This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa File: c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa (raw, json) Hash identifier: OA4+mBGDPiYV7XF/SUpdRRiYzPksZBjooRl0+xQDMLI= Subject key identifier: E1:3A:3A:23:D3:AB:66:2A:36:1B:B5:56:FC:6F:92:1E:56:32:C8:EE Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C42DBF3E23F4199BFE6507100 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 63199 IP address blocks: 148.153.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:f3:e2:3f:41:99:bf:e6:50:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=4f08b4e0-2e65-4a1a-9c3a-00086e720746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:26:a5:a4:19:6f:91:22:1f:0a:05:db:ab: f6:ae:44:7c:d8:09:1c:fc:50:48:1d:1f:a2:0c:bf: 00:43:0d:d2:2f:63:ee:0f:a5:dd:53:4a:79:8e:7d: 54:ae:78:f9:c0:f0:d7:10:1c:8c:82:7c:41:b8:40: bb:d2:5b:c8:b0:1f:76:f4:47:49:0e:eb:eb:cd:c2: 20:d7:16:f9:ad:b2:c8:3c:c6:0f:35:af:e1:35:7e: 99:38:46:ce:9c:a9:4c:34:25:54:cc:a7:ab:ff:d9: e8:a2:0c:9c:37:de:2e:57:55:b8:92:42:55:37:3e: 1b:15:17:a8:dc:90:0e:d7:5e:55:20:6b:e7:ef:b5: 83:2c:3e:45:7f:84:0d:f6:20:b0:b3:14:07:ab:5d: b3:79:f2:eb:cc:8e:74:56:e3:e8:ff:84:52:56:f7: 17:83:e8:36:bf:a3:74:6d:8f:60:a8:9c:43:98:29: 99:18:6f:68:33:f1:cd:75:23:6e:d1:44:fd:96:65: 15:50:36:c0:fe:1a:09:9d:db:cf:f3:7f:24:e5:51: 75:bc:5d:b3:96:82:62:2e:ae:86:74:c0:17:99:d8: d2:37:36:cc:36:61:02:8d:2a:75:90:f6:b0:f6:79: 5d:c5:5e:03:5a:c0:ed:49:b1:ba:33:f5:e9:32:ab: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3A:3A:23:D3:AB:66:2A:36:1B:B5:56:FC:6F:92:1E:56:32:C8:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0a83b17-4b26-3f9d-b613-8ad0e72c3ab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:59:c2:66:fa:f9:67:73:05:10:a4:c7:56:68:cd:18:21:ff: 11:57:9f:81:99:7c:37:7d:45:84:61:a2:30:84:eb:b4:04:fb: ad:95:09:59:1b:6c:de:f6:c1:46:1d:af:00:12:eb:be:eb:2d: dc:85:99:c6:a7:84:7a:57:59:fd:6f:07:6a:59:c8:36:cb:ca: 8f:1c:8f:37:76:30:a2:34:f2:41:9e:57:55:d3:36:fe:b5:3f: ad:0a:3b:01:55:f8:74:42:ca:3c:6d:a4:7e:fa:81:18:ef:c9: 27:14:68:d8:e4:97:90:6b:89:7b:2a:3c:31:66:2a:72:68:4f: b7:fe:5d:ae:ad:e9:9f:67:e1:d2:d0:aa:24:69:f9:25:4a:ed: 72:4f:a7:0c:c9:ba:85:92:c2:94:82:b4:37:b4:04:0a:21:9c: 44:a9:5e:01:e9:5d:7f:ee:a9:1f:78:03:81:ee:5d:92:10:77: 6a:29:6e:55:8a:0b:62:a1:89:6f:5c:c8:08:1c:86:b7:f1:34: e7:8e:11:2e:64:3b:94:40:5a:c8:58:62:d5:d8:72:6b:0c:43: 54:ac:55:50:21:00:b0:ce:58:76:f9:22:8a:a8:04:41:92:55: 36:c8:1d:41:e2:e2:99:5b:af:6a:4f:da:ae:a7:b8:ca:9c:45: f6:4f:5e:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/PiP0GZv+ZQcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NGYwOGI0ZTAtMmU2NS00YTFhLTljM2EtMDAwODZlNzIwNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+UmpaQZb5EiHwoF26v2rkR82Akc/FBIHR+i DL8AQw3SL2PuD6XdU0p5jn1Urnj5wPDXEByMgnxBuEC70lvIsB929EdJDuvrzcIg 1xb5rbLIPMYPNa/hNX6ZOEbOnKlMNCVUzKer/9noogycN94uV1W4kkJVNz4bFReo 3JAO115VIGvn77WDLD5Ff4QN9iCwsxQHq12zefLrzI50VuPo/4RSVvcXg+g2v6N0 bY9gqJxDmCmZGG9oM/HNdSNu0UT9lmUVUDbA/hoJndvP838k5VF1vF2zloJiLq6G dMAXmdjSNzbMNmECjSp1kPaw9nldxV4DWsDtSbG6M/XpMqtwnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE6OiPTq2YqNhu1Vvxvkh5WMsjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzBhODNiMTctNGIyNi0z ZjlkLWI2MTMtOGFkMGU3MmMzYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNZwmb6+WdzBRCkx1ZozRgh/xFXn4GZfDd9RYRhojCE67QE+62VCVkb bN72wUYdrwAS677rLdyFmcanhHpXWf1vB2pZyDbLyo8cjzd2MKI08kGeV1XTNv61 P60KOwFV+HRCyjxtpH76gRjvyScUaNjkl5BriXsqPDFmKnJoT7f+Xa6t6Z9n4dLQ qiRp+SVK7XJPpwzJuoWSwpSCtDe0BAohnESpXgHpXX/uqR94A4HuXZIQd2opblWK C2KhiW9cyAgchrfxNOeOES5kO5RAWshYYtXYcmsMQ1SsVVAhALDOWHb5IoqoBEGS VTbIHUHi4plbr2pP2q6nuMqcRfZPXho= -----END CERTIFICATE-----Generated at Mon Jan 19 17:13:24 2026 by rpki-client