This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa
File: b803a2aa-249f-369e-b316-88947c4204b0.roa (raw, json)
Hash identifier: JaA0LY9T0ay0dfY97o6ELsl99a0E0UM8vqSs07N/N/0=
Subject key identifier: 7D:9C:BD:D1:48:D7:8F:24:58:F6:A6:EE:2F:5E:A2:8E:53:2C:83:C1
Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f
Certificate serial: 010D0C9F4328584C4F6BC6FB2DECCA33B13280B0
Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa
Signing time: Fri 26 Dec 2025 02:00:32 +0000
ROA not before: Fri 26 Dec 2025 02:00:32 +0000
ROA not after: Thu 26 Mar 2026 01:00:32 +0000
asID: 16698
IP address blocks: 199.21.192.0/21 maxlen: 21
199.21.192.0/22 maxlen: 22
199.21.192.0/24 maxlen: 24
199.21.193.0/24 maxlen: 24
199.21.194.0/24 maxlen: 24
199.21.195.0/24 maxlen: 24
199.21.196.0/23 maxlen: 23
199.21.196.0/24 maxlen: 24
199.21.197.0/24 maxlen: 24
199.21.198.0/24 maxlen: 24
199.21.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 31 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4f:6b:c6:fb:2d:ec:ca:33:b1:32:80:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f
Validity
Not Before: Dec 26 02:00:32 2025 GMT
Not After : Mar 26 01:00:32 2026 GMT
Subject: CN=411d4c03-1c0d-49b9-88e7-9e6298324abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fd:d3:46:48:e5:11:66:2d:83:54:52:eb:49:
8f:64:ea:76:45:43:f4:cf:7e:6d:97:d6:d3:83:43:
d9:bb:cd:40:dd:7c:bc:fc:b2:44:3b:92:71:84:91:
db:fa:42:45:0b:36:2c:b8:b3:b7:73:19:3d:e2:fe:
d4:94:cf:c9:5a:9f:20:4d:23:4b:4b:2d:58:d3:69:
c7:0b:af:18:23:6c:91:1c:be:31:c6:94:f8:ab:c0:
c7:c2:bb:03:e9:c9:7e:5e:04:4e:9d:aa:85:95:62:
05:5e:86:df:94:af:99:2d:90:c8:64:15:01:b2:0f:
04:1b:1a:d6:01:02:1c:bf:40:40:f1:f7:f0:2e:68:
10:92:d6:6b:21:1c:e3:3e:57:cd:16:a6:43:38:d1:
28:70:47:de:d0:2b:e7:db:12:d9:a6:02:ed:5f:3f:
5f:bb:72:68:8e:fa:a2:4c:38:fa:05:7a:9f:e8:98:
bb:92:af:e4:af:5e:bd:d3:73:6a:77:43:d2:b5:dd:
10:18:81:a9:a9:90:0e:44:89:dc:24:aa:18:ec:16:
d7:cc:06:e0:ee:b2:35:6a:47:0d:03:ba:b4:ee:55:
3b:7b:96:38:6c:1c:4e:47:76:d7:b2:d2:0c:ef:03:
23:67:62:7f:e0:19:17:85:2a:75:e9:2b:b2:ca:3d:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9C:BD:D1:48:D7:8F:24:58:F6:A6:EE:2F:5E:A2:8E:53:2C:83:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/b803a2aa-249f-369e-b316-88947c4204b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl
X509v3 Authority Key Identifier:
keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.21.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:b7:64:dd:82:e3:68:72:db:81:2f:bb:26:3f:67:2c:f6:fd:
3a:f7:d7:e5:6c:63:84:30:c8:1f:ac:0d:aa:c8:d9:31:ac:ec:
67:af:5d:04:65:55:bc:f1:4e:6d:18:ae:cf:2c:d4:ed:49:0a:
da:58:54:ae:be:64:c5:1e:74:05:3a:93:47:13:86:06:bd:27:
56:1d:1d:34:ae:69:5b:2d:7d:09:53:39:75:83:52:e4:d2:a1:
1e:dc:4b:c8:45:63:5d:45:f0:bb:76:26:98:68:c4:2d:6b:6a:
1a:07:1c:4c:dc:86:59:1b:11:2c:1c:cb:ae:3b:81:bb:eb:98:
1c:03:cb:95:76:e0:a9:f0:93:f5:43:6e:0e:bc:ba:2c:eb:44:
fc:e9:8d:47:3c:4a:28:b0:d8:b6:fc:ba:b1:a5:e6:a3:a1:9c:
15:0a:ae:6c:79:5c:28:f1:3d:32:7a:c3:49:ae:a9:89:81:e8:
ba:ba:21:b6:7f:91:8a:b1:8f:1f:df:37:f2:62:3a:6a:5f:a0:
6c:96:d5:d7:68:1f:cd:43:c2:eb:10:fe:48:5c:25:60:93:91:
0c:1d:ee:ab:77:b0:61:01:4c:d8:12:63:a7:97:a1:e4:fa:84:
44:1a:a7:ec:c7:08:57:39:bf:28:35:a5:c3:6a:f5:6b:48:2c:
55:1e:5c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 04:54:59 2025 by rpki-client