This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa File: 2abfa112-93c3-3da0-856a-28fad7798068.roa (raw, json) Hash identifier: 7qwLxEwSuj4tl74VJR+pa0OV7DnEHeoDERozQZh1a7s= Subject key identifier: AE:22:A3:8C:97:49:50:7B:C3:B6:EE:E6:57:D4:3F:38:0A:5C:87:BD Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C470BB8BE7B7407DDA6C9A62C Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 63199 IP address blocks: 148.153.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:b8:be:7b:74:07:dd:a6:c9:a6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=bc99be00-013c-4209-bd40-da21d462e9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9a:18:93:c6:2e:25:1e:a7:18:b7:b2:a2:44: 1a:65:0c:74:8b:c6:af:1b:b5:89:ff:f4:a7:66:f4: 26:39:cd:8f:eb:43:ae:53:f4:ee:8f:17:6a:59:88: 53:ec:95:ae:fe:24:a6:96:42:8f:55:06:87:9a:0a: 0f:36:15:d8:c6:e0:b6:76:0c:4e:3b:14:bd:c7:6b: d7:4b:84:4b:e7:34:a9:18:16:5f:2e:d2:13:fb:02: 7b:ad:66:8d:44:d2:28:4e:9e:45:73:e7:92:4f:7b: 8f:91:5c:c2:ca:e8:10:7f:84:13:11:95:d7:1f:f8: af:7f:70:4f:65:91:ae:68:05:96:dd:ff:fc:97:08: 09:7e:0c:7a:f7:ab:3c:bf:11:ff:a7:aa:a5:e6:18: f3:1b:64:04:ca:74:d2:0d:2e:68:69:94:20:35:d0: bd:ca:8e:4b:68:9b:e2:8c:68:66:58:5f:de:01:e7: 9f:f0:f5:64:9b:d4:2e:34:ea:a9:19:43:11:a3:2b: 14:f0:f1:77:3b:51:cc:51:e8:b0:73:0c:92:d1:76: 29:ff:cc:15:38:e2:86:64:7e:72:79:ff:4c:57:21: 22:b7:1c:99:4b:f2:28:37:c5:fe:a1:b3:86:e9:3b: 50:ba:5f:f8:a9:85:88:7d:ec:96:90:9d:fd:9d:0d: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:22:A3:8C:97:49:50:7B:C3:B6:EE:E6:57:D4:3F:38:0A:5C:87:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b2:63:ae:38:1b:44:92:8c:da:b9:4a:f3:f9:a7:e3:c1:b2: 19:0d:a1:36:2e:64:98:50:71:de:9a:2e:7a:98:f2:d7:13:12: 31:0c:c8:49:a5:c7:67:be:92:c7:67:36:12:04:a3:45:f7:85: 41:5b:49:c9:86:2d:13:26:b8:26:f5:f7:81:ef:1c:ff:26:82: 6f:0a:01:2f:43:c2:2b:1c:23:35:c2:ac:72:06:b0:f1:02:d8: 76:5a:45:a3:f1:1f:72:01:5c:6d:0f:3b:c1:c3:18:3a:2d:ef: 60:61:37:cd:6e:1e:02:a8:6c:62:60:fe:35:f0:73:e7:19:03: e8:d5:29:13:63:ab:7e:bf:a3:b7:74:66:86:8f:c6:98:ce:77: 0c:a1:b1:f3:73:35:98:44:34:c7:93:f9:71:f9:42:d9:7f:30: 6c:d9:e3:49:45:24:fc:bc:4b:92:12:ad:65:38:38:e7:08:52: dd:c6:a9:b2:31:42:b2:6a:9f:79:ef:7f:d8:5c:df:06:21:89: 03:5d:20:e0:6c:1c:e4:25:5d:3e:a3:8b:42:db:e2:e6:e7:31: 30:1e:a9:e3:ba:28:56:a4:d9:bc:a9:c7:70:11:5f:2e:f3:5e: 86:19:86:32:3d:97:55:dd:2d:82:fa:6b:8f:e8:60:27:50:87: b0:a3:3a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC7i+e3QH3abJpiwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk YmM5OWJlMDAtMDEzYy00MjA5LWJkNDAtZGEyMWQ0NjJlOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpoYk8YuJR6nGLeyokQaZQx0i8avG7WJ//Sn ZvQmOc2P60OuU/TujxdqWYhT7JWu/iSmlkKPVQaHmgoPNhXYxuC2dgxOOxS9x2vX S4RL5zSpGBZfLtIT+wJ7rWaNRNIoTp5Fc+eST3uPkVzCyugQf4QTEZXXH/ivf3BP ZZGuaAWW3f/8lwgJfgx696s8vxH/p6ql5hjzG2QEynTSDS5oaZQgNdC9yo5LaJvi jGhmWF/eAeef8PVkm9QuNOqpGUMRoysU8PF3O1HMUeiwcwyS0XYp/8wVOOKGZH5y ef9MVyEitxyZS/IoN8X+obOG6TtQul/4qYWIfeyWkJ39nQ1T0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4io4yXSVB7w7bu5lfUPzgKXIe9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmFiZmExMTItOTNjMy0z ZGEwLTg1NmEtMjhmYWQ3Nzk4MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCyY644G0SSjNq5SvP5p+PBshkNoTYuZJhQcd6aLnqY8tcTEjEMyEml x2e+ksdnNhIEo0X3hUFbScmGLRMmuCb194HvHP8mgm8KAS9DwiscIzXCrHIGsPEC 2HZaRaPxH3IBXG0PO8HDGDot72BhN81uHgKobGJg/jXwc+cZA+jVKRNjq36/o7d0 ZoaPxpjOdwyhsfNzNZhENMeT+XH5Qtl/MGzZ40lFJPy8S5ISrWU4OOcIUt3GqbIx QrJqn3nvf9hc3wYhiQNdIOBsHOQlXT6ji0Lb4ubnMTAeqeO6KFak2bypx3ARXy7z XoYZhjI9l1XdLYL6a4/oYCdQh7CjOvg= -----END CERTIFICATE-----Generated at Thu Dec 25 02:50:01 2025 by rpki-client