This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa File: a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa (raw, json) Hash identifier: fb59Fg/dK2TL7FJJKoDV8GP1jAOqz7iU2kDrK3IHPqg= Subject key identifier: 32:55:9A:EA:46:D7:00:06:DF:52:08:50:C3:5A:9D:D4:CF:4B:CD:E6 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C4B3BD65B538ECCE75F1B1A40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa Signing time: Wed 24 Dec 2025 14:00:40 +0000 ROA not before: Wed 24 Dec 2025 14:00:40 +0000 ROA not after: Tue 24 Mar 2026 13:00:40 +0000 asID: 63199 IP address blocks: 148.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:d6:5b:53:8e:cc:e7:5f:1b:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 24 14:00:40 2025 GMT Not After : Mar 24 13:00:40 2026 GMT Subject: CN=dc3d9807-875d-4111-bcb5-3d7adf862116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d8:3a:78:2b:d0:63:40:d0:d1:32:45:05:47: 83:7a:8d:47:ab:0c:60:2e:79:89:a1:44:65:a9:11: fc:21:b6:a1:24:19:b6:17:14:16:b4:3a:77:c8:55: 32:89:36:0b:a8:7e:15:bc:54:bc:15:a3:19:e6:92: 7f:9b:5c:a1:35:8c:3d:63:df:c7:b8:a4:83:03:ab: 51:60:b0:bd:78:53:9c:c7:b5:35:96:7a:9a:9e:f7: 9f:b1:55:74:7d:24:ae:35:f1:92:4a:20:08:eb:3d: 6a:a9:3b:a0:86:d6:7c:e3:c7:8e:de:c4:55:a2:03: 1d:a5:66:4f:45:3d:8d:1a:6e:85:78:a1:8a:65:d5: cc:80:8e:a7:c1:b0:bd:ef:cc:2d:d1:14:c7:e7:99: 3e:6b:6f:c6:3d:a7:56:cd:3b:75:1a:4f:e9:87:c2: 45:34:11:6f:df:2d:8b:8e:4f:4a:19:bc:c4:67:14: be:69:41:92:f3:0f:a5:89:12:5e:2d:a0:61:6b:52: 4d:b3:7d:19:77:24:f8:75:c9:d9:29:9c:20:34:32: 9b:ba:30:0f:dd:ef:c1:1f:3d:2e:1a:5c:a0:0f:04: 05:08:2a:a4:8a:6a:ce:91:a5:19:7b:bd:e6:f8:9f: 41:d1:23:95:4e:5f:0d:a4:08:1a:13:27:0f:c6:b2: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:55:9A:EA:46:D7:00:06:DF:52:08:50:C3:5A:9D:D4:CF:4B:CD:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:77:06:03:ec:2b:e7:7f:de:22:38:f9:ce:e3:08:dc:92:05: f8:9c:6e:63:96:1a:3f:52:73:40:14:a4:63:aa:81:09:60:69: 76:6e:74:36:08:c9:aa:32:db:81:48:09:5f:f8:8d:1e:87:cd: fa:c6:b1:71:51:37:aa:59:b8:66:bc:63:64:f6:c8:89:cb:53: 31:c1:0f:bb:82:f8:93:69:e6:c8:18:c5:10:87:df:c1:49:4e: 32:28:ad:06:1d:99:d2:02:ed:98:34:27:2e:02:cc:58:b2:79: 10:6e:53:93:51:c3:91:5e:35:28:48:80:a2:5b:ab:bf:3c:62: a7:df:4a:a1:21:b0:c6:6b:4a:b0:91:89:cd:7d:c0:8d:2d:0c: dd:2e:48:cb:53:73:ef:fc:6d:17:2d:ed:57:86:93:c6:ed:43: c9:33:28:48:79:cf:32:11:b7:8f:a8:66:ad:f9:06:33:23:0d: a5:b3:5b:4f:7b:6a:f6:fd:77:08:56:86:d8:10:ba:ad:68:a2: fb:e9:00:40:f0:39:d3:55:dc:46:24:ff:53:ad:e8:70:c9:97: 54:57:b7:1c:56:cf:ad:d4:70:23:7d:46:b3:60:0b:e3:d4:67: e5:97:98:d2:91:48:bf:fc:1e:16:f9:f3:1b:5c:07:1d:a1:2e: 59:e3:b2:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExLO9ZbU47M518bGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk ZGMzZDk4MDctODc1ZC00MTExLWJjYjUtM2Q3YWRmODYyMTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNg6eCvQY0DQ0TJFBUeDeo1HqwxgLnmJoURl qRH8IbahJBm2FxQWtDp3yFUyiTYLqH4VvFS8FaMZ5pJ/m1yhNYw9Y9/HuKSDA6tR YLC9eFOcx7U1lnqanvefsVV0fSSuNfGSSiAI6z1qqTughtZ848eO3sRVogMdpWZP RT2NGm6FeKGKZdXMgI6nwbC978wt0RTH55k+a2/GPadWzTt1Gk/ph8JFNBFv3y2L jk9KGbzEZxS+aUGS8w+liRJeLaBha1JNs30ZdyT4dcnZKZwgNDKbujAP3e/BHz0u GlygDwQFCCqkimrOkaUZe73m+J9B0SOVTl8NpAgaEycPxrK8ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJVmupG1wAG31IIUMNandTPS83mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTdmODU2ZDItNDFkNi0z NmViLTk2MGEtY2MxNWZjZTllMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ3BgPsK+d/3iI4+c7jCNySBficbmOWGj9Sc0AUpGOqgQlgaXZudDYI yaoy24FICV/4jR6HzfrGsXFRN6pZuGa8Y2T2yInLUzHBD7uC+JNp5sgYxRCH38FJ TjIorQYdmdIC7Zg0Jy4CzFiyeRBuU5NRw5FeNShIgKJbq788YqffSqEhsMZrSrCR ic19wI0tDN0uSMtTc+/8bRct7VeGk8btQ8kzKEh5zzIRt4+oZq35BjMjDaWzW097 avb9dwhWhtgQuq1oovvpAEDwOdNV3EYk/1Ot6HDJl1RXtxxWz63UcCN9RrNgC+PU Z+WXmNKRSL/8Hhb58xtcBx2hLlnjsj0= -----END CERTIFICATE-----Generated at Mon Jan 19 17:12:07 2026 by rpki-client