This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba677fbe-e7a3-3dcb-b7f0-454096ab9152.roa
File: ba677fbe-e7a3-3dcb-b7f0-454096ab9152.roa (raw, json)
Hash identifier: BjmJ6eVJYvPWsmGqcLcZZ8By8hBa0xp8XIH6xVNw9q0=
Subject key identifier: 5A:52:6A:2C:89:A2:BF:69:A3:4A:0F:98:91:E7:72:50:71:AB:80:80
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584C4F6BE30A119263433DCD8580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba677fbe-e7a3-3dcb-b7f0-454096ab9152.roa
Signing time: Fri 26 Dec 2025 02:00:32 +0000
ROA not before: Fri 26 Dec 2025 02:00:32 +0000
ROA not after: Thu 26 Mar 2026 01:00:32 +0000
asID: 396567
IP address blocks: 192.68.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4f:6b:e3:0a:11:92:63:43:3d:cd:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 26 02:00:32 2025 GMT
Not After : Mar 26 01:00:32 2026 GMT
Subject: CN=7e39f68d-ce5d-4e75-bb0c-686bea162e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:6f:8a:ac:94:1a:ae:c6:6d:02:4b:af:a0:
a9:eb:92:94:cc:39:bc:1c:6a:12:d1:b5:3a:54:c3:
02:fc:a6:e7:1f:40:e5:a1:9d:79:71:f9:c2:38:5a:
1f:59:7d:d3:bd:d1:b0:48:c8:b7:be:37:60:fe:35:
21:75:b1:e2:f0:57:a5:33:5d:52:8b:ad:b3:06:1f:
f5:fb:7c:cf:c2:85:ca:e7:b0:92:59:33:97:62:d9:
81:3e:74:20:0e:e4:ab:92:df:c1:a8:6a:35:19:32:
78:e5:46:86:99:b9:e4:48:63:46:9f:5c:f3:b8:f0:
62:84:50:82:e3:a2:60:d9:e7:a9:2c:82:93:4c:95:
1a:e4:32:16:2c:70:63:75:af:45:07:57:e5:c5:9c:
8c:37:d1:7c:88:9e:2d:37:5c:4b:2d:bf:39:fe:14:
1e:95:58:73:fa:a4:0e:0b:60:f7:48:e2:cc:5f:3a:
3d:2a:04:69:c4:30:79:7a:5a:ea:e3:6a:32:5b:be:
0d:e9:b0:b0:b4:f0:2a:07:0f:37:4a:bd:71:4a:df:
cf:cc:71:5e:df:f7:3c:99:6f:7c:51:22:6a:90:4d:
81:65:f6:71:5f:2d:df:4e:83:30:47:9c:1b:ab:8a:
26:e2:e0:cd:19:b8:a5:b8:b5:20:eb:e1:e8:07:fc:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:52:6A:2C:89:A2:BF:69:A3:4A:0F:98:91:E7:72:50:71:AB:80:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba677fbe-e7a3-3dcb-b7f0-454096ab9152.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:da:99:ff:4b:dd:99:bd:54:90:cd:32:9d:9b:f5:10:0f:25:
c4:b9:a2:68:0d:62:8b:3f:12:bf:f0:c1:c4:ac:1c:5e:66:0b:
78:7c:22:22:73:4c:b5:27:46:51:37:c4:3a:c2:f5:6d:35:ea:
66:81:bf:2e:6e:ae:66:15:e9:0e:69:5c:b2:ad:1e:e4:70:2c:
52:f3:be:ab:4b:2f:92:95:65:de:ef:07:e6:07:a0:ac:7e:7f:
91:26:a9:41:40:5b:a8:fb:dc:32:05:42:92:5b:6d:9a:4f:6e:
fb:dc:91:dd:c1:c4:1c:29:9d:bd:f4:6c:8b:bd:42:fc:ce:c7:
45:d7:27:00:59:33:72:ea:1a:f3:20:b6:19:0f:b3:36:da:ca:
0c:33:0f:d1:1c:e6:78:75:8e:44:96:9c:f2:ad:44:59:bd:93:
1d:61:68:05:e1:06:08:15:e1:59:dc:ac:6d:1c:c3:5e:5d:1e:
3d:7f:ae:1f:8d:24:a3:5c:d2:6d:4c:16:94:ed:3f:f5:15:32:
79:9a:44:6b:0a:c3:a7:2d:7a:27:d6:75:de:63:cb:75:ab:1b:
2a:59:69:ba:67:7a:45:d5:23:e2:6d:48:1b:0e:8e:57:1b:d6:
40:e1:ea:8d:42:c9:a1:39:35:91:1e:dc:5c:a2:bd:6c:24:a6:
57:14:db:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa+MKEZJjQz3NhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk
N2UzOWY2OGQtY2U1ZC00ZTc1LWJiMGMtNjg2YmVhMTYyZTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MhviqyUGq7GbQJLr6Cp65KUzDm8HGoS0bU6
VMMC/KbnH0DloZ15cfnCOFofWX3TvdGwSMi3vjdg/jUhdbHi8FelM11Si62zBh/1
+3zPwoXK57CSWTOXYtmBPnQgDuSrkt/BqGo1GTJ45UaGmbnkSGNGn1zzuPBihFCC
46Jg2eepLIKTTJUa5DIWLHBjda9FB1flxZyMN9F8iJ4tN1xLLb85/hQelVhz+qQO
C2D3SOLMXzo9KgRpxDB5elrq42oyW74N6bCwtPAqBw83Sr1xSt/PzHFe3/c8mW98
USJqkE2BZfZxXy3fToMwR5wbq4om4uDNGbiluLUg6+HoB/yRpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpSaiyJor9po0oPmJHnclBxq4CAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE2NzdmYmUtZTdhMy0z
ZGNiLWI3ZjAtNDU0MDk2YWI5MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL/amf9L3Zm9VJDNMp2b9RAPJcS5omgNYos/Er/wwcSsHF5mC3h8IiJz
TLUnRlE3xDrC9W016maBvy5urmYV6Q5pXLKtHuRwLFLzvqtLL5KVZd7vB+YHoKx+
f5EmqUFAW6j73DIFQpJbbZpPbvvckd3BxBwpnb30bIu9QvzOx0XXJwBZM3LqGvMg
thkPszbaygwzD9Ec5nh1jkSWnPKtRFm9kx1haAXhBggV4VncrG0cw15dHj1/rh+N
JKNc0m1MFpTtP/UVMnmaRGsKw6cteifWdd5jy3WrGypZabpnekXVI+JtSBsOjlcb
1kDh6o1CyaE5NZEe3FyivWwkplcU29Y=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:17:12 2026 by rpki-client