This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: qUeK3sKG6EI5qBWi/LHXLt6MqT/YDYGgFBjehHsavYM= Subject key identifier: 2A:D1:6E:72:D0:38:BE:75:5E:E5:FE:3B:D6:9F:8D:69:A6:C3:92:08 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 17CABC87B14D182FC448C6A3E5F238C454D0CC6C Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401776.roa Signing time: Sun 30 Nov 2025 09:51:17 +0000 ROA not before: Sun 30 Nov 2025 09:46:17 +0000 ROA not after: Sun 29 Nov 2026 09:51:17 +0000 asID: 401776 IP address blocks: 209.200.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Dec 2025 19:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ca:bc:87:b1:4d:18:2f:c4:48:c6:a3:e5:f2:38:c4:54:d0:cc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Nov 30 09:46:17 2025 GMT Not After : Nov 29 09:51:17 2026 GMT Subject: CN=2AD16E72D038BE755EE5FE3BD69F8D69A6C39208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:7e:8a:2e:84:eb:08:8c:df:d2:8c:78:ae: 85:e4:12:75:a6:8b:bc:69:b9:04:27:a4:6a:24:56: b0:1d:c2:dc:01:f0:d2:10:b6:19:df:ed:a7:42:72: 3f:af:a5:3d:1b:c3:f0:89:b8:42:75:5d:d5:ed:3f: 5f:29:10:de:91:27:8c:e3:7f:ae:e0:20:1f:ff:f0: 38:6c:6c:ac:cf:a7:17:25:06:73:b9:2d:f6:93:93: b3:10:eb:49:dd:94:de:94:7f:93:2e:fe:ba:16:3d: 3d:90:3b:5e:a2:5a:00:4a:f0:42:b4:fc:af:4f:88: c6:67:2c:01:d2:51:26:72:9e:7e:1d:86:e4:7b:1c: a2:c0:18:92:1b:c8:41:06:2f:c9:68:3e:19:38:ca: 49:ce:d1:a5:38:e5:f7:bf:3d:a0:c0:96:76:b6:2e: 92:5d:e1:2e:71:79:7c:66:fd:7a:c6:d2:9f:f1:11: 95:65:da:e6:d3:da:d5:b4:da:bc:be:06:a3:33:40: b1:73:42:4c:a1:ee:57:22:6c:ab:13:83:1d:6e:21: 14:b7:7b:fa:e8:29:0a:84:c7:9d:a1:e6:d4:92:05: 4e:70:f3:85:98:51:70:b7:7d:55:6e:27:eb:8c:aa: 1a:78:55:63:b2:8b:85:4a:45:87:e6:3c:d2:8a:c2: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D1:6E:72:D0:38:BE:75:5E:E5:FE:3B:D6:9F:8D:69:A6:C3:92:08 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.236.0/24 Signature Algorithm: sha256WithRSAEncryption ad:b0:c2:d8:01:f6:3a:80:e9:bf:39:89:2f:b3:90:ab:6f:d1: ec:4c:b8:eb:82:13:3a:1f:36:f4:4b:b1:10:ba:31:9b:9a:f1: 94:34:61:86:5b:58:fc:1d:d4:dd:03:cb:81:db:07:f9:4c:8b: 41:84:f4:ee:13:7e:51:e3:72:86:aa:58:51:5c:68:e3:94:03: f8:d9:af:44:f7:26:ff:74:e4:1e:d1:29:c7:a8:88:4d:a6:6a: fa:8c:18:f8:d9:5d:54:2b:42:82:a2:11:53:5a:9a:1f:f0:51: 8f:78:ac:5f:88:55:38:11:2e:1f:8e:26:2f:55:f2:19:84:e6: 60:42:85:4d:ce:93:4c:39:3e:bf:a8:68:da:be:fc:2e:22:32: 8f:33:db:b9:ee:e6:19:57:98:1e:ad:a0:0e:ad:5d:f4:ea:15: 71:66:0d:53:d1:a3:fa:a5:e9:9c:10:66:58:a5:34:3d:59:65: 4c:f4:42:91:3e:9f:06:cf:e4:c5:1a:ed:2c:9e:d7:15:81:0d: 78:24:5c:72:25:da:4b:b8:ed:73:18:df:4d:74:97:f5:2b:71: 50:46:1a:f8:09:69:53:d4:8e:f2:a1:25:78:93:33:e2:50:57: d8:b5:7f:0c:a8:55:ff:ac:e5:13:ca:df:1c:c2:f5:13:27:47: 4c:ef:48:07 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUF8q8h7FNGC/ESMaj5fI4xFTQzGwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMTMwMDk0NjE3WhcNMjYxMTI5MDk1MTE3 WjAzMTEwLwYDVQQDEygyQUQxNkU3MkQwMzhCRTc1NUVFNUZFM0JENjlGOEQ2OUE2 QzM5MjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TV+ii6E6wiM 39KMeK6F5BJ1pou8abkEJ6RqJFawHcLcAfDSELYZ3+2nQnI/r6U9G8PwibhCdV3V 7T9fKRDekSeM43+u4CAf//A4bGysz6cXJQZzuS32k5OzEOtJ3ZTelH+TLv66Fj09 kDteoloASvBCtPyvT4jGZywB0lEmcp5+HYbkexyiwBiSG8hBBi/JaD4ZOMpJztGl OOX3vz2gwJZ2ti6SXeEucXl8Zv16xtKf8RGVZdrm09rVtNq8vgajM0Cxc0JMoe5X ImyrE4MdbiEUt3v66CkKhMedoebUkgVOcPOFmFFwt31VbifrjKoaeFVjsouFSkWH 5jzSisKaxwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCrRbnLQOL51XuX+O9afjWmm w5IIMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwMTc3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANHI7DANBgkqhkiG9w0BAQsFAAOC AQEArbDC2AH2OoDpvzmJL7OQq2/R7Ey464ITOh829EuxELoxm5rxlDRhhltY/B3U 3QPLgdsH+UyLQYT07hN+UeNyhqpYUVxo45QD+NmvRPcm/3TkHtEpx6iITaZq+owY +NldVCtCgqIRU1qaH/BRj3isX4hVOBEuH44mL1XyGYTmYEKFTc6TTDk+v6ho2r78 LiIyjzPbue7mGVeYHq2gDq1d9OoVcWYNU9Gj+qXpnBBmWKU0PVllTPRCkT6fBs/k xRrtLJ7XFYENeCRcciXaS7jtcxjfTXSX9StxUEYa+AlpU9SO8qEleJMz4lBX2LV/ DKhV/6zlE8rfHML1EydHTO9IBw== -----END CERTIFICATE-----Generated at Mon Dec 1 22:20:53 2025 by rpki-client