5d:a5:c4:a8:82:1a:85: 1b:a8:7a:dc:55:eb:6a:c3:bf:3a:19:11:d6:ab:2b: 12:57:06:a8:aa:34:68:d9:b3:cf:97:46:00:33:71: 44:66:04:d0:74:e5:ab:82:2e:53:28:68:db:14:81: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:CF:2B:D4:C7:55:29:F4:2E:05:C1:F9:39:5C:93:71:D7:88:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:74:35:b2:18:53:be:55:1c:28:0b:e8:25:30:97:d7:e5:f9: df:1d:e6:30:68:76:8e:ed:ed:81:e3:e5:1e:31:be:ac:04:6c: 84:3b:b2:5d:76:d0:be:b9:68:b0:a0:c1:ad:d2:c8:39:c1:37: 71:a7:67:dd:02:a0:91:d6:b1:58:0c:5c:b5:cc:b4:fb:9c:4f: 20:bb:e7:ac:90:2f:4d:3c:fb:09:8f:4e:78:75:e6:ed:2d:df: b3:57:0a:14:ad:fb:f9:6d:6e:a2:49:63:15:8c:a8:0f:2b:82: 13:ab:1b:c2:b2:7e:2f:5c:fc:3f:37:93:7c:a8:ee:49:73:b0: 00:37:2f:4c:e2:30:96:5c:45:31:d6:93:52:60:4d:58:f8:70: 34:69:94:db:de:38:26:2f:ae:fb:72:c7:12:7d:94:41:40:16: 86:97:6a:ee:44:24:12:5c:3b:fa:d5:4d:eb:c2:5b:9b:27:e2: 74:63:33:38:1a:44:72:62:ee:50:f1:a0:65:ba:0a:b0:59:31: eb:0b:1e:fa:4c:64:74:88:36:65:b7:2d:7c:6e:f5:54:ae:1b: 69:28:29:e2:e9:65:1d:81:c6:7b:e2:f9:d9:b7:55:f0:05:0f: 13:c5:95:b6:30:93:1b:02:16:e4:50:e9:8c:56:79:05:5f:b2: fa:57:89:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBi7Ksyu+gyvJNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk YTU1MmZlMmQtNjE0Yy00ODQ1LWFmZDgtNzY3N2FhYTZjNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRUO2sT4HN3fKZh8llaWtTAIhnWH7KOwoYV5 yL9w6SQgml29LbfJdOqhZlFuZJCb57u0BEZ+n4kYlKplh5TnqQp1Fczno+IeaM8G kZ8zTAD/W8XDl/n4TJOg8ad49vU72L0AIpAEws7utgFe+zsMIHkFFvvTFElKEKqc Ls0nzVIhYpNZWF5frjuciWnIcSEZuGWYFOHpF76sc1zTVimX2klMKLb+2hS9Bluu g+R1EfAPLf8QQdI5CyWgi84oIeeMzFWs0uJJuwpRZV2lxKiCGoUbqHrcVetqw786 GRHWqysSVwaoqjRo2bPPl0YAM3FEZgTQdOWrgi5TKGjbFIEsHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfizyvUx1Up9C4Fwfk5XJNx14jFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTc5M2VjOWQtODZkMS0z MDAyLWE5ZDQtNWE5OTQwZWRjZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh0NbIYU75VHCgL6CUwl9fl+d8d5jBodo7t7YHj5R4xvqwEbIQ7sl12 0L65aLCgwa3SyDnBN3GnZ90CoJHWsVgMXLXMtPucTyC756yQL008+wmPTnh15u0t 37NXChSt+/ltbqJJYxWMqA8rghOrG8Kyfi9c/D83k3yo7klzsAA3L0ziMJZcRTHW k1JgTVj4cDRplNveOCYvrvtyxxJ9lEFAFoaXau5EJBJcO/rVTevCW5sn4nRjMzga RHJi7lDxoGW6CrBZMesLHvpMZHSINmW3LXxu9VSuG2koKeLpZR2Bxnvi+dm3VfAF DxPFlbYwkxsCFuRQ6YxWeQVfsvpXiV4= -----END CERTIFICATE-----Generated at Fri Dec 5 12:28:02 2025 by rpki-client