This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc894a1e-b3a1-3f9b-aaec-f680da16077b.roa
File: bc894a1e-b3a1-3f9b-aaec-f680da16077b.roa (raw, json)
Hash identifier: u3ppNygwcBSUt3fXoCF0XTPkPUmuO2NG5lGvttJ6S1I=
Subject key identifier: A0:CA:A0:5F:5C:C6:59:B6:0F:4D:8C:2E:81:74:77:EE:C5:02:3D:60
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584CA75C684FA0F3390FB6D5C680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc894a1e-b3a1-3f9b-aaec-f680da16077b.roa
Signing time: Mon 26 Jan 2026 14:00:41 +0000
ROA not before: Mon 26 Jan 2026 14:00:41 +0000
ROA not after: Sun 26 Apr 2026 13:00:41 +0000
asID: 36619
IP address blocks: 2001:502:8cc::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a7:5c:68:4f:a0:f3:39:0f:b6:d5:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 26 14:00:41 2026 GMT
Not After : Apr 26 13:00:41 2026 GMT
Subject: CN=9af8226b-cc63-4304-8f49-d40ccba34611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:f6:7e:a5:87:4b:27:89:66:e7:17:b7:70:
16:2c:dd:8a:31:12:19:34:2d:68:1b:fa:99:7e:6b:
96:24:3f:8e:b7:52:9d:f6:e4:10:41:ef:a5:f0:68:
5a:31:62:2b:55:97:15:75:3c:24:4e:d6:eb:19:ba:
b9:46:1c:ea:05:51:cb:d4:86:d9:08:8a:86:b8:c6:
0f:ab:66:dd:97:7a:20:db:8f:51:da:55:c7:83:82:
52:95:dc:14:3a:d1:0b:ed:be:fa:1d:61:01:d6:7c:
1b:4b:d2:2b:24:58:67:16:16:01:3a:6e:70:9c:c3:
92:05:f7:ea:f4:ea:af:70:1b:22:23:19:7e:57:d8:
44:35:71:70:a5:71:99:8c:7e:bd:fe:fd:eb:6f:86:
0f:68:72:e8:5d:86:95:19:76:23:97:fd:81:8a:96:
00:7c:29:92:29:0c:2a:a9:22:8d:60:f1:6f:b1:7e:
59:15:b8:2a:72:54:18:90:ac:39:b9:b7:a9:0c:61:
15:2f:93:91:ad:1f:e4:bd:39:2c:d1:36:43:19:a6:
a4:ba:b6:3c:cd:4e:a3:10:d9:51:15:8c:97:4e:44:
2f:dc:97:ef:4f:9e:12:83:0c:5e:1e:a8:f2:15:48:
60:33:b1:f1:ce:e1:63:a2:69:eb:14:1f:72:bc:d4:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CA:A0:5F:5C:C6:59:B6:0F:4D:8C:2E:81:74:77:EE:C5:02:3D:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc894a1e-b3a1-3f9b-aaec-f680da16077b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:502:8cc:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:fa:f9:09:92:37:51:83:b0:bf:ef:f5:7a:93:ef:7d:fa:46:
9a:18:85:3c:77:c8:4a:0f:72:60:81:dc:1c:06:74:13:69:99:
0e:2b:da:8f:27:bb:ba:73:0c:63:f4:44:02:00:5a:d2:a3:48:
6a:8b:60:33:74:a0:82:ff:96:24:5b:52:06:fb:6b:c9:87:f1:
21:42:a4:a7:5e:bd:95:69:82:97:ae:90:cf:46:64:30:2a:07:
9f:e5:80:44:6f:08:8d:29:88:dd:75:f2:08:28:a5:75:aa:15:
2e:a1:e5:58:3e:79:75:a4:b1:91:8a:80:46:de:96:ac:ac:8d:
d1:12:8a:5f:28:69:28:5c:01:6d:3e:20:3f:d1:0c:14:d2:0a:
ed:02:53:43:31:cc:5e:ca:f3:38:05:6e:cc:72:26:b9:07:69:
bd:53:e7:23:2e:e6:0e:68:09:64:32:26:95:1f:42:81:df:98:
44:d9:e3:32:9d:90:65:26:d8:d9:4d:cf:12:a2:80:ef:9a:f2:
35:66:94:74:e1:35:ce:bc:a0:7e:a3:be:56:4b:75:d8:5d:40:
36:1d:a5:0f:55:d5:fe:01:3f:0b:7d:e4:9b:20:39:54:00:ec:
3c:6c:40:22:d8:38:da:af:44:d9:a2:ee:04:a7:cb:64:8f:08:
61:31:84:79
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEynXGhPoPM5D7bVxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk
OWFmODIyNmItY2M2My00MzA0LThmNDktZDQwY2NiYTM0NjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0z2fqWHSyeJZucXt3AWLN2KMRIZNC1oG/qZ
fmuWJD+Ot1Kd9uQQQe+l8GhaMWIrVZcVdTwkTtbrGbq5RhzqBVHL1IbZCIqGuMYP
q2bdl3og249R2lXHg4JSldwUOtEL7b76HWEB1nwbS9IrJFhnFhYBOm5wnMOSBffq
9OqvcBsiIxl+V9hENXFwpXGZjH69/v3rb4YPaHLoXYaVGXYjl/2BipYAfCmSKQwq
qSKNYPFvsX5ZFbgqclQYkKw5ubepDGEVL5ORrR/kvTks0TZDGaakurY8zU6jENlR
FYyXTkQv3JfvT54SgwxeHqjyFUhgM7HxzuFjomnrFB9yvNQLqQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKDKoF9cxlm2D02MLoF0d+7FAj1gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmM4OTRhMWUtYjNhMS0z
ZjliLWFhZWMtZjY4MGRhMTYwNzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBK+vkJkjdRg7C/7/V6k+99+kaaGIU8d8hKD3Jg
gdwcBnQTaZkOK9qPJ7u6cwxj9EQCAFrSo0hqi2AzdKCC/5YkW1IG+2vJh/EhQqSn
Xr2VaYKXrpDPRmQwKgef5YBEbwiNKYjddfIIKKV1qhUuoeVYPnl1pLGRioBG3pas
rI3REopfKGkoXAFtPiA/0QwU0grtAlNDMcxeyvM4BW7Mcia5B2m9U+cjLuYOaAlk
MiaVH0KB35hE2eMynZBlJtjZTc8SooDvmvI1ZpR04TXOvKB+o75WS3XYXUA2HaUP
VdX+AT8LfeSbIDlUAOw8bEAi2Djar0TZou4Ep8tkjwhhMYR5
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:00 2026 by rpki-client