This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa File: cef491ba-6998-36c3-9897-80eae0b6f79b.roa (raw, json) Hash identifier: QUM/CX3/7z8chVojt1RT1AyNz0Cvb/JZLGOljMEofNM= Subject key identifier: 1A:CD:7D:AA:97:74:A4:F4:77:6B:20:E1:5B:18:25:3F:DA:7B:9C:B3 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584C470BBA84C41757C8341F0280 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 63199 IP address blocks: 148.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:ba:84:c4:17:57:c8:34:1f:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=b7f0c2c3-6e40-4b59-a175-62b27aca3e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:88:85:9a:4e:d7:e1:29:80:21:0f:87:52: 45:4d:a5:fb:1d:18:78:29:3a:a5:aa:73:76:bd:ef: 4d:34:8b:d1:bd:95:1c:56:00:26:fc:09:32:ce:b9: 93:23:2b:1f:31:ca:3d:31:d7:0b:90:fc:94:f2:bd: 74:ba:76:18:04:59:66:00:5f:cf:69:23:1c:40:d1: 1e:8a:e6:8a:0f:51:da:ef:69:0b:e0:10:1a:d5:38: 28:31:9c:8f:f9:37:76:f4:61:76:1a:a8:17:5f:2a: aa:f2:89:6b:f8:fc:b2:1c:c9:ce:d3:28:b3:1f:e7: f4:2a:78:30:18:09:49:69:20:3e:47:c2:e4:8d:8d: 4f:fe:3c:89:fd:a2:4f:c8:7d:99:60:37:b9:76:93: c6:8c:0e:67:7a:d8:72:41:39:f5:a2:d0:44:03:32: 7d:70:cb:9a:a3:79:0b:12:5c:5d:69:fb:a8:ac:6d: e0:3b:cb:c4:b7:9b:39:2a:79:f0:8c:84:33:59:6e: c9:d7:d2:ff:98:d6:93:05:26:49:76:73:5b:dd:d5: d4:15:bf:dc:ea:2a:8d:b3:1b:af:bb:89:19:25:03: 66:39:14:82:dd:09:b1:ed:d4:97:ab:c2:37:e3:b1: 1b:85:e0:ce:a8:e5:e4:a9:c1:eb:59:94:b5:d5:f8: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CD:7D:AA:97:74:A4:F4:77:6B:20:E1:5B:18:25:3F:DA:7B:9C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:65:7c:54:c9:2c:28:05:9d:19:d4:43:0b:bf:bd:06:5c:ef: 2a:bc:a6:76:d6:b2:a6:17:ac:fe:4f:d8:88:f2:63:6b:0a:5b: c9:4d:51:12:fb:56:bd:e1:38:5d:b3:ec:30:e8:68:32:a2:d3: 83:e0:5f:8e:aa:53:5a:24:82:62:27:c0:63:80:e8:33:90:09: 47:ed:1a:9a:f3:62:87:9a:56:cb:dd:f8:3f:e6:eb:59:fd:b2: 23:55:bc:22:83:a7:7e:f1:59:a3:84:58:6e:c3:94:f5:50:8d: 60:06:9e:5d:21:b7:06:5d:fe:8b:f6:1b:d6:de:86:6c:05:c0: 0f:88:2a:fe:a6:af:c2:c0:b8:9d:ff:ba:c0:ef:3d:43:c6:95: a6:7c:52:0b:c2:95:a7:88:e4:f9:a9:21:f9:e6:e0:d8:10:bb: 85:a4:25:52:98:a4:fa:16:ad:8d:69:20:90:4b:9a:68:fa:2a: 46:b4:d5:c6:63:2c:fb:67:78:67:af:67:4a:26:4b:84:50:ab: bf:5e:8e:09:44:2e:8b:74:68:68:8c:16:d8:73:09:eb:f8:3b: 88:97:f9:a1:70:e9:69:be:50:aa:fa:30:b5:ec:22:2e:1c:8d: 55:8c:5f:e8:5b:bc:b6:85:f3:3a:91:fd:ee:2f:de:43:50:e3: 43:a1:55:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC7qExBdXyDQfAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk YjdmMGMyYzMtNmU0MC00YjU5LWExNzUtNjJiMjdhY2EzZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRuIhZpO1+EpgCEPh1JFTaX7HRh4KTqlqnN2 ve9NNIvRvZUcVgAm/AkyzrmTIysfMco9MdcLkPyU8r10unYYBFlmAF/PaSMcQNEe iuaKD1Ha72kL4BAa1TgoMZyP+Td29GF2GqgXXyqq8olr+PyyHMnO0yizH+f0Kngw GAlJaSA+R8LkjY1P/jyJ/aJPyH2ZYDe5dpPGjA5nethyQTn1otBEAzJ9cMuao3kL ElxdafuorG3gO8vEt5s5KnnwjIQzWW7J19L/mNaTBSZJdnNb3dXUFb/c6iqNsxuv u4kZJQNmORSC3Qmx7dSXq8I347EbheDOqOXkqcHrWZS11fh5kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrNfaqXdKT0d2sg4VsYJT/ae5yzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2VmNDkxYmEtNjk5OC0z NmMzLTk4OTctODBlYWUwYjZmNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEllfFTJLCgFnRnUQwu/vQZc7yq8pnbWsqYXrP5P2IjyY2sKW8lNURL7 Vr3hOF2z7DDoaDKi04PgX46qU1okgmInwGOA6DOQCUftGprzYoeaVsvd+D/m61n9 siNVvCKDp37xWaOEWG7DlPVQjWAGnl0htwZd/ov2G9behmwFwA+IKv6mr8LAuJ3/ usDvPUPGlaZ8UgvClaeI5PmpIfnm4NgQu4WkJVKYpPoWrY1pIJBLmmj6Kka01cZj LPtneGevZ0omS4RQq79ejglELot0aGiMFthzCev4O4iX+aFw6Wm+UKr6MLXsIi4c jVWMX+hbvLaF8zqR/e4v3kNQ40OhVXQ= -----END CERTIFICATE-----Generated at Thu Dec 25 07:18:23 2025 by rpki-client