This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa File: cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa (raw, json) Hash identifier: wz/nZIVZFsISjINp0aqZ1FJ0pzk45YybtgdwovI8P1g= Subject key identifier: EB:CC:85:ED:D2:7A:E8:A7:33:85:AA:71:EC:28:E7:4A:0B:2C:3F:39 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C26F0E361CE37EE364195E380 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 63199 IP address blocks: 148.153.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:e3:61:ce:37:ee:36:41:95:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=6c79a7c0-e0ba-4ed4-a85f-6eda519fa4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d6:20:5e:c3:43:f8:0c:30:50:0b:3b:75:a6: 8a:50:9e:bb:3f:56:db:da:15:0e:da:5a:81:9e:e4: 19:b3:b7:b7:4f:25:b9:6c:39:0b:08:15:19:f0:df: ba:07:00:92:10:c0:7e:b3:ef:c8:6d:a2:94:a7:28: dd:f4:8c:46:5f:cd:f8:c9:2d:51:01:02:bb:9c:ab: fb:4d:4e:41:5d:cf:ef:a4:2f:9d:57:a8:d5:cc:42: 39:81:c8:d6:9c:11:0d:2f:da:31:f6:62:a9:11:71: 51:74:e9:93:b7:16:88:59:f9:11:b8:e0:2c:f9:ad: 45:eb:2f:56:20:b2:2d:65:97:55:0d:60:7c:88:9c: a7:fb:df:8f:22:19:41:49:ea:cc:37:d5:93:1d:a1: 47:6b:a6:52:06:91:13:23:d9:22:27:28:3e:75:2c: 2c:df:82:80:a7:2c:71:98:ff:1f:d0:cc:d8:91:e9: 82:a8:ae:e4:f2:ae:ba:0e:fd:50:ee:9c:1c:bd:dc: 57:60:bd:82:b6:27:bb:03:5a:1d:8c:e4:cd:19:9b: 6f:7c:8f:4a:3e:52:3d:13:bf:4f:c0:70:5f:2f:07: fd:bd:44:5c:09:03:8b:5b:2e:da:36:4a:b0:a7:2c: ea:25:6c:76:8d:cd:c0:2f:35:5c:30:6a:cb:32:ba: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CC:85:ED:D2:7A:E8:A7:33:85:AA:71:EC:28:E7:4A:0B:2C:3F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:25:bf:07:f6:19:87:fa:26:33:f8:5a:90:c0:f3:38:60:44: 7a:7f:d5:76:42:79:4f:be:c6:fa:55:bf:95:ab:d3:f6:95:75: 71:d9:65:da:a0:04:ae:b9:ce:4f:68:13:09:0c:1e:56:78:44: bb:40:6f:44:7f:22:1e:75:58:83:51:ee:1f:f6:bf:4f:0f:d2: e0:2a:49:16:37:38:07:32:c7:44:22:f1:26:3d:49:78:64:98: 58:ec:a9:d4:ce:51:69:04:a1:97:fb:72:7a:fc:d2:37:0a:6a: 17:3d:55:77:20:77:ea:94:a7:b6:1b:5b:79:ed:a4:37:a4:40: 6a:94:bb:0f:e0:51:9c:c6:53:9b:fd:bc:fa:4e:5b:08:eb:e7: eb:f0:24:50:5b:4d:03:7e:09:0c:39:e4:0f:3a:1c:14:14:fb: 34:00:ed:f1:6a:35:f4:a6:7d:66:2a:56:3d:67:72:26:d4:ac: fe:b8:ea:a9:4a:5f:da:2d:a1:7d:34:11:f4:3a:94:69:52:43: fc:2a:d5:41:7c:39:34:12:d5:35:91:28:b2:a2:3e:32:c3:23: 3d:d8:af:6a:06:92:95:f0:c6:4a:16:95:e2:eb:1f:3c:8f:db: 79:34:05:8f:f2:0c:6d:9c:e1:65:cf:d7:1a:51:e7:17:4f:8b: f9:a9:eb:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8ONhzjfuNkGV44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk NmM3OWE3YzAtZTBiYS00ZWQ0LWE4NWYtNmVkYTUxOWZhNGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNYgXsND+AwwUAs7daaKUJ67P1bb2hUO2lqB nuQZs7e3TyW5bDkLCBUZ8N+6BwCSEMB+s+/IbaKUpyjd9IxGX834yS1RAQK7nKv7 TU5BXc/vpC+dV6jVzEI5gcjWnBENL9ox9mKpEXFRdOmTtxaIWfkRuOAs+a1F6y9W ILItZZdVDWB8iJyn+9+PIhlBSerMN9WTHaFHa6ZSBpETI9kiJyg+dSws34KApyxx mP8f0MzYkemCqK7k8q66Dv1Q7pwcvdxXYL2Ctie7A1odjOTNGZtvfI9KPlI9E79P wHBfLwf9vURcCQOLWy7aNkqwpyzqJWx2jc3ALzVcMGrLMrp+NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvMhe3SeuinM4Wqcewo50oLLD85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2RmMGRiZTMtYjRkYi0z OTliLWI2ZDItMmEyMjk4OThmMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8lvwf2GYf6JjP4WpDA8zhgRHp/1XZCeU++xvpVv5Wr0/aVdXHZZdqg BK65zk9oEwkMHlZ4RLtAb0R/Ih51WINR7h/2v08P0uAqSRY3OAcyx0Qi8SY9SXhk mFjsqdTOUWkEoZf7cnr80jcKahc9VXcgd+qUp7YbW3ntpDekQGqUuw/gUZzGU5v9 vPpOWwjr5+vwJFBbTQN+CQw55A86HBQU+zQA7fFqNfSmfWYqVj1ncibUrP646qlK X9otoX00EfQ6lGlSQ/wq1UF8OTQS1TWRKLKiPjLDIz3Yr2oGkpXwxkoWleLrHzyP 23k0BY/yDG2c4WXP1xpR5xdPi/mp604= -----END CERTIFICATE-----Generated at Wed Dec 17 22:07:42 2025 by rpki-client