This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa File: dc349e18-8ab9-3cef-be26-6418afc11db3.roa (raw, json) Hash identifier: Uqyk8sgbP0bxBPWkALDPopTbfJpTU0pj/vi4AkjBUh0= Subject key identifier: 23:DB:46:07:04:1C:00:82:06:77:5E:66:D3:52:0D:4A:BB:95:9E:99 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C1630D486182F5BF47B76F180 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 63199 IP address blocks: 148.153.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:d4:86:18:2f:5b:f4:7b:76:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=b0b432fe-c9d9-4ff0-8850-f8d7c52c2305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:4b:c2:75:7c:62:33:75:0b:4f:97:55:c6: 54:75:59:ba:44:42:e6:3e:fd:bf:42:57:a2:84:53: 01:07:41:fd:28:fb:56:31:b4:ea:45:d2:26:a8:cb: bc:f3:9c:80:31:08:5c:c9:b7:00:0e:09:ac:cd:87: 7e:01:a3:2c:f8:a4:9a:ba:38:88:65:c3:48:00:41: db:f7:eb:e4:b8:28:3a:ff:55:37:65:c9:f5:4e:71: a2:ed:b7:c8:31:53:b3:d2:34:be:5d:ac:0a:0b:32: 69:1f:e0:fa:19:5f:40:76:2d:b0:40:6c:51:fc:63: d1:1f:e6:15:a5:cb:f7:79:11:f2:2f:04:4a:1c:39: 49:ff:bc:f0:cd:d1:b5:34:6f:70:f7:7e:c1:70:e6: eb:91:36:f1:f4:cd:45:e5:7d:62:bb:b8:b7:4a:1e: 48:93:a3:22:bf:d8:ad:89:2d:d7:59:55:23:a5:22: 8e:08:68:25:de:37:14:6d:d2:95:e6:bd:ac:b3:a3: dd:c0:44:18:d2:30:d3:62:62:1b:c1:f2:f9:97:bc: c0:e1:f8:fb:5e:17:55:a3:99:50:83:18:85:21:48: a3:cc:b4:00:a2:53:d8:6a:7e:f3:89:1b:9b:e6:03: 58:7b:41:21:23:81:9f:40:37:f6:e4:27:b7:95:5e: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:46:07:04:1C:00:82:06:77:5E:66:D3:52:0D:4A:BB:95:9E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e3:c3:f1:0d:1b:17:d3:42:d8:89:f0:6e:58:c6:44:e2:5f: d8:64:93:b5:a4:63:e0:8d:ea:3a:25:d1:75:5a:fb:f0:15:0b: 98:62:3f:6b:db:b0:cc:8d:a4:11:26:91:5a:6b:a9:29:06:1d: bc:bb:d1:f2:21:c6:31:dc:1e:7d:7d:5b:92:c8:67:84:f9:10: 45:d1:a2:a8:a5:7c:8a:51:a5:a6:ba:f5:09:27:d6:e4:87:dc: 16:7d:93:c8:1b:7e:66:b1:4a:ce:c4:41:5b:b4:c4:aa:ae:b9: 3c:bc:7c:46:92:74:6e:2b:44:13:d5:e6:b5:2c:d8:4e:86:d6: af:a3:79:2d:9b:b1:b7:04:65:cf:2e:f5:f2:b8:b9:89:0c:a2: 90:58:d9:f1:02:c2:5f:0f:2a:3a:ff:6e:76:2d:fb:72:88:0e: 74:d5:66:57:5f:30:b0:66:bf:2a:a7:28:c1:f6:ce:10:5c:45: 83:a7:25:46:db:6f:2b:9c:65:d1:5d:f2:ea:4d:52:02:f4:66: 0d:af:a3:fb:a4:23:75:97:aa:12:94:78:5b:6b:e3:0d:e9:9d: 83:0b:57:e7:63:61:13:74:37:68:4f:36:e3:e7:de:2c:69:bc: b1:e4:7c:b7:40:cc:fc:3a:b6:49:e4:a1:86:21:e7:c3:4d:b0: 41:f8:aa:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMNSGGC9b9Ht28YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk YjBiNDMyZmUtYzlkOS00ZmYwLTg4NTAtZjhkN2M1MmMyMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtElLwnV8YjN1C0+XVcZUdVm6RELmPv2/Qlei hFMBB0H9KPtWMbTqRdImqMu885yAMQhcybcADgmszYd+AaMs+KSaujiIZcNIAEHb 9+vkuCg6/1U3Zcn1TnGi7bfIMVOz0jS+XawKCzJpH+D6GV9Adi2wQGxR/GPRH+YV pcv3eRHyLwRKHDlJ/7zwzdG1NG9w937BcObrkTbx9M1F5X1iu7i3Sh5Ik6Miv9it iS3XWVUjpSKOCGgl3jcUbdKV5r2ss6PdwEQY0jDTYmIbwfL5l7zA4fj7XhdVo5lQ gxiFIUijzLQAolPYan7ziRub5gNYe0EhI4GfQDf25Ce3lV5oKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPbRgcEHACCBndeZtNSDUq7lZ6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZGMzNDllMTgtOGFiOS0z Y2VmLWJlMjYtNjQxOGFmYzExZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPjw/ENGxfTQtiJ8G5YxkTiX9hkk7WkY+CN6jol0XVa+/AVC5hiP2vb sMyNpBEmkVprqSkGHby70fIhxjHcHn19W5LIZ4T5EEXRoqilfIpRpaa69Qkn1uSH 3BZ9k8gbfmaxSs7EQVu0xKquuTy8fEaSdG4rRBPV5rUs2E6G1q+jeS2bsbcEZc8u 9fK4uYkMopBY2fECwl8PKjr/bnYt+3KIDnTVZldfMLBmvyqnKMH2zhBcRYOnJUbb byucZdFd8upNUgL0Zg2vo/ukI3WXqhKUeFtr4w3pnYMLV+djYRN0N2hPNuPn3ixp vLHkfLdAzPw6tknkoYYh58NNsEH4quY= -----END CERTIFICATE-----Generated at Sat Dec 6 13:19:23 2025 by rpki-client