This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397630.roa File: AS397630.roa (raw, json) Hash identifier: LxvyC7UHpbUBC5RsfA9yBFJmyZ1s8XYZOwC9eG2Sy88= Subject key identifier: C4:C4:65:32:73:A8:EE:B8:0F:D6:BC:A6:EE:90:DC:1D:76:E5:85:AD Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2DD1AD3A0E7C0BFA49F0E6786B6F6B59819DF72D Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397630.roa Signing time: Thu 15 Jan 2026 00:06:36 +0000 ROA not before: Thu 15 Jan 2026 00:01:36 +0000 ROA not after: Thu 14 Jan 2027 00:06:36 +0000 asID: 397630 IP address blocks: 157.254.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Jan 2026 10:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d1:ad:3a:0e:7c:0b:fa:49:f0:e6:78:6b:6f:6b:59:81:9d:f7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 15 00:01:36 2026 GMT Not After : Jan 14 00:06:36 2027 GMT Subject: CN=C4C4653273A8EEB80FD6BCA6EE90DC1D76E585AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:3f:77:52:52:ef:bc:25:88:2e:31:d6:71: 98:53:b5:4c:5a:98:c8:a8:16:d7:fb:43:ee:08:82: 6d:b9:8a:08:4d:8c:c6:52:22:41:48:fd:c3:08:41: 20:58:9b:be:93:73:00:59:db:ee:bf:fb:df:46:81: e1:3f:53:43:f3:09:46:c4:52:59:b5:85:2e:29:69: 72:ea:77:23:16:23:1d:5c:db:12:4a:fe:2a:64:5f: 95:62:0c:cf:23:fd:de:c1:2f:d5:58:40:17:96:c0: 84:47:e1:20:cd:15:e3:79:39:d3:b2:2f:84:c0:fe: 39:e5:46:ff:8f:df:18:7e:10:df:2e:30:c9:59:55: a9:40:c3:e0:9e:98:70:95:78:08:e0:7d:e9:72:c7: cf:77:40:30:ef:ef:78:db:f7:f5:e5:77:b5:62:11: d5:cb:6a:36:21:01:43:fd:d2:ea:0a:42:1c:74:fa: 19:fb:f9:5e:ef:39:51:86:97:ac:9f:f0:d3:52:a3: be:1f:49:e2:05:7b:52:4d:d4:53:b1:29:4b:56:67: d5:a7:70:a9:29:7d:d5:c5:2c:23:c9:67:b8:ce:ec: 8f:66:14:25:93:d1:49:0b:0e:c0:74:12:eb:cd:0c: 5a:91:21:37:09:3d:04:83:44:95:b3:11:b2:34:8b: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C4:65:32:73:A8:EE:B8:0F:D6:BC:A6:EE:90:DC:1D:76:E5:85:AD X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.11.0/24 Signature Algorithm: sha256WithRSAEncryption aa:e2:27:98:c1:55:08:4f:d7:0d:4a:e9:1d:5b:1b:95:64:b3: a4:64:a0:e4:a1:a1:90:0e:64:a5:76:7e:6e:c7:8e:f7:9a:10: 83:fd:d1:ee:4f:06:39:15:bd:b5:39:2d:66:8c:8a:0b:2c:ea: c0:83:70:3e:d5:09:68:43:97:73:3d:c1:4b:13:b3:18:a5:a8: 33:3a:52:d1:8c:c3:ed:e2:e8:44:c8:02:4e:60:1f:77:a6:b1: cf:80:6e:ed:3f:f7:6c:10:44:f2:a4:3f:27:31:30:3e:ce:8f: 2e:3f:5d:ac:b0:e6:45:aa:1f:69:10:fb:7b:1e:f2:61:47:70: b7:8b:bf:23:b7:a4:3e:12:8c:e8:49:24:ca:54:67:5d:1d:28: 57:ec:f3:aa:9e:f7:27:64:54:6b:c9:b0:fb:16:0f:55:47:55: 11:e7:ce:51:54:cf:66:aa:88:77:47:52:cf:a3:1a:94:30:59: ab:fe:42:29:c8:c1:c0:73:97:64:06:52:0f:85:05:70:e2:4e: 58:89:35:e9:bc:07:23:ca:22:7c:bd:0c:fc:bd:17:86:d4:91: 5a:77:19:7b:46:d8:8b:41:34:28:2a:5b:69:e3:00:e7:76:7a: 56:d3:17:ca:ba:af:f7:24:73:fb:51:24:27:44:50:db:fb:da: cc:2a:9f:41 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIULdGtOg58C/pJ8OZ4a29rWYGd9y0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMTE1MDAwMTM2WhcNMjcwMTE0MDAwNjM2 WjAzMTEwLwYDVQQDEyhDNEM0NjUzMjczQThFRUI4MEZENkJDQTZFRTkwREMxRDc2 RTU4NUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcA/d1JS77wl iC4x1nGYU7VMWpjIqBbX+0PuCIJtuYoITYzGUiJBSP3DCEEgWJu+k3MAWdvuv/vf RoHhP1ND8wlGxFJZtYUuKWly6ncjFiMdXNsSSv4qZF+VYgzPI/3ewS/VWEAXlsCE R+EgzRXjeTnTsi+EwP455Ub/j98YfhDfLjDJWVWpQMPgnphwlXgI4H3pcsfPd0Aw 7+942/f15Xe1YhHVy2o2IQFD/dLqCkIcdPoZ+/le7zlRhpesn/DTUqO+H0niBXtS TdRTsSlLVmfVp3CpKX3VxSwjyWe4zuyPZhQlk9FJCw7AdBLrzQxakSE3CT0Eg0SV sxGyNIsvOwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMTEZTJzqO64D9a8pu6Q3B12 5YWtMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5NzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+CzANBgkqhkiG9w0BAQsFAAOC AQEAquInmMFVCE/XDUrpHVsblWSzpGSg5KGhkA5kpXZ+bseO95oQg/3R7k8GORW9 tTktZoyKCyzqwINwPtUJaEOXcz3BSxOzGKWoMzpS0YzD7eLoRMgCTmAfd6axz4Bu 7T/3bBBE8qQ/JzEwPs6PLj9drLDmRaofaRD7ex7yYUdwt4u/I7ekPhKM6EkkylRn XR0oV+zzqp73J2RUa8mw+xYPVUdVEefOUVTPZqqId0dSz6MalDBZq/5CKcjBwHOX ZAZSD4UFcOJOWIk16bwHI8oifL0M/L0XhtSRWncZe0bYi0E0KCpbaeMA53Z6VtMX yrqv9yRz+1EkJ0RQ2/vazCqfQQ== -----END CERTIFICATE-----Generated at Mon Jan 19 20:38:35 2026 by rpki-client