This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa File: d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa (raw, json) Hash identifier: O4emCZ8bl7wB8qizrkDkrV9iq2nmU3nl0uPUgmTh1Rc= Subject key identifier: 7B:D8:FC:54:B2:DE:A6:83:9E:CF:9B:88:C7:35:1D:42:05:66:0D:C2 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584C5666C7C5F6CFCB7B23CA8680 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 398156 IP address blocks: 158.120.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Jan 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:c7:c5:f6:cf:cb:7b:23:ca:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=8ba35615-b90e-4ca2-b5b5-7d003a4167b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:93:c2:71:06:33:3b:6d:98:27:54:90:34: 7a:8b:9e:64:ca:94:cb:0c:d0:9b:68:93:15:9b:49: 9c:cf:fb:8d:67:4b:61:a9:25:a6:ab:c0:44:4c:99: 70:2f:e2:b5:99:3f:4e:86:00:c7:25:ba:c5:e8:77: 50:89:8c:04:81:62:0d:85:58:89:79:69:74:9c:d4: ed:d3:48:4f:36:c7:cc:fb:b4:64:6a:0a:5d:60:a5: 59:c7:87:ca:4c:58:7e:83:c8:0e:b2:c3:d3:08:0a: 9c:08:79:32:87:7f:12:eb:e4:76:e0:46:55:ca:ef: 68:eb:56:00:2b:4a:89:50:29:e1:0a:7d:24:a0:a3: 5c:8b:dc:7b:28:ea:64:dd:77:7a:74:a6:91:06:f8: 60:45:e0:15:98:7a:12:17:b8:db:25:65:6f:5f:97: e9:b9:a4:e3:76:38:98:61:67:37:eb:f7:e5:fc:5b: e0:e4:f0:76:ba:c8:1a:6f:19:9e:6b:1b:67:c4:57: 63:49:75:96:dd:7a:aa:a6:98:64:18:55:69:a4:56: e5:e2:24:a2:67:60:a4:57:34:e3:c1:54:84:12:89: 46:81:31:66:81:d6:73:44:a4:fc:9d:45:1a:4e:c3: 41:3e:9c:fb:4d:69:9f:ff:ba:86:c6:58:6e:6b:b3: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D8:FC:54:B2:DE:A6:83:9E:CF:9B:88:C7:35:1D:42:05:66:0D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b3:59:fb:37:57:52:00:94:b5:77:6b:eb:19:a0:00:b8:8b: 71:fb:c0:4d:a7:62:45:a7:26:f8:b2:31:d0:8d:50:69:e5:2e: 74:41:d3:80:60:44:85:7f:e9:f0:d4:94:29:d4:3f:a7:de:74: d8:1f:14:25:1c:cf:4d:f6:70:39:98:91:1f:3e:88:8c:44:38: 79:a4:29:1d:a3:95:93:8c:28:ba:62:9c:dd:5d:5d:00:18:72: 9a:b8:01:42:d9:9c:29:3a:e4:50:c4:2d:da:5f:ea:03:f6:2f: 21:94:61:70:05:51:49:35:5e:62:ac:62:5f:00:36:52:4b:33: 27:da:8b:b1:7e:cb:9b:3c:c3:bd:d4:62:59:42:64:ad:e4:b3: 30:e1:6b:99:27:4c:bf:fc:88:1f:6c:08:fd:c2:b8:6f:b6:f2: 31:d3:cb:c1:89:65:5a:15:4a:17:81:3e:e6:d6:d3:dc:74:37: 8c:a1:1b:d8:a5:c6:47:61:74:93:4b:4c:5d:04:19:14:76:39: 2c:a8:81:76:7c:18:bc:cc:4b:38:59:28:fb:35:0e:c6:6a:cd: db:37:56:4b:6a:e5:5e:86:54:e0:c0:ed:17:f0:60:4f:f9:39: b6:0b:0a:f7:41:ca:c7:66:cf:64:3f:17:78:8e:7a:35:83:08: 81:36:46:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZsfF9s/LeyPKhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk OGJhMzU2MTUtYjkwZS00Y2EyLWI1YjUtN2QwMDNhNDE2N2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL2TwnEGMzttmCdUkDR6i55kypTLDNCbaJMV m0mcz/uNZ0thqSWmq8BETJlwL+K1mT9OhgDHJbrF6HdQiYwEgWINhViJeWl0nNTt 00hPNsfM+7RkagpdYKVZx4fKTFh+g8gOssPTCAqcCHkyh38S6+R24EZVyu9o61YA K0qJUCnhCn0koKNci9x7KOpk3Xd6dKaRBvhgReAVmHoSF7jbJWVvX5fpuaTjdjiY YWc36/fl/Fvg5PB2usgabxmeaxtnxFdjSXWW3XqqpphkGFVppFbl4iSiZ2CkVzTj wVSEEolGgTFmgdZzRKT8nUUaTsNBPpz7TWmf/7qGxlhua7OkzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvY/FSy3qaDns+biMc1HUIFZg3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZDIzZjliMmYtODJiNC0z OWU4LWFiNzEtMWRhNjdhZTFjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHizWfs3V1IAlLV3a+sZoAC4i3H7wE2nYkWnJviyMdCNUGnlLnRB04Bg RIV/6fDUlCnUP6fedNgfFCUcz032cDmYkR8+iIxEOHmkKR2jlZOMKLpinN1dXQAY cpq4AULZnCk65FDELdpf6gP2LyGUYXAFUUk1XmKsYl8ANlJLMyfai7F+y5s8w73U YllCZK3kszDha5knTL/8iB9sCP3CuG+28jHTy8GJZVoVSheBPubW09x0N4yhG9il xkdhdJNLTF0EGRR2OSyogXZ8GLzMSzhZKPs1DsZqzds3Vktq5V6GVODA7RfwYE/5 ObYLCvdBysdmz2Q/F3iOejWDCIE2Ri0= -----END CERTIFICATE-----Generated at Wed Jan 28 16:25:53 2026 by rpki-client