This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa File: 688b41be-4635-3543-940d-180df78be3b0.roa (raw, json) Hash identifier: zIN9uEp1rnqCNoxxxk0Qrw3GSUnjGajqEBHzZnlAR6c= Subject key identifier: 45:1A:70:0D:F6:8A:31:64:24:78:4A:60:01:17:27:B3:02:6C:11:B1 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584C7AB17EBDFCA064966EAD5340 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa Signing time: Sat 10 Jan 2026 14:00:39 +0000 ROA not before: Sat 10 Jan 2026 14:00:39 +0000 ROA not after: Fri 10 Apr 2026 13:00:39 +0000 asID: 15404 IP address blocks: 148.188.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7a:b1:7e:bd:fc:a0:64:96:6e:ad:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Jan 10 14:00:39 2026 GMT Not After : Apr 10 13:00:39 2026 GMT Subject: CN=b781340d-437f-4ce5-bba9-467ff33b489c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:45:ad:0f:d7:94:73:02:5c:84:5b:2e:8a: cc:b3:29:bb:0d:4e:81:d7:b7:13:aa:ae:0f:63:b7: 3f:71:a3:b5:9f:b5:98:fc:28:34:f3:e2:b5:6b:ff: ea:af:5b:07:b8:fc:22:91:91:fd:44:0d:29:e7:5f: be:8d:81:b8:a4:49:27:80:e3:70:4c:a1:1e:87:39: e7:1f:8f:2d:29:47:d8:df:b3:ed:68:20:1b:5c:7f: 98:56:7d:a8:5d:b2:67:b1:2b:d7:06:57:b2:c7:22: 49:6a:7c:39:cb:a9:4f:be:7c:18:3c:c3:3c:64:e2: 9a:f1:e9:93:73:85:79:2a:e2:6f:d8:04:7f:6f:de: 66:78:9b:1c:43:ca:2a:b1:24:35:f3:8d:ee:a8:d6: 4a:2b:5b:f1:c5:27:76:a6:ce:e5:39:c2:e7:85:98: 76:22:65:17:a3:32:22:3f:16:76:3b:8e:46:b7:93: 8a:d6:18:96:09:20:ed:3c:b5:49:14:19:99:17:1f: 1f:62:79:f0:7b:14:8c:06:5d:9f:03:57:44:90:0e: f4:31:67:59:ba:43:2d:1b:20:2d:d0:5b:74:7a:49: b2:a5:be:7d:34:56:7f:64:d3:3b:7b:0c:5b:b7:2e: 2a:b1:87:d1:24:4a:03:19:ec:07:94:0c:55:78:e0: 5b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1A:70:0D:F6:8A:31:64:24:78:4A:60:01:17:27:B3:02:6C:11:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:19:a2:f6:12:19:d7:94:f3:10:13:4b:93:73:95:97:79:ff: 8c:c7:5a:73:8c:06:46:e7:52:ad:f6:0d:f0:bc:cc:3c:ec:ad: d1:8d:8f:a1:7e:6f:9e:9b:f6:e9:20:fb:22:97:cb:ac:ef:55: 0b:a5:9c:14:04:4f:d1:1f:fc:1b:47:fd:af:4b:d7:1e:6f:57: b0:47:21:1d:8d:5f:93:40:be:26:0c:52:81:82:33:1b:7e:8e: f3:05:09:86:4d:03:40:7a:05:45:dd:91:7e:35:09:35:48:20: 1f:5e:68:5e:1a:2c:18:f6:b5:e4:4e:88:98:0f:85:3a:4d:8b: 64:ee:10:af:4b:5e:b0:ae:90:4a:44:b8:6f:aa:9b:d7:a7:82: 7c:d5:22:a6:aa:88:24:64:74:8b:5e:37:c9:fc:82:62:f3:1d: af:05:c2:40:84:06:32:6d:f6:cd:98:ab:66:3e:96:71:92:63: e7:8f:4c:19:7e:1e:d1:c2:d3:9e:ab:ac:0d:82:44:62:dc:24: 95:58:37:9e:69:24:4c:ce:5e:42:bf:f1:25:00:11:07:52:65: 68:9c:c2:b0:f6:99:1b:fa:51:ef:aa:18:ca:de:2a:51:66:6e: a7:a7:cf:5c:f7:1f:10:9d:ce:c2:80:d2:34:00:78:f5:a9:5f: 7a:00:86:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx6sX69/KBklm6tU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI2MDExMDE0MDAzOVoXDTI2MDQxMDEzMDAzOVowLzEtMCsGA1UEAxMk Yjc4MTM0MGQtNDM3Zi00Y2U1LWJiYTktNDY3ZmYzM2I0ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw35FrQ/XlHMCXIRbLorMsym7DU6B17cTqq4P Y7c/caO1n7WY/Cg08+K1a//qr1sHuPwikZH9RA0p51++jYG4pEkngONwTKEehznn H48tKUfY37PtaCAbXH+YVn2oXbJnsSvXBleyxyJJanw5y6lPvnwYPMM8ZOKa8emT c4V5KuJv2AR/b95meJscQ8oqsSQ1843uqNZKK1vxxSd2ps7lOcLnhZh2ImUXozIi PxZ2O45Gt5OK1hiWCSDtPLVJFBmZFx8fYnnwexSMBl2fA1dEkA70MWdZukMtGyAt 0Ft0ekmypb59NFZ/ZNM7ewxbty4qsYfRJEoDGewHlAxVeOBbzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUacA32ijFkJHhKYAEXJ7MCbBGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNjg4YjQxYmUtNDYzNS0z NTQzLTk0MGQtMTgwZGY3OGJlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEZovYSGdeU8xATS5NzlZd5/4zHWnOMBkbnUq32DfC8zDzsrdGNj6F+ b56b9ukg+yKXy6zvVQulnBQET9Ef/BtH/a9L1x5vV7BHIR2NX5NAviYMUoGCMxt+ jvMFCYZNA0B6BUXdkX41CTVIIB9eaF4aLBj2teROiJgPhTpNi2TuEK9LXrCukEpE uG+qm9engnzVIqaqiCRkdIteN8n8gmLzHa8FwkCEBjJt9s2Yq2Y+lnGSY+ePTBl+ HtHC056rrA2CRGLcJJVYN55pJEzOXkK/8SUAEQdSZWicwrD2mRv6Ue+qGMreKlFm bqenz1z3HxCdzsKA0jQAePWpX3oAhvc= -----END CERTIFICATE-----Generated at Wed Jan 21 10:32:20 2026 by rpki-client