This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa File: d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa (raw, json) Hash identifier: VN4ZFpdkB4Ffsy48/oowhBjpLxD5RaJyuo40fTOxSwg= Subject key identifier: 41:45:03:B1:4E:BE:BE:4D:7E:84:7B:F8:1F:0A:38:9D:30:83:BD:96 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584C602BD2FD324E0C9845003840 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa Signing time: Thu 01 Jan 2026 02:00:31 +0000 ROA not before: Thu 01 Jan 2026 02:00:31 +0000 ROA not after: Wed 01 Apr 2026 01:00:31 +0000 asID: 20115 IP address blocks: 149.143.148.0/23 maxlen: 23 149.143.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:60:2b:d2:fd:32:4e:0c:98:45:00:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 1 02:00:31 2026 GMT Not After : Apr 1 01:00:31 2026 GMT Subject: CN=167bd0da-2454-467c-982c-d839ec28d4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:d0:64:60:e1:89:51:3e:68:f5:1f:55:14: 3a:4b:2b:e3:42:62:66:8e:9a:80:9d:97:42:85:9e: af:f6:62:00:05:57:6f:e6:c9:e7:b0:6e:73:35:1e: 76:ea:07:38:b5:91:16:96:06:ae:93:d0:7b:aa:bc: 88:ca:59:44:b6:14:bb:90:b5:fd:26:4e:1b:cc:ca: df:f5:f0:a6:e8:5d:18:d4:32:65:ef:02:4c:57:f8: df:c3:7c:8d:12:d0:3d:fa:92:2f:89:a7:d7:a7:32: 45:de:12:42:ee:88:a8:e5:4d:99:d2:a9:5c:3c:00: 95:5a:cd:c6:c3:de:cc:26:91:4a:53:85:f9:39:c6: ee:15:54:24:be:5a:6a:68:1a:ec:ec:a6:81:13:68: 97:3d:6e:96:00:84:84:d1:f5:dc:97:48:46:e3:59: a3:8b:8e:f7:69:d7:22:3f:9d:36:80:a1:33:6e:b7: 6d:96:68:43:c0:83:50:3d:b7:5d:d7:7a:c0:17:a3: 15:09:86:2c:2d:16:d0:a6:7c:f2:cf:9b:e5:86:28: cb:7e:f3:da:36:a5:8f:82:38:7d:14:6b:6a:9d:78: 9a:c4:12:f4:b6:55:ed:27:ad:56:ae:23:7b:64:d8: de:2c:a6:6a:bc:49:31:f4:c1:f4:4f:8b:a3:0f:13: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:03:B1:4E:BE:BE:4D:7E:84:7B:F8:1F:0A:38:9D:30:83:BD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d9a02dd2-ffe8-37b9-9b38-fe9fd1fefd2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.148.0/23 149.143.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7a:40:84:f0:56:5c:05:e0:e4:bd:26:bd:a5:9f:58:6c:a1: 51:4f:fc:ca:af:1c:33:66:5f:bc:d7:10:74:b2:69:4e:10:1e: 47:d7:2a:00:2d:02:4d:d7:84:f0:1f:d4:d7:50:d1:ee:8c:a4: 11:0d:d4:c7:f5:e2:5e:06:ca:87:56:9d:3c:3d:08:b1:24:ea: 80:46:bb:31:3f:12:98:c9:24:ce:c8:63:de:eb:d1:60:7b:b3: bc:73:3d:67:d9:1b:ba:6c:6c:0f:fa:e7:2c:20:0e:64:3e:a1: c5:2a:9d:05:64:f0:14:4d:53:89:2a:72:2a:7c:4e:4e:af:dc: 62:4a:47:dd:1a:8a:05:2b:b3:49:e6:dc:74:27:e1:c3:cf:30: 5f:47:a5:ec:76:36:88:3c:8e:b5:64:56:e9:7f:ab:3b:01:b6: 52:ca:0a:84:46:d9:fd:16:da:1b:f3:e3:61:7c:d3:20:66:d5: b7:aa:fa:cd:a1:15:3d:0f:74:5a:c1:d9:cb:8d:31:15:2c:1a: 62:75:08:9a:70:5d:75:25:c4:ab:b4:8f:40:db:80:57:f6:82: a2:79:bb:50:ac:05:30:21:9e:6f:31:c5:d5:3f:0c:d3:32:37: 65:5a:39:b0:ed:57:f1:e2:93:28:7b:53:89:34:25:c2:96:c6: a2:14:f7:6f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWExgK9L9Mk4MmEUAOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDEwMTAyMDAzMVoXDTI2MDQwMTAxMDAzMVowLzEtMCsGA1UEAxMk MTY3YmQwZGEtMjQ1NC00NjdjLTk4MmMtZDgzOWVjMjhkNGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM/QZGDhiVE+aPUfVRQ6SyvjQmJmjpqAnZdC hZ6v9mIABVdv5snnsG5zNR526gc4tZEWlgauk9B7qryIyllEthS7kLX9Jk4bzMrf 9fCm6F0Y1DJl7wJMV/jfw3yNEtA9+pIviafXpzJF3hJC7oio5U2Z0qlcPACVWs3G w97MJpFKU4X5OcbuFVQkvlpqaBrs7KaBE2iXPW6WAISE0fXcl0hG41mji473adci P502gKEzbrdtlmhDwINQPbdd13rAF6MVCYYsLRbQpnzyz5vlhijLfvPaNqWPgjh9 FGtqnXiaxBL0tlXtJ61WriN7ZNjeLKZqvEkx9MH0T4ujDxM6UQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEFFA7FOvr5NfoR7+B8KOJ0wg72WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDlhMDJkZDItZmZlOC0z N2I5LTliMzgtZmU5ZmQxZmVmZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlY+UAwQA lY+XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAJ6QITwVlwF4OS9Jr2ln1hsoVFP/MqvHDNmX7zXEHSyaU4Q HkfXKgAtAk3XhPAf1NdQ0e6MpBEN1Mf14l4GyodWnTw9CLEk6oBGuzE/EpjJJM7I Y97r0WB7s7xzPWfZG7psbA/65ywgDmQ+ocUqnQVk8BRNU4kqcip8Tk6v3GJKR90a igUrs0nm3HQn4cPPMF9Hpex2Nog8jrVkVul/qzsBtlLKCoRG2f0W2hvz42F80yBm 1beq+s2hFT0PdFrB2cuNMRUsGmJ1CJpwXXUlxKu0j0DbgFf2gqJ5u1CsBTAhnm8x xdU/DNMyN2VaObDtV/Hikyh7U4k0JcKWxqIU928= -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:25 2026 by rpki-client