This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS395839.roa File: AS395839.roa (raw, json) Hash identifier: 3iUzaozTqo1x0rfiYabM3p94YgkPJ3poHvd2eSJ2J7A= Subject key identifier: 63:82:73:64:47:AC:E4:2D:C3:4C:84:1D:82:31:A8:5C:F1:D6:C1:60 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 32068666F7FE00DF67045905D6E58082F46BF741 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS395839.roa Signing time: Fri 23 Jan 2026 23:18:15 +0000 ROA not before: Fri 23 Jan 2026 23:13:15 +0000 ROA not after: Fri 22 Jan 2027 23:18:15 +0000 asID: 395839 IP address blocks: 157.254.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 02:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:06:86:66:f7:fe:00:df:67:04:59:05:d6:e5:80:82:f4:6b:f7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 23 23:13:15 2026 GMT Not After : Jan 22 23:18:15 2027 GMT Subject: CN=6382736447ACE42DC34C841D8231A85CF1D6C160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:8e:b0:52:47:6c:03:c4:11:0f:f8:12:fa: fb:04:bd:48:f2:20:06:d9:a5:cf:c9:1a:6c:11:21: 3b:ac:0e:51:91:4c:10:fc:1a:bb:25:87:05:f1:c1: 01:a1:ed:2e:c5:f8:58:1c:66:82:9b:ad:53:f2:81: 8d:92:eb:58:d2:ff:c0:e7:a2:16:3f:f0:5f:86:81: b1:b5:98:59:f8:46:ed:36:06:db:a7:06:a7:35:1f: aa:d7:18:0a:8f:ae:16:04:4c:18:22:4e:95:40:68: 03:52:b6:5c:71:a3:ae:3d:9e:d0:f5:0f:81:c9:f5: 1e:63:01:0e:38:a7:32:45:2a:1a:c5:df:06:70:c5: 7a:c3:5f:65:bb:90:31:e0:3c:5e:66:45:90:e6:b8: e5:db:cb:89:a6:cb:81:01:ac:40:0f:ed:cc:00:fc: 57:e2:44:04:a8:69:46:aa:d7:8e:56:1d:18:91:64: 61:7f:c5:52:e3:2b:83:83:ff:8d:2d:4d:10:b1:6b: ea:54:ca:f4:89:4d:b7:67:43:5e:b8:88:75:61:4b: f4:f0:bf:33:08:50:e5:07:80:1f:1f:18:0a:be:b8: 38:95:23:c5:d8:7c:9c:51:95:7a:fe:26:33:a9:e2: 11:0e:c5:03:8c:5b:ac:ab:6d:73:a0:ff:f6:ea:5b: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:82:73:64:47:AC:E4:2D:C3:4C:84:1D:82:31:A8:5C:F1:D6:C1:60 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS395839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.187.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:07:f0:48:2e:02:ce:8b:66:02:e0:0f:f4:48:e0:eb:68:d4: 9e:b1:f1:b8:fe:4a:6e:2d:7a:54:75:ea:55:a5:9a:dc:16:38: 26:2e:8c:13:aa:88:08:fb:b9:18:31:d9:7e:4f:ac:ec:c0:97: ad:22:4d:de:ed:57:c3:dd:f4:e4:1f:45:ae:64:0c:f8:6d:ab: 2e:7f:2d:02:03:69:77:8a:d5:54:b2:ef:34:23:34:e1:23:0e: 04:25:4e:b2:14:31:b5:5e:75:3e:55:b8:81:a8:5f:53:22:18: 95:6d:7c:3b:e3:f1:11:55:d7:56:26:da:a0:d2:63:ed:3b:71: 6e:c3:96:c9:1e:d6:a1:93:81:c0:79:78:6c:06:c8:b7:20:0b: 54:c8:49:a8:90:df:bf:d9:0d:58:5f:46:c0:38:f4:fa:0f:ee: 0f:b3:e4:8e:90:96:21:94:6c:b6:89:ca:07:1e:80:dd:de:6d: 4d:99:70:07:bf:27:64:4f:8e:cf:17:b3:a3:c8:5f:39:31:eb: 25:32:af:55:e8:cd:07:f0:e1:64:85:d9:12:e9:42:34:ff:8d: 80:7d:3e:68:df:9a:0d:52:36:f5:4c:b7:8f:fd:f3:85:0a:f0: 3a:f6:9b:26:34:20:a5:3f:3c:c4:3c:6a:62:91:5e:cd:bb:d5: 7b:28:29:51 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUMgaGZvf+AN9nBFkF1uWAgvRr90EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMTIzMjMxMzE1WhcNMjcwMTIyMjMxODE1 WjAzMTEwLwYDVQQDEyg2MzgyNzM2NDQ3QUNFNDJEQzM0Qzg0MUQ4MjMxQTg1Q0Yx RDZDMTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9+OsFJHbAPE EQ/4Evr7BL1I8iAG2aXPyRpsESE7rA5RkUwQ/Bq7JYcF8cEBoe0uxfhYHGaCm61T 8oGNkutY0v/A56IWP/BfhoGxtZhZ+EbtNgbbpwanNR+q1xgKj64WBEwYIk6VQGgD UrZccaOuPZ7Q9Q+ByfUeYwEOOKcyRSoaxd8GcMV6w19lu5Ax4DxeZkWQ5rjl28uJ psuBAaxAD+3MAPxX4kQEqGlGqteOVh0YkWRhf8VS4yuDg/+NLU0QsWvqVMr0iU23 Z0NeuIh1YUv08L8zCFDlB4AfHxgKvrg4lSPF2HycUZV6/iYzqeIRDsUDjFusq21z oP/26lsDuQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGOCc2RHrOQtw0yEHYIxqFzx 1sFgMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5NTgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+uzANBgkqhkiG9w0BAQsFAAOC AQEADAfwSC4CzotmAuAP9Ejg62jUnrHxuP5Kbi16VHXqVaWa3BY4Ji6ME6qICPu5 GDHZfk+s7MCXrSJN3u1Xw9305B9FrmQM+G2rLn8tAgNpd4rVVLLvNCM04SMOBCVO shQxtV51PlW4gahfUyIYlW18O+PxEVXXVibaoNJj7TtxbsOWyR7WoZOBwHl4bAbI tyALVMhJqJDfv9kNWF9GwDj0+g/uD7PkjpCWIZRstonKBx6A3d5tTZlwB78nZE+O zxezo8hfOTHrJTKvVejNB/DhZIXZEulCNP+NgH0+aN+aDVI29Uy3j/3zhQrwOvab JjQgpT88xDxqYpFezbvVeygpUQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:06 2026 by rpki-client