This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400909.roa File: AS400909.roa (raw, json) Hash identifier: s7EG1IIIgOJTgLUMYM0MNNCj1oddUMxUMOPInqkGd/o= Subject key identifier: 57:C0:94:36:2B:2D:42:4B:D1:99:F5:BC:1F:A9:E3:67:AA:D2:80:E3 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 37C0909C78FA1ACC9C70A141909BC07770F600F6 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400909.roa Signing time: Sat 29 Nov 2025 13:30:48 +0000 ROA not before: Sat 29 Nov 2025 13:25:48 +0000 ROA not after: Sat 28 Nov 2026 13:30:48 +0000 asID: 400909 IP address blocks: 140.99.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 11:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c0:90:9c:78:fa:1a:cc:9c:70:a1:41:90:9b:c0:77:70:f6:00:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Nov 29 13:25:48 2025 GMT Not After : Nov 28 13:30:48 2026 GMT Subject: CN=57C094362B2D424BD199F5BC1FA9E367AAD280E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:f9:a7:0d:86:dd:cb:c4:9d:04:e6:bc:e5: b2:06:69:f6:c5:0d:a5:39:6f:76:7d:3d:20:a2:2e: 64:35:46:a5:98:64:2d:8e:71:2d:16:60:b0:70:00: 7f:72:ff:50:82:94:7b:d1:7d:33:a2:f9:d8:24:f3: 61:ad:d6:fd:ef:2a:46:1c:dc:b2:38:be:66:d3:2e: 96:16:31:f8:1e:69:c5:cd:3a:55:8b:5b:24:eb:ff: a9:ba:04:f2:fe:72:96:a8:50:72:f7:34:70:f9:ee: 56:8c:5e:43:f0:5b:dd:97:d2:7d:e7:5a:cd:b5:1e: f8:bf:44:4c:35:ce:ab:5d:6d:7c:a3:5c:4c:1c:d8: c2:88:a1:38:9a:5c:60:b3:e2:ec:7a:4a:5d:3b:6d: ef:01:45:8c:46:18:bd:13:c3:e9:32:1b:d9:43:b8: 1b:49:d4:4e:94:7a:18:84:b6:77:c8:98:81:cf:2b: a1:5c:26:0a:09:54:c0:bd:16:d4:6b:09:7b:49:7b: 2a:22:db:69:cb:d9:85:95:6f:3e:54:0f:b5:3b:5a: 4d:f8:65:b7:3b:98:af:7a:89:0c:58:97:a7:3a:95: 00:0c:0b:23:97:61:e4:8d:69:6f:57:96:5a:21:49: a5:06:9b:6e:1b:7a:94:56:55:46:c4:e2:f2:1d:93: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C0:94:36:2B:2D:42:4B:D1:99:F5:BC:1F:A9:E3:67:AA:D2:80:E3 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.84.0/23 Signature Algorithm: sha256WithRSAEncryption 76:4d:91:25:ea:a9:36:09:2d:db:c4:ed:39:10:40:55:c0:77: ba:74:42:51:c4:81:8c:d3:8a:42:1e:2c:da:61:50:f0:59:2e: 40:13:17:43:f3:9c:e0:fc:58:63:53:54:e5:0e:ef:d0:22:e8: 80:b1:a4:0b:de:c7:ce:8b:08:0c:0d:49:d3:f3:62:7e:71:95: ef:60:1a:ad:dd:47:cb:4a:8e:90:19:49:17:e9:d4:1b:da:9d: b5:64:89:f9:5b:31:e3:83:13:4f:56:07:86:40:5d:d6:d8:d3: 57:1f:41:d8:97:0d:16:2a:99:b4:fb:4d:bd:0c:72:82:7d:3d: 77:81:ef:b2:91:6f:a5:74:33:c3:5a:03:95:49:a9:42:a4:94: 42:b9:5b:dc:7f:9b:89:3f:58:3d:15:bb:3c:15:b1:6c:fb:b3: 57:26:b1:20:5a:fc:5b:a2:bf:51:20:93:c6:cd:a9:3e:54:bc: 98:b2:1a:67:d8:00:ea:eb:b1:b8:02:ad:4c:0d:37:60:0a:ec: ea:61:ed:d0:42:b8:43:21:38:1e:67:a3:de:4a:96:fd:bc:44: 9b:1b:7d:53:e4:ec:e6:5c:e1:36:1c:af:97:7f:5a:54:c9:1b: 26:78:5a:fb:1f:f9:75:a8:a2:35:51:1f:26:d0:cf:9c:95:91: 73:d9:22:51 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUN8CQnHj6GsyccKFBkJvAd3D2APYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUxMTI5MTMyNTQ4WhcNMjYxMTI4MTMzMDQ4 WjAzMTEwLwYDVQQDEyg1N0MwOTQzNjJCMkQ0MjRCRDE5OUY1QkMxRkE5RTM2N0FB RDI4MEUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUT5pw2G3cvE nQTmvOWyBmn2xQ2lOW92fT0goi5kNUalmGQtjnEtFmCwcAB/cv9QgpR70X0zovnY JPNhrdb97ypGHNyyOL5m0y6WFjH4HmnFzTpVi1sk6/+pugTy/nKWqFBy9zRw+e5W jF5D8Fvdl9J951rNtR74v0RMNc6rXW18o1xMHNjCiKE4mlxgs+LsekpdO23vAUWM Rhi9E8PpMhvZQ7gbSdROlHoYhLZ3yJiBzyuhXCYKCVTAvRbUawl7SXsqIttpy9mF lW8+VA+1O1pN+GW3O5iveokMWJenOpUADAsjl2HkjWlvV5ZaIUmlBptuG3qUVlVG xOLyHZPdIQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFfAlDYrLUJL0Zn1vB+p42eq 0oDjMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzQwMDkwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYxjVDANBgkqhkiG9w0BAQsFAAOC AQEAdk2RJeqpNgkt28TtORBAVcB3unRCUcSBjNOKQh4s2mFQ8FkuQBMXQ/Oc4PxY Y1NU5Q7v0CLogLGkC97HzosIDA1J0/NifnGV72Aard1Hy0qOkBlJF+nUG9qdtWSJ +Vsx44MTT1YHhkBd1tjTVx9B2JcNFiqZtPtNvQxygn09d4HvspFvpXQzw1oDlUmp QqSUQrlb3H+biT9YPRW7PBWxbPuzVyaxIFr8W6K/USCTxs2pPlS8mLIaZ9gA6uux uAKtTA03YArs6mHt0EK4QyE4Hmej3kqW/bxEmxt9U+Ts5lzhNhyvl39aVMkbJnha +x/5daiiNVEfJtDPnJWRc9kiUQ== -----END CERTIFICATE-----Generated at Fri Dec 5 17:24:35 2025 by rpki-client