This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS264409.roa File: AS264409.roa (raw, json) Hash identifier: GCveJsPUnngt20Um8Le0bSWCftJlwnbYyFHOPuCgGjA= Subject key identifier: C7:09:02:5C:78:EA:24:07:A0:E0:E5:D4:95:A4:F4:06:05:63:4B:C7 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2C3D861DD866DB01A3A9EB149345F50B74C0CEE4 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS264409.roa Signing time: Sun 11 Jan 2026 15:36:05 +0000 ROA not before: Sun 11 Jan 2026 15:31:05 +0000 ROA not after: Sun 10 Jan 2027 15:36:05 +0000 asID: 264409 IP address blocks: 157.254.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Jan 2026 01:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3d:86:1d:d8:66:db:01:a3:a9:eb:14:93:45:f5:0b:74:c0:ce:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 11 15:31:05 2026 GMT Not After : Jan 10 15:36:05 2027 GMT Subject: CN=C709025C78EA2407A0E0E5D495A4F40605634BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:18:60:92:fa:c7:73:0c:97:dc:4e:07:db:02: 74:f3:1c:aa:c2:5c:64:29:e0:71:c4:cc:0a:79:18: 9b:64:e8:be:3a:1d:fc:95:1d:39:e2:0d:d4:30:c7: ec:e5:16:c8:e4:38:cf:f7:da:3b:06:da:e5:1f:ec: 6a:10:dd:fd:da:6b:ca:17:ff:f7:0f:37:01:5a:09: e3:a6:cf:e8:e3:8f:3e:5f:d9:b9:ae:c2:50:b6:e0: 41:5a:c8:25:05:b4:c5:09:30:93:9b:bc:29:46:0b: 93:4b:38:e1:70:e8:ae:db:05:f5:98:31:f9:d3:8a: de:c1:58:4d:03:30:76:8d:04:68:16:c0:d4:e7:7a: c1:b5:62:50:6a:b4:21:9d:9f:61:c4:af:44:5a:0f: 57:b2:80:3e:7e:fc:a0:6d:ea:ee:2b:68:74:75:46: 39:f2:2e:cf:d5:8e:a6:59:a5:34:7e:36:b9:2e:0f: f4:5e:d6:8a:c2:6a:1a:fe:85:78:b3:3e:1a:fd:11: fc:34:78:70:36:ba:b3:24:38:b6:a4:35:df:78:1d: 4d:18:06:38:b1:96:18:34:4a:90:43:d9:8c:44:33: c4:85:3a:a5:b8:25:cd:07:d8:07:07:b9:b4:e0:de: 4c:92:3f:ca:d1:be:e2:f8:ba:a0:7b:00:55:d8:f7: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:09:02:5C:78:EA:24:07:A0:E0:E5:D4:95:A4:F4:06:05:63:4B:C7 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS264409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.152.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:e3:1b:48:60:f1:a9:d9:0f:e6:2c:a7:ce:dc:83:86:f0:4b: f4:58:16:6c:46:93:3a:44:cf:67:10:f0:60:4c:0e:72:e5:86: 2f:fd:f4:60:c1:45:45:77:73:3a:dc:b0:13:e6:63:b8:89:af: 14:16:81:c5:98:03:fa:b4:16:2f:13:b8:98:3e:b0:46:6c:a6: fc:75:f3:88:2d:96:a0:fb:9c:14:57:28:c3:c1:a0:1f:14:ad: 31:21:56:88:f7:0f:d8:94:bd:a9:43:b6:d2:4a:5a:56:ff:2e: 5a:35:ce:eb:7d:e4:a4:e7:bb:6f:76:d7:51:cf:17:23:d9:d4: 7e:b7:ea:3a:a2:fa:93:3a:63:83:ae:55:bc:da:1a:67:c7:36: af:bd:26:14:26:1e:3a:43:8c:36:cb:fd:22:da:e4:6d:6d:0d: 32:b4:e7:0f:b2:c3:c8:6d:c9:a7:84:8c:0e:4a:55:27:92:eb: bc:3d:4c:79:09:37:4b:9f:f0:42:ef:9a:cd:93:d7:7a:cd:fb: a2:f3:6c:a2:6f:6c:4f:26:2b:cc:e3:ba:d5:80:3f:0a:db:82: 5a:2b:49:a0:e1:7f:40:7c:95:d6:da:de:11:b4:af:15:ec:8f: 5f:5f:d5:6d:00:2f:c8:b2:ba:d8:d6:84:7e:6c:a2:49:53:28: 1a:eb:4d:b1 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIULD2GHdhm2wGjqesUk0X1C3TAzuQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMTExMTUzMTA1WhcNMjcwMTEwMTUzNjA1 WjAzMTEwLwYDVQQDEyhDNzA5MDI1Qzc4RUEyNDA3QTBFMEU1RDQ5NUE0RjQwNjA1 NjM0QkM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RhgkvrHcwyX 3E4H2wJ08xyqwlxkKeBxxMwKeRibZOi+Oh38lR054g3UMMfs5RbI5DjP99o7Btrl H+xqEN392mvKF//3DzcBWgnjps/o448+X9m5rsJQtuBBWsglBbTFCTCTm7wpRguT SzjhcOiu2wX1mDH504rewVhNAzB2jQRoFsDU53rBtWJQarQhnZ9hxK9EWg9XsoA+ fvygberuK2h0dUY58i7P1Y6mWaU0fja5Lg/0XtaKwmoa/oV4sz4a/RH8NHhwNrqz JDi2pDXfeB1NGAY4sZYYNEqQQ9mMRDPEhTqluCXNB9gHB7m04N5Mkj/K0b7i+Lqg ewBV2Pe/NwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMcJAlx46iQHoODl1JWk9AYF Y0vHMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzI2NDQwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+mDANBgkqhkiG9w0BAQsFAAOC AQEAL+MbSGDxqdkP5iynztyDhvBL9FgWbEaTOkTPZxDwYEwOcuWGL/30YMFFRXdz OtywE+ZjuImvFBaBxZgD+rQWLxO4mD6wRmym/HXziC2WoPucFFcow8GgHxStMSFW iPcP2JS9qUO20kpaVv8uWjXO633kpOe7b3bXUc8XI9nUfrfqOqL6kzpjg65VvNoa Z8c2r70mFCYeOkOMNsv9ItrkbW0NMrTnD7LDyG3Jp4SMDkpVJ5LrvD1MeQk3S5/w Qu+azZPXes37ovNsom9sTyYrzOO61YA/CtuCWitJoOF/QHyV1treEbSvFeyPX1/V bQAvyLK62NaEfmyiSVMoGutNsQ== -----END CERTIFICATE-----Generated at Wed Jan 14 03:51:30 2026 by rpki-client