This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa File: AS152868.roa (raw, json) Hash identifier: UUDpJvkSc5FPuvRNmSdM9pxJIsjI2wGLABRWxLecb+w= Subject key identifier: AA:7F:7A:A9:DB:43:D3:AD:F8:F0:A4:4A:11:62:F2:39:EF:6C:E0:3E Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 0DAAD68E958CA9C8B46E091A623CEE7691E24F3D Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa Signing time: Mon 01 Dec 2025 00:15:32 +0000 ROA not before: Mon 01 Dec 2025 00:10:32 +0000 ROA not after: Mon 30 Nov 2026 00:15:32 +0000 asID: 152868 IP address blocks: 40.183.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 15:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:aa:d6:8e:95:8c:a9:c8:b4:6e:09:1a:62:3c:ee:76:91:e2:4f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Dec 1 00:10:32 2025 GMT Not After : Nov 30 00:15:32 2026 GMT Subject: CN=AA7F7AA9DB43D3ADF8F0A44A1162F239EF6CE03E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:17:3b:b0:05:33:e3:41:7b:25:f8:65:20: 09:df:71:aa:cd:3e:35:88:ea:34:db:4e:7f:ec:c7: 78:72:07:ee:8f:1d:c0:7a:1d:00:cd:bb:70:d3:ee: d4:63:9e:6a:ee:56:ff:95:fd:bb:96:4b:c8:47:ed: 18:83:4c:77:7e:55:7d:20:5f:a8:0c:16:95:5e:ee: b7:27:3c:34:2f:4e:14:86:cf:a0:82:48:7d:7b:c5: 53:36:04:39:50:95:d0:3a:7c:a1:8a:53:73:79:54: e8:11:78:7b:f0:82:d8:61:da:fe:19:30:0d:8d:3f: ba:a2:3f:72:93:8b:73:0e:f2:0e:2d:c2:25:43:a4: 1c:91:b1:21:50:c6:40:26:89:46:67:ba:10:e0:62: 91:36:92:6d:2b:98:4d:73:4d:9c:dc:ae:c8:e6:52: ab:88:90:0e:54:5f:b9:67:26:80:8d:8a:0d:23:e7: 02:fb:82:c0:7e:8b:e0:46:0b:c6:cd:15:e7:a4:d0: 52:28:7b:6a:ec:60:71:a3:67:63:6f:2e:23:c1:d0: 52:82:c7:91:ab:26:73:e6:7b:66:85:06:54:24:6c: 58:93:03:b8:57:0d:1f:11:89:01:21:94:58:83:ce: 54:58:2e:18:dc:e4:55:e4:ac:c0:6e:55:d9:26:20: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7F:7A:A9:DB:43:D3:AD:F8:F0:A4:4A:11:62:F2:39:EF:6C:E0:3E X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.183.116.0/23 Signature Algorithm: sha256WithRSAEncryption ae:15:be:50:cb:67:dd:4b:4d:72:bc:b9:01:45:80:83:1f:16: fe:43:e0:fb:a5:07:de:95:b1:60:31:c3:87:42:d1:2e:5d:c9: 23:7e:4c:c4:5a:97:f3:47:39:b0:5c:b9:2b:ea:48:8d:04:35: 15:19:11:23:d6:88:21:d4:04:09:aa:70:8f:b1:a2:60:15:e2: 70:94:f5:a0:34:5a:c1:77:37:3c:1c:b5:b1:7c:e5:6e:25:cf: 0b:13:20:31:d8:05:5b:a8:c4:a1:7a:76:07:de:3a:21:92:2a: bd:c1:da:2f:1d:89:8a:f9:f4:b1:17:95:b9:57:40:49:57:62: 42:9c:57:2a:b5:d8:b8:d9:1d:55:b9:2d:91:ac:e1:f9:31:4b: 65:2e:fd:53:ac:2c:a1:55:f5:59:67:c4:8e:f5:e4:3f:8e:d5: 32:e8:47:6b:a0:05:12:8b:ec:13:bb:d0:8c:7d:74:36:c7:97: 0b:0d:d1:3b:30:6c:bf:b2:83:1c:52:b5:79:ea:af:64:d4:45: 1e:dd:0d:15:4f:01:be:d2:73:fc:5b:61:88:8c:88:99:7c:96: 0e:1a:7f:66:8e:bf:9d:86:cd:02:74:7a:bd:71:4a:44:6b:a2: 6f:e6:ec:de:7f:2e:08:66:da:97:7c:f5:63:5b:de:8c:b6:80: 5c:c7:37:a2 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUDarWjpWMqci0bgkaYjzudpHiTz0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMjAxMDAxMDMyWhcNMjYxMTMwMDAxNTMy WjAzMTEwLwYDVQQDEyhBQTdGN0FBOURCNDNEM0FERjhGMEE0NEExMTYyRjIzOUVG NkNFMDNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDkXO7AFM+NB eyX4ZSAJ33GqzT41iOo0205/7Md4cgfujx3Aeh0Azbtw0+7UY55q7lb/lf27lkvI R+0Yg0x3flV9IF+oDBaVXu63Jzw0L04Uhs+ggkh9e8VTNgQ5UJXQOnyhilNzeVTo EXh78ILYYdr+GTANjT+6oj9yk4tzDvIOLcIlQ6QckbEhUMZAJolGZ7oQ4GKRNpJt K5hNc02c3K7I5lKriJAOVF+5ZyaAjYoNI+cC+4LAfovgRgvGzRXnpNBSKHtq7GBx o2djby4jwdBSgseRqyZz5ntmhQZUJGxYkwO4Vw0fEYkBIZRYg85UWC4Y3ORV5KzA blXZJiDZ0QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFKp/eqnbQ9Ot+PCkShFi8jnv bOA+MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE1Mjg2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASi3dDANBgkqhkiG9w0BAQsFAAOC AQEArhW+UMtn3UtNcry5AUWAgx8W/kPg+6UH3pWxYDHDh0LRLl3JI35MxFqX80c5 sFy5K+pIjQQ1FRkRI9aIIdQECapwj7GiYBXicJT1oDRawXc3PBy1sXzlbiXPCxMg MdgFW6jEoXp2B946IZIqvcHaLx2Jivn0sReVuVdASVdiQpxXKrXYuNkdVbktkazh +TFLZS79U6wsoVX1WWfEjvXkP47VMuhHa6AFEovsE7vQjH10NseXCw3ROzBsv7KD HFK1eeqvZNRFHt0NFU8BvtJz/FthiIyImXyWDhp/Zo6/nYbNAnR6vXFKRGuib+bs 3n8uCGbal3z1Y1vejLaAXMc3og== -----END CERTIFICATE-----Generated at Sat Dec 6 19:55:02 2025 by rpki-client