This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS17497.roa File: AS17497.roa (raw, json) Hash identifier: ejJMhWQaNlADmo0qyudn6GGVz7ZqKBpCdNvCsf7jYpg= Subject key identifier: 9A:8E:4E:57:3B:DC:B4:E0:71:D0:DC:C5:8F:99:00:F9:87:4A:64:7A Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 404588FF3AC9C31E3ABA7672E11CBDEEA0E27F64 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS17497.roa Signing time: Thu 25 Dec 2025 06:49:32 +0000 ROA not before: Thu 25 Dec 2025 06:44:32 +0000 ROA not after: Thu 24 Dec 2026 06:49:32 +0000 asID: 17497 IP address blocks: 157.254.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Dec 2025 01:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:45:88:ff:3a:c9:c3:1e:3a:ba:76:72:e1:1c:bd:ee:a0:e2:7f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 25 06:44:32 2025 GMT Not After : Dec 24 06:49:32 2026 GMT Subject: CN=9A8E4E573BDCB4E071D0DCC58F9900F9874A647A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:3f:ef:e5:4d:ed:68:db:05:bb:74:d6:f3: ff:39:d1:98:1a:52:cd:4b:08:cf:86:b6:94:00:96: ca:e7:64:66:72:74:b7:c8:d2:60:2e:0a:ba:17:54: 8f:94:d5:a7:35:a0:76:b4:aa:e1:f3:c2:a0:a9:4d: a7:02:52:31:36:38:12:61:4a:c3:bc:47:1a:f2:1e: e1:09:94:4e:c5:34:d2:ea:f7:d5:e5:87:d5:e4:c4: e9:cc:00:4d:fe:9a:51:4b:bf:c7:48:f6:c8:ff:6c: ff:69:a1:3a:8e:48:61:33:f7:77:12:6d:53:1e:45: 51:d8:2b:03:89:65:df:10:bd:1d:cb:60:df:69:f3: 90:84:e2:79:2f:e8:2c:26:8c:f1:e4:d5:6f:15:90: 81:50:c2:29:e0:51:da:67:37:66:d8:63:40:69:9d: 7c:5c:d5:e0:b6:9e:dc:a7:22:7d:92:bd:7e:26:6a: ae:2c:3d:b0:4c:22:03:8c:4c:30:cc:e7:c9:bb:9c: 8b:68:35:29:88:5d:60:89:0b:b3:24:98:95:ba:b4: ef:5c:e4:e8:20:b6:0c:82:70:df:21:20:e5:4e:e6: 23:59:1b:b6:9a:09:30:1b:fd:05:a4:0d:53:6d:f1: 51:01:92:6a:fd:da:72:5a:9e:d0:d9:27:43:b0:44: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8E:4E:57:3B:DC:B4:E0:71:D0:DC:C5:8F:99:00:F9:87:4A:64:7A X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS17497.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.211.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:3f:2f:38:e4:83:ea:ee:ac:d3:72:20:8d:f1:21:2d:51:8c: f2:ec:4c:36:fe:0f:2d:21:b5:50:3f:e7:95:8e:af:e5:23:df: d0:bd:28:c6:3f:6f:32:28:a5:4b:ca:43:60:7a:22:9c:b9:c8: 95:56:42:7f:78:30:eb:b1:f8:35:b1:da:58:bc:22:7a:1a:9e: 7c:1a:51:23:eb:68:86:a8:53:31:c6:1f:0d:e4:1e:74:c1:2e: b0:45:7d:bc:8e:4f:ae:50:23:09:5c:84:90:68:c7:52:de:59: 50:0e:29:41:8d:c0:09:58:83:81:43:b9:8c:69:a6:7b:28:07: 73:1a:d1:d3:68:1f:7f:f7:68:c5:3b:03:de:25:5c:c2:85:cd: 4b:0b:5e:06:cc:f6:28:ac:71:fc:cb:87:bc:7b:4c:9c:64:ab: a1:2c:8a:62:73:ed:7c:9e:c0:38:52:e8:92:91:62:cc:9b:b7: 6e:9d:b2:b7:49:bf:d6:6a:21:ee:7c:88:8c:05:fc:a0:47:07: 11:fd:2a:e5:18:91:46:3e:b5:37:6a:39:cc:05:bf:77:e8:15: 16:a5:60:0a:7b:4f:ad:af:54:80:c4:6f:6a:31:42:41:6a:d3: 47:c6:7a:f9:1d:43:71:79:aa:71:fe:25:14:b6:a9:26:48:5e: f4:e5:b9:c5 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUQEWI/zrJwx46unZy4Ry97qDif2QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMjI1MDY0NDMyWhcNMjYxMjI0MDY0OTMy WjAzMTEwLwYDVQQDEyg5QThFNEU1NzNCRENCNEUwNzFEMERDQzU4Rjk5MDBGOTg3 NEE2NDdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnQ/7+VN7Wjb Bbt01vP/OdGYGlLNSwjPhraUAJbK52RmcnS3yNJgLgq6F1SPlNWnNaB2tKrh88Kg qU2nAlIxNjgSYUrDvEca8h7hCZROxTTS6vfV5YfV5MTpzABN/ppRS7/HSPbI/2z/ aaE6jkhhM/d3Em1THkVR2CsDiWXfEL0dy2DfafOQhOJ5L+gsJozx5NVvFZCBUMIp 4FHaZzdm2GNAaZ18XNXgtp7cpyJ9kr1+JmquLD2wTCIDjEwwzOfJu5yLaDUpiF1g iQuzJJiVurTvXOToILYMgnDfISDlTuYjWRu2mgkwG/0FpA1TbfFRAZJq/dpyWp7Q 2SdDsETxMwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJqOTlc73LTgcdDcxY+ZAPmH SmR6MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE3NDk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7TMA0GCSqGSIb3DQEBCwUAA4IB AQAcPy845IPq7qzTciCN8SEtUYzy7Ew2/g8tIbVQP+eVjq/lI9/QvSjGP28yKKVL ykNgeiKcuciVVkJ/eDDrsfg1sdpYvCJ6Gp58GlEj62iGqFMxxh8N5B50wS6wRX28 jk+uUCMJXISQaMdS3llQDilBjcAJWIOBQ7mMaaZ7KAdzGtHTaB9/92jFOwPeJVzC hc1LC14GzPYorHH8y4e8e0ycZKuhLIpic+18nsA4UuiSkWLMm7dunbK3Sb/WaiHu fIiMBfygRwcR/SrlGJFGPrU3ajnMBb936BUWpWAKe0+tr1SAxG9qMUJBatNHxnr5 HUNxeapx/iUUtqkmSF705bnF -----END CERTIFICATE-----Generated at Fri Dec 26 03:07:17 2025 by rpki-client