This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400909.roa File: AS400909.roa (raw, json) Hash identifier: A/O90i6Fo9w4Kv8OutV9A/PFMyJfXjJkZSeAv6oyzc4= Subject key identifier: E9:91:58:5E:8C:75:DF:67:D3:56:8F:6E:DA:A0:F6:6C:1F:D8:EE:27 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 50676B86A0A5AF398B8C27657533978DDD62DC29 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400909.roa Signing time: Sat 29 Nov 2025 00:30:48 +0000 ROA not before: Sat 29 Nov 2025 00:25:48 +0000 ROA not after: Sat 28 Nov 2026 00:30:48 +0000 asID: 400909 IP address blocks: 157.254.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 09:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:67:6b:86:a0:a5:af:39:8b:8c:27:65:75:33:97:8d:dd:62:dc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 29 00:25:48 2025 GMT Not After : Nov 28 00:30:48 2026 GMT Subject: CN=E991585E8C75DF67D3568F6EDAA0F66C1FD8EE27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:0a:50:b0:ae:38:ea:cc:0e:e7:62:2d:dd: 5c:ea:d0:94:a5:5f:7b:f1:97:1d:13:34:60:cb:05: 51:af:f1:69:73:42:64:bd:39:5a:b2:33:70:22:ba: 2f:e7:61:12:63:9d:83:21:34:99:53:ae:06:e6:52: b9:b3:57:37:aa:cf:48:f4:8e:31:49:95:5b:95:d8: 24:18:f0:e6:2b:7c:89:27:92:99:57:bc:da:62:6e: bb:aa:3b:db:da:33:6e:91:50:72:88:3e:0f:58:94: d1:f0:d0:a9:b4:80:16:6c:9f:ce:b8:45:ae:03:8b: f7:34:80:79:4b:55:42:3b:96:c3:9b:64:b8:96:ac: c7:8f:66:ab:7e:ad:54:62:9c:93:c6:11:1d:9b:bb: 1e:03:a0:f2:33:fe:0c:ca:a3:55:09:55:ca:c7:5e: 93:ab:c7:02:3f:78:46:cd:63:b7:15:cf:ab:4a:9d: c0:da:ce:08:01:de:b8:76:a6:08:70:eb:1f:c9:d3: 07:9d:4e:49:83:6e:f2:16:49:47:fd:bc:19:46:2c: 12:0d:11:f9:36:2b:99:46:45:1a:d6:d0:e6:b2:d6: 46:3f:6c:38:fd:4a:2d:3a:a4:80:44:3c:e0:3b:3a: 21:9d:85:97:89:4e:99:92:da:94:c2:58:4e:e6:95: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:58:5E:8C:75:DF:67:D3:56:8F:6E:DA:A0:F6:6C:1F:D8:EE:27 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.160.0/23 Signature Algorithm: sha256WithRSAEncryption 70:73:ce:72:58:57:4f:50:c3:c6:39:de:bf:b6:79:02:f1:fd: 02:84:8c:e2:9d:61:28:5d:ef:b4:55:f2:07:cb:35:0a:f9:03: 52:38:0b:93:f3:3d:29:c4:53:2d:7c:3a:85:01:e4:58:12:91: 44:2d:f4:3a:99:da:1f:42:c8:31:5e:47:7a:06:cf:b9:10:fe: 27:56:cb:8e:5a:a5:0c:07:97:e1:e1:35:f6:66:2c:c2:e1:19: c6:06:b0:f4:57:3a:ea:56:8d:bc:73:a9:e3:4a:6e:2c:01:e4: 92:2f:95:b7:99:e4:ff:3a:e5:92:ca:b6:9a:29:da:2c:8b:d5: a0:15:bf:e3:6b:d8:b9:fb:80:32:58:79:45:80:61:e6:5e:12: b5:5e:de:49:74:1e:eb:e2:54:e4:2f:54:4a:f3:26:64:a5:4c: 42:0b:a1:89:39:56:22:fb:60:8a:06:0b:e5:75:c7:12:f4:8c: 54:43:77:ec:03:b3:7d:3e:08:e3:74:a6:78:6f:f6:8b:71:62: a1:ac:ba:21:0b:3c:c8:83:da:e9:3f:e5:14:c1:0e:f0:45:53: 51:49:ff:1d:b5:2b:82:a1:50:1f:16:bf:67:9a:d7:3c:28:ca: fd:5f:06:6f:55:ef:ba:3d:a8:af:43:c7:51:3e:fb:cc:40:84: dc:25:fa:3b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUUGdrhqClrzmLjCdldTOXjd1i3CkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMTI5MDAyNTQ4WhcNMjYxMTI4MDAzMDQ4 WjAzMTEwLwYDVQQDEyhFOTkxNTg1RThDNzVERjY3RDM1NjhGNkVEQUEwRjY2QzFG RDhFRTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9AKULCuOOrM DudiLd1c6tCUpV978ZcdEzRgywVRr/Fpc0JkvTlasjNwIrov52ESY52DITSZU64G 5lK5s1c3qs9I9I4xSZVbldgkGPDmK3yJJ5KZV7zaYm67qjvb2jNukVByiD4PWJTR 8NCptIAWbJ/OuEWuA4v3NIB5S1VCO5bDm2S4lqzHj2arfq1UYpyTxhEdm7seA6Dy M/4MyqNVCVXKx16Tq8cCP3hGzWO3Fc+rSp3A2s4IAd64dqYIcOsfydMHnU5Jg27y FklH/bwZRiwSDRH5NiuZRkUa1tDmstZGP2w4/UotOqSARDzgOzohnYWXiU6ZktqU wlhO5pXvzQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFOmRWF6Mdd9n01aPbtqg9mwf 2O4nMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwMDkwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ3+oDANBgkqhkiG9w0BAQsFAAOC AQEAcHPOclhXT1DDxjnev7Z5AvH9AoSM4p1hKF3vtFXyB8s1CvkDUjgLk/M9KcRT LXw6hQHkWBKRRC30OpnaH0LIMV5HegbPuRD+J1bLjlqlDAeX4eE19mYswuEZxgaw 9Fc66laNvHOp40puLAHkki+Vt5nk/zrlksq2minaLIvVoBW/42vYufuAMlh5RYBh 5l4StV7eSXQe6+JU5C9USvMmZKVMQguhiTlWIvtgigYL5XXHEvSMVEN37AOzfT4I 43SmeG/2i3Fioay6IQs8yIPa6T/lFMEO8EVTUUn/HbUrgqFQHxa/Z5rXPCjK/V8G b1Xvuj2or0PHUT77zECE3CX6Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 19:52:37 2025 by rpki-client