This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/f98fe691-4c80-3d79-bb25-0bda65bc4464.roa File: f98fe691-4c80-3d79-bb25-0bda65bc4464.roa (raw, json) Hash identifier: 7N1cBB2lQENAiRgO3VppYwx3scFCfTq7bCE8kOrfZRc= Subject key identifier: 44:14:A0:CA:C8:DC:51:9A:8F:F3:0B:C8:8B:0E:32:80:E6:4D:91:87 Certificate issuer: /CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a Certificate serial: 010D0C9F4328584C42DBD21054D0699ECAFF6600 Authority key identifier: C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/f98fe691-4c80-3d79-bb25-0bda65bc4464.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 400541 IP address blocks: 147.185.88.0/24 maxlen: 24 147.185.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:d2:10:54:d0:69:9e:ca:ff:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=d18c63eb-3fca-439a-a9cd-b0af53d4a310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:45:1e:05:8e:ec:5c:56:e2:59:62:18:d5:b3: cb:fb:e2:01:61:c5:a7:fe:5b:c2:67:2e:7e:c4:65: 8b:91:81:36:bd:6d:c1:87:cc:09:fd:91:46:76:c4: 8f:b6:a4:99:f0:35:00:77:3d:41:79:cb:ab:7a:eb: 36:df:71:b6:23:1a:82:02:05:c8:3b:1e:bd:32:57: 8a:c6:d4:72:1d:5c:35:74:9d:1c:38:b7:30:21:7d: eb:34:dc:dd:86:34:4e:9c:08:50:be:b5:61:7e:9b: 5f:37:8c:5e:04:53:68:8c:86:6e:30:fd:50:5a:e2: 7e:1b:22:ce:2b:0f:37:4b:05:37:d7:4d:73:69:c4: 32:ff:91:53:dd:72:e4:a4:cf:53:26:79:3c:d2:4f: 36:2c:17:ca:26:94:b4:15:4f:8b:b9:32:0b:67:64: 53:5d:4a:21:9c:9c:bb:c5:75:f6:33:92:1e:2c:d3: a1:ea:12:7a:c9:d4:f4:eb:13:a1:5a:69:e6:16:4b: f9:5e:c8:3f:55:a1:37:f4:39:04:e6:9a:37:45:54: 37:5b:6e:10:29:f3:27:0e:66:16:4e:24:e5:f8:3b: 99:0d:2f:64:6b:fb:a6:bf:ca:2e:92:c5:87:0f:46: ba:93:09:64:66:61:b0:0f:4c:be:94:25:fe:22:59: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:14:A0:CA:C8:DC:51:9A:8F:F3:0B:C8:8B:0E:32:80:E6:4D:91:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/f98fe691-4c80-3d79-bb25-0bda65bc4464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl X509v3 Authority Key Identifier: keyid:C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer sbgp-ipAddrBlock: critical IPv4: 147.185.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:58:94:db:cc:ad:68:a7:9e:b7:e8:23:10:ae:8d:92:5e:b9: b6:6c:46:a7:27:26:df:da:83:75:22:90:0a:f9:47:49:fb:cd: db:f1:fb:f6:be:af:18:74:b6:ef:33:4c:24:6f:55:7a:a7:3d: 50:eb:0e:dd:bf:81:14:da:d3:67:ef:db:76:82:46:31:31:30: 4b:b2:8a:c6:bc:00:0a:80:da:22:25:58:8e:07:d8:1a:f6:a4: d0:ea:5d:76:23:09:45:f2:79:76:dd:cb:c4:e9:64:b5:24:79: 7a:e2:dd:67:9e:b6:f6:df:14:7b:e2:09:d3:0a:7e:8e:4f:7d: c2:28:10:aa:aa:4c:b4:d9:59:ac:ab:16:62:ce:ba:58:27:c6: ed:51:19:20:cd:e2:be:92:42:67:cc:ce:57:69:4a:d2:5a:d2: 34:dc:69:f7:ba:b0:5c:1c:2f:09:bd:bc:2d:42:29:47:ab:1e: 69:e8:dc:1e:5a:89:d4:d5:c8:cb:bb:47:46:14:1c:7e:75:dd: d8:fc:12:9e:d9:90:ba:5a:b7:b0:4d:97:82:63:4d:ea:2f:ad: 04:a0:05:e1:4a:0e:30:78:f0:54:7d:47:78:ff:57:63:ae:d5: a6:8a:c5:4a:81:fe:3b:c6:ed:77:3e:9c:2b:94:d5:54:84:c1: c3:a4:5c:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC29IQVNBpnsr/ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc4OGE5NDEtNDBhNi00OWUzLWFiYzYtMWY1MWYxMWU2 ZjNhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDE4YzYzZWItM2ZjYS00MzlhLWE5Y2QtYjBhZjUzZDRhMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUUeBY7sXFbiWWIY1bPL++IBYcWn/lvCZy5+ xGWLkYE2vW3Bh8wJ/ZFGdsSPtqSZ8DUAdz1Becureus233G2IxqCAgXIOx69MleK xtRyHVw1dJ0cOLcwIX3rNNzdhjROnAhQvrVhfptfN4xeBFNojIZuMP1QWuJ+GyLO Kw83SwU3101zacQy/5FT3XLkpM9TJnk80k82LBfKJpS0FU+LuTILZ2RTXUohnJy7 xXX2M5IeLNOh6hJ6ydT06xOhWmnmFkv5Xsg/VaE39DkE5po3RVQ3W24QKfMnDmYW TiTl+DuZDS9ka/umv8ouksWHD0a6kwlkZmGwD0y+lCX+IlmAgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQUoMrI3FGaj/MLyIsOMoDmTZGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzg4 YTk0MS00MGE2LTQ5ZTMtYWJjNi0xZjUxZjExZTZmM2EvZjk4ZmU2OTEtNGM4MC0z ZDc5LWJiMjUtMGJkYTY1YmM0NDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc4OGE5NDEtNDBhNi00OWUzLWFi YzYtMWY1MWYxMWU2ZjNhLzE3ODhhOTQxLTQwYTYtNDllMy1hYmM2LTFmNTFmMTFl NmYzYS5jcmwwHwYDVR0jBBgwFoAUxOcZn90XJU7Mz/mhIfJhVKKx44kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzg4YTk0MS00MGE2LTQ5ZTMtYWJjNi0xZjUx ZjExZTZmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk7lYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNYlNvMrWinnrfoIxCujZJeubZsRqcnJt/ag3UikAr5R0n7zdvx+/a+ rxh0tu8zTCRvVXqnPVDrDt2/gRTa02fv23aCRjExMEuyisa8AAqA2iIlWI4H2Br2 pNDqXXYjCUXyeXbdy8TpZLUkeXri3WeetvbfFHviCdMKfo5PfcIoEKqqTLTZWayr FmLOulgnxu1RGSDN4r6SQmfMzldpStJa0jTcafe6sFwcLwm9vC1CKUerHmno3B5a idTVyMu7R0YUHH513dj8Ep7ZkLpat7BNl4JjTeovrQSgBeFKDjB48FR9R3j/V2Ou 1aaKxUqB/jvG7Xc+nCuU1VSEwcOkXGw= -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:45 2025 by rpki-client