This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
File: badd067d-d8c6-3638-b8fc-51032051faf9.roa (raw, json)
Hash identifier: z5MxAqvyuj01OMojjXktHsG3oDo92xjrBVdqDExFMLs=
Subject key identifier: 53:F5:F7:39:8E:11:FA:2B:E4:89:D0:3A:F0:FA:C4:AB:81:9A:A8:79
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584BC53B08D240C79D8B685D0A00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 63199
IP address blocks: 148.153.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Dec 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3b:08:d2:40:c7:9d:8b:68:5d:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=97ca7a00-2150-4532-bae4-f5894956f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:6e:8c:51:b1:48:e0:f2:e6:dc:0e:e0:60:
9a:6e:12:fd:ca:f5:77:f0:6f:1a:c7:5c:52:35:46:
7c:51:1c:46:24:bc:dd:c8:64:88:29:39:9c:22:46:
c9:11:4d:6f:f7:44:8a:38:94:5c:63:00:be:f7:1d:
89:34:bc:61:8e:60:00:53:41:7d:22:f9:68:93:c3:
52:89:80:53:7c:ef:8e:0c:3b:b4:e3:24:fb:43:5c:
75:16:c5:1a:5c:c9:67:ea:ec:00:cd:a0:ff:ca:7b:
04:ed:4e:8d:64:16:bb:e2:6c:35:16:e8:02:7d:4b:
de:e7:b9:9a:b3:55:93:17:4c:94:d9:40:22:46:4c:
90:0e:93:cf:a0:8f:02:95:47:28:60:ff:01:82:0f:
7d:dc:2d:60:51:8d:3e:bd:9c:79:8e:14:15:00:51:
46:74:78:43:7c:04:b5:fa:e5:66:a3:ba:ce:ad:21:
77:3c:fc:9b:91:80:1f:63:b1:9f:9c:41:9e:7e:38:
ef:03:45:b1:64:63:4e:47:cf:0f:58:8f:3f:c3:cc:
89:1d:85:c4:34:12:0a:1a:4a:d6:26:d4:f6:46:f9:
8a:da:ca:0d:34:a8:12:5a:90:a9:da:79:ab:e0:1d:
fd:c7:0c:2b:d7:fe:e6:98:a7:b6:a3:b0:2c:99:9f:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F5:F7:39:8E:11:FA:2B:E4:89:D0:3A:F0:FA:C4:AB:81:9A:A8:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:77:55:66:98:e4:e5:88:73:4c:e3:48:a4:c4:45:87:c3:48:
5f:b4:73:35:cf:97:46:e6:ad:03:0b:8f:59:df:1d:f9:a5:3b:
04:0a:c4:f4:5f:a8:c3:2f:e0:9a:86:53:8d:d2:bd:ae:c4:82:
3d:83:7d:06:97:27:36:5b:d3:a2:bf:92:2f:53:c3:a4:e3:8e:
96:a9:57:7c:02:f3:b2:79:c6:d7:94:aa:b5:15:a0:d2:12:9c:
83:7a:0c:7e:64:34:08:a8:6e:43:86:2e:38:c4:b7:30:0a:74:
cd:39:7c:3c:99:05:32:17:ae:8c:27:c0:ee:b8:91:0a:62:9e:
d9:f5:3a:44:38:ac:1c:77:bb:0b:e2:22:97:19:24:91:d5:ae:
73:e9:05:75:5f:b0:3d:f8:d8:1c:6f:75:53:79:82:2c:af:b7:
5f:8e:c7:44:73:19:5e:45:c1:51:44:1f:c8:27:6c:fe:77:76:
00:9f:b4:46:a4:a7:42:5d:ba:d8:d8:c8:98:bd:fb:c3:f3:ea:
a3:6e:53:78:7f:f6:a6:3f:f7:f1:e6:a3:cd:7e:25:f0:f9:3b:
04:92:69:f8:b7:44:5e:e3:45:b2:bc:07:42:a1:08:78:ce:bc:
10:79:2e:de:10:e3:7f:3e:0f:c3:bd:3f:3a:f8:06:6e:59:22:
01:22:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 12:28:18 2025 by rpki-client