This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/16c03017-bbc8-3176-81e9-84ec549cc974.roa File: 16c03017-bbc8-3176-81e9-84ec549cc974.roa (raw, json) Hash identifier: fcxIx2SSq3hGi+BCkVz8Hhl3aHBC1R+lKtMV4eFn+RE= Subject key identifier: EA:5B:F1:E5:D8:75:48:24:9C:0B:49:C6:BD:C2:76:3F:E4:30:3A:7F Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C42DBF3F30E8943F1DAAB8A00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/16c03017-bbc8-3176-81e9-84ec549cc974.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 63199 IP address blocks: 148.153.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:f3:f3:0e:89:43:f1:da:ab:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=09745ae3-c5c3-42f2-8a19-e513c8cc8f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:3f:84:bd:37:b3:33:7c:b1:e2:9e:1f:75: 88:68:26:74:5a:e8:cc:10:67:81:5f:6d:e8:41:9d: 3e:ed:6d:5c:d0:5a:b7:ec:75:48:3a:d2:40:d6:49: 80:aa:c2:c8:36:96:28:3a:06:d2:2d:e1:b3:ae:94: 3c:54:46:bf:cd:c9:53:db:25:90:2f:52:86:fb:70: b7:18:f9:84:74:bd:78:4f:15:f7:12:2d:6b:67:d9: 27:83:36:22:0e:b6:ad:fc:53:ed:8d:ff:54:a8:c5: 6b:3a:9a:36:50:b6:63:58:f8:ef:ca:12:51:22:e4: 7f:a0:55:d3:df:c9:01:b8:a5:04:44:9e:3d:a2:6f: 43:c5:4b:6a:06:ff:fb:ee:cc:96:6f:b2:cf:17:67: 04:2b:6c:95:7d:5c:43:7b:db:6b:72:43:05:3c:e3: 2c:17:18:c7:d9:ba:70:4b:d1:5e:95:ea:84:9b:df: f6:d6:4c:fb:d9:d3:05:27:0d:79:e6:f6:69:00:a0: 08:52:80:f5:80:e5:ab:0b:32:7a:e7:bd:92:09:9c: be:54:fc:38:d6:7f:d0:b8:01:43:16:9d:e8:7a:c5: 33:3e:f5:d8:e0:21:c0:3a:03:d2:7b:16:cb:ce:dd: 30:b8:ff:51:49:c2:85:3b:5e:d6:47:c3:87:9f:01: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5B:F1:E5:D8:75:48:24:9C:0B:49:C6:BD:C2:76:3F:E4:30:3A:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/16c03017-bbc8-3176-81e9-84ec549cc974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3e:3e:86:23:4f:b3:b7:83:b0:d7:16:cf:27:00:87:d7:8b: f9:6b:19:ba:1b:74:90:98:5a:c1:dc:04:83:25:07:d5:60:b9: 3e:88:9a:49:e6:7c:51:b7:17:25:4a:43:6f:c9:d8:ad:be:b4: 39:45:b4:4f:78:64:c4:90:63:f0:7b:c7:c4:67:39:f3:df:80: 4d:b3:e1:40:05:2d:64:71:b2:1d:11:d9:9c:42:bc:b3:75:d0: 7a:d9:96:7e:2f:c4:26:ff:1f:63:66:81:54:b0:f5:74:b3:5c: da:28:82:09:9f:fd:88:fb:77:93:a6:6b:27:c7:c9:a2:73:09: 53:ce:0a:9d:1c:5b:37:1a:4c:af:83:9c:18:04:cc:30:59:d9: 1e:f2:44:28:ea:fd:90:d2:a0:73:9c:2f:b0:18:91:26:c2:34: 31:0d:f1:b3:95:78:26:c5:fb:17:f8:79:c1:40:b8:cb:09:21: 5f:33:65:51:ac:6f:64:92:e5:76:51:48:91:a6:ba:e1:38:f5: dd:8c:b2:34:b5:13:64:61:33:a9:fd:bf:a3:e9:fe:f8:2c:2e: d4:f6:36:53:3c:b9:cd:5b:05:80:98:70:23:41:ee:b8:12:af: 8c:56:96:24:f2:0f:d6:ce:23:09:7e:bb:9b:19:64:ff:3b:a2: c3:d6:45:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/PzDolD8dqrigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MDk3NDVhZTMtYzVjMy00MmYyLThhMTktZTUxM2M4Y2M4ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0o/hL03szN8seKeH3WIaCZ0WujMEGeBX23o QZ0+7W1c0Fq37HVIOtJA1kmAqsLINpYoOgbSLeGzrpQ8VEa/zclT2yWQL1KG+3C3 GPmEdL14TxX3Ei1rZ9kngzYiDrat/FPtjf9UqMVrOpo2ULZjWPjvyhJRIuR/oFXT 38kBuKUERJ49om9DxUtqBv/77syWb7LPF2cEK2yVfVxDe9trckMFPOMsFxjH2bpw S9FeleqEm9/21kz72dMFJw155vZpAKAIUoD1gOWrCzJ6572SCZy+VPw41n/QuAFD Fp3oesUzPvXY4CHAOgPSexbLzt0wuP9RScKFO17WR8OHnwGmSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpb8eXYdUgknAtJxr3Cdj/kMDp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMTZjMDMwMTctYmJjOC0z MTc2LTgxZTktODRlYzU0OWNjOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI+PoYjT7O3g7DXFs8nAIfXi/lrGbobdJCYWsHcBIMlB9VguT6Imknm fFG3FyVKQ2/J2K2+tDlFtE94ZMSQY/B7x8RnOfPfgE2z4UAFLWRxsh0R2ZxCvLN1 0HrZln4vxCb/H2NmgVSw9XSzXNooggmf/Yj7d5OmayfHyaJzCVPOCp0cWzcaTK+D nBgEzDBZ2R7yRCjq/ZDSoHOcL7AYkSbCNDEN8bOVeCbF+xf4ecFAuMsJIV8zZVGs b2SS5XZRSJGmuuE49d2MsjS1E2RhM6n9v6Pp/vgsLtT2NlM8uc1bBYCYcCNB7rgS r4xWliTyD9bOIwl+u5sZZP87osPWRec= -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:42 2026 by rpki-client