This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa
File: 100036a5-3ecc-3953-ad52-6114836271e0.roa (raw, json)
Hash identifier: 8EexqMkL4Tza5mwkiQNa1RGT3i4oNnL7+rrVttIip+4=
Subject key identifier: E4:AE:91:97:1E:EF:3C:97:E8:7B:06:95:EF:75:36:32:F9:6D:CF:22
Certificate issuer: /CN=db9c5868-bb9c-4fd1-9aca-05762a850994
Certificate serial: 010D0C9F4328584C285639CC8902002F7EA74480
Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa
Signing time: Fri 12 Dec 2025 02:00:30 +0000
ROA not before: Fri 12 Dec 2025 02:00:30 +0000
ROA not after: Thu 12 Mar 2026 01:00:30 +0000
asID: 15046
IP address blocks: 128.230.152.0/24 maxlen: 24
128.230.157.128/25 maxlen: 25
128.230.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 23 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:28:56:39:cc:89:02:00:2f:7e:a7:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994
Validity
Not Before: Dec 12 02:00:30 2025 GMT
Not After : Mar 12 01:00:30 2026 GMT
Subject: CN=7bac5c8e-ec54-4424-ac2c-f52671a78cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:b2:2a:b5:62:04:30:6b:b2:9d:de:e6:4f:
f4:94:47:34:57:c0:a4:a7:21:49:ee:28:bf:b9:21:
37:3f:d9:11:0c:92:fd:f6:9f:a0:a7:31:62:cf:5d:
e1:60:7b:0e:e3:8d:dc:5b:16:43:51:47:3e:40:53:
ef:fc:36:65:e6:1c:21:b9:19:dc:3a:2c:ea:83:fd:
26:61:b8:ad:3a:c1:4b:fc:20:b3:af:12:e4:19:bf:
08:52:72:2c:f0:21:f2:98:48:69:ae:61:cf:c0:25:
6a:b2:b9:b3:00:1b:c8:20:1d:da:31:c3:b9:f4:a3:
f3:a7:46:ec:2b:7c:e5:e3:96:d1:39:35:22:4a:0a:
4b:12:6e:94:46:ef:05:ed:06:24:8a:61:6b:d6:25:
5c:ab:d7:a1:08:a6:97:fb:83:3d:ba:ed:5d:f2:6a:
e4:06:93:fc:f5:85:4c:1a:ea:fc:9c:9f:53:5e:12:
59:5f:4e:fd:30:7a:3f:72:90:33:97:46:d9:de:6b:
c9:59:01:bb:ef:94:6b:68:a8:28:d1:24:ea:dc:67:
a5:4c:57:64:11:c2:38:9a:c3:e4:83:59:0f:53:29:
ae:d3:88:c7:29:ea:2b:61:c0:2d:aa:d7:1a:27:c9:
48:60:d0:b0:d8:9d:ab:59:ba:fc:4e:53:89:fd:73:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AE:91:97:1E:EF:3C:97:E8:7B:06:95:EF:75:36:32:F9:6D:CF:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl
X509v3 Authority Key Identifier:
keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer
sbgp-ipAddrBlock: critical
IPv4:
128.230.152.0/24
128.230.157.128/25
128.230.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:09:c9:ca:4f:57:c9:b5:dc:59:d6:7a:6f:51:32:da:5f:56:
18:0a:e1:59:04:3a:06:00:d2:05:e9:39:e9:05:56:6b:6d:a3:
08:cf:04:aa:05:36:b3:7d:f0:a5:37:6b:45:3a:6d:b6:d6:55:
f8:b1:09:53:a6:0b:5e:b2:c1:c6:37:a0:c3:5d:5a:5c:08:86:
56:15:f4:82:41:1e:ce:89:06:90:65:b8:d5:6f:92:32:61:6f:
cb:7b:b1:5a:86:85:2b:5a:30:7f:11:06:09:a1:6c:67:21:1f:
06:d0:76:15:c5:de:c4:80:3b:77:01:c3:59:39:f7:ca:81:39:
de:cb:1f:94:c5:6f:c2:93:86:87:e1:71:3f:65:3b:64:fe:bd:
d2:6d:ef:38:9c:5c:c4:6f:57:62:d5:a4:c3:b2:4a:7d:9f:80:
80:8e:05:18:a5:a1:e4:67:ee:ca:ab:83:c1:e9:30:9b:96:f0:
9c:ff:8a:89:c3:09:20:38:99:bc:2f:5a:53:7f:31:43:e3:21:
9e:6e:2b:d0:45:b9:ac:4c:4c:46:b5:8c:2c:a9:be:82:4c:70:
dc:f4:90:6d:98:2a:18:3a:77:68:c2:db:c7:4d:0a:05:66:5a:
0e:a6:6b:60:24:52:a1:47:bf:2c:1d:0c:fa:40:e1:f5:71:d5:
38:e4:64:b8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwoVjnMiQIAL36nRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGI5YzU4NjgtYmI5Yy00ZmQxLTlhY2EtMDU3NjJhODUw
OTk0MB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk
N2JhYzVjOGUtZWM1NC00NDI0LWFjMmMtZjUyNjcxYTc4Y2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+qyKrViBDBrsp3e5k/0lEc0V8CkpyFJ7ii/
uSE3P9kRDJL99p+gpzFiz13hYHsO443cWxZDUUc+QFPv/DZl5hwhuRncOizqg/0m
YbitOsFL/CCzrxLkGb8IUnIs8CHymEhprmHPwCVqsrmzABvIIB3aMcO59KPzp0bs
K3zl45bROTUiSgpLEm6URu8F7QYkimFr1iVcq9ehCKaX+4M9uu1d8mrkBpP89YVM
Gur8nJ9TXhJZX079MHo/cpAzl0bZ3mvJWQG775RraKgo0STq3GelTFdkEcI4msPk
g1kPUymu04jHKeorYcAtqtcaJ8lIYNCw2J2rWbr8TlOJ/XPenwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOSukZce7zyX6HsGle91NjL5bc8iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjlj
NTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4NTA5OTQvMTAwMDM2YTUtM2VjYy0z
OTUzLWFkNTItNjExNDgzNjI3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGI5YzU4NjgtYmI5Yy00ZmQxLTlh
Y2EtMDU3NjJhODUwOTk0L2RiOWM1ODY4LWJiOWMtNGZkMS05YWNhLTA1NzYyYTg1
MDk5NC5jcmwwHwYDVR0jBBgwFoAUwuKfSSn3ynvZHRMd3xye8zm7PxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2
MmE4NTA5OTQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQAgOaYAwUH
gOadgAMEAIDmvDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQANCcnKT1fJtdxZ1npvUTLaX1YYCuFZBDoGANIF
6TnpBVZrbaMIzwSqBTazffClN2tFOm221lX4sQlTpgtessHGN6DDXVpcCIZWFfSC
QR7OiQaQZbjVb5IyYW/Le7FahoUrWjB/EQYJoWxnIR8G0HYVxd7EgDt3AcNZOffK
gTneyx+UxW/Ck4aH4XE/ZTtk/r3Sbe84nFzEb1di1aTDskp9n4CAjgUYpaHkZ+7K
q4PB6TCblvCc/4qJwwkgOJm8L1pTfzFD4yGebivQRbmsTExGtYwsqb6CTHDc9JBt
mCoYOndowtvHTQoFZloOpmtgJFKhR78sHQz6QOH1cdU45GS4
-----END CERTIFICATE-----
Generated at Sun Dec 21 15:23:14 2025 by rpki-client