This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ccd234be-baca-34ea-a868-92c216becc6d.roa
File: ccd234be-baca-34ea-a868-92c216becc6d.roa (raw, json)
Hash identifier: JbkzjX+J5QnRpBq8Phw7e8XGWcwvRo1PgkzwxHHGFJ4=
Subject key identifier: AD:1E:85:C7:0A:BF:89:98:68:54:54:D5:8A:8A:A5:14:EC:ED:CA:8F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584C45A6B001B1CAA3D2F9F5AC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ccd234be-baca-34ea-a868-92c216becc6d.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 7155
IP address blocks: 99.198.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:b0:01:b1:ca:a3:d2:f9:f5:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=6d8ec021-d077-48a3-8936-5cab8b3e19a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:65:fd:2a:e3:f9:cf:a4:ce:a7:d5:ea:f8:
7b:d7:d1:46:72:22:11:ba:ef:5c:5b:b7:a8:e5:43:
e0:5f:a0:15:90:36:c5:8a:f2:d2:55:46:e9:4c:1e:
5d:b7:74:8f:7f:10:71:3c:4c:00:df:d2:dc:75:01:
79:a8:02:89:59:ed:19:02:bd:5a:7a:2b:75:aa:07:
ac:46:9e:41:9d:b0:ef:01:d0:9f:99:53:f8:04:5c:
16:89:5b:fd:4d:d6:be:ef:63:f4:14:65:a1:55:95:
ca:f9:9f:b3:a9:a8:dc:46:e7:17:1e:78:28:2d:ae:
54:0d:88:55:0e:6d:74:9c:16:b2:af:b8:f4:fb:9e:
dc:09:fa:5a:f3:c2:04:a9:6e:b5:57:3b:a7:ad:25:
37:04:aa:62:f9:2e:1f:69:b6:eb:0c:f9:69:49:98:
9f:52:44:fc:a8:d0:56:11:a0:c7:16:9b:ec:62:ad:
7a:35:3b:33:8b:bf:a0:de:7b:0d:cf:a4:47:cd:00:
52:c0:fd:d0:b1:7d:ac:ec:a6:37:03:7f:07:f4:0a:
dd:a0:4a:13:7d:33:c1:97:49:02:21:26:32:28:e5:
34:b3:e1:42:d5:c2:b0:b0:1b:2a:9e:7d:6b:e0:36:
52:d7:cc:35:a0:fd:10:4a:f7:62:9f:c5:b4:56:7d:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:85:C7:0A:BF:89:98:68:54:54:D5:8A:8A:A5:14:EC:ED:CA:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ccd234be-baca-34ea-a868-92c216becc6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:91:f8:6b:07:2e:33:3e:b4:3f:52:b8:66:84:68:b0:c2:4d:
27:9f:08:d6:d8:99:e4:1b:64:8c:83:d9:f0:7c:1a:1e:2b:25:
ca:3f:79:ce:23:81:26:0d:bf:eb:fb:86:18:cb:3f:2c:25:6a:
d2:5a:dd:23:fd:e1:62:55:1d:3f:65:3e:a5:ed:4d:75:2a:10:
f1:32:98:4a:13:b4:a2:bd:51:3c:7a:01:74:5f:35:13:eb:09:
88:d7:38:df:6f:55:0b:b9:24:9d:d7:68:ab:4e:17:fd:a4:3c:
29:f7:cc:4c:5e:ff:ab:92:0c:ad:f8:bd:4b:7a:1f:68:42:a9:
3a:99:ab:7f:2d:66:4d:6a:7b:9f:3d:a3:04:98:8b:93:00:8d:
6d:cd:96:e1:9c:de:3a:12:5a:cb:51:13:48:21:b5:2d:7b:77:
fd:ed:99:d2:47:5f:fa:16:8e:25:43:1b:46:47:54:0f:d4:c9:
d8:fa:3b:de:5f:ec:19:7e:8f:fe:11:76:e9:c1:de:07:2e:5c:
02:5e:c4:41:93:a1:96:b2:0c:03:08:d5:d4:93:69:d3:8c:dd:
23:58:26:a4:29:27:c6:0a:12:a8:95:a9:6a:c9:e3:06:df:c2:
26:de:7a:2b:83:97:6b:18:fa:3d:94:96:90:9f:8a:57:3a:8b:
ca:b8:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:26:58 2026 by rpki-client