This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151373.roa File: AS151373.roa (raw, json) Hash identifier: NP8olr8ldYyWMeP+/7YFXIM7CVcvdbv9CwaG5GIn8zc= Subject key identifier: 5A:2C:79:F4:17:D0:96:EC:5F:85:C0:DA:24:07:9F:3B:2C:A9:EE:9A Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 27DDAFE6CA540BC6E12CF3B22F3C8D77D606D7F0 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151373.roa Signing time: Tue 16 Dec 2025 00:05:45 +0000 ROA not before: Tue 16 Dec 2025 00:00:45 +0000 ROA not after: Tue 15 Dec 2026 00:05:45 +0000 asID: 151373 IP address blocks: 209.200.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 10:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:dd:af:e6:ca:54:0b:c6:e1:2c:f3:b2:2f:3c:8d:77:d6:06:d7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Dec 16 00:00:45 2025 GMT Not After : Dec 15 00:05:45 2026 GMT Subject: CN=5A2C79F417D096EC5F85C0DA24079F3B2CA9EE9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:86:01:1b:8f:73:38:6a:11:33:73:a1:bf: f6:89:16:ff:b7:ce:02:49:f5:c6:25:88:6b:64:c5: 78:61:66:45:de:03:b3:fe:93:f0:ff:c4:f6:40:7e: df:fa:29:b5:5f:3d:1d:54:b2:45:61:5b:71:d8:f1: dc:bb:f1:ba:6d:7c:78:2e:22:50:af:21:ba:21:b3: cb:50:1a:a3:83:fe:71:34:4c:cf:26:c4:03:05:69: fd:ad:51:ec:d8:5a:97:4f:67:a4:63:24:48:77:26: e8:34:a9:a1:6b:15:40:0a:b6:bd:cf:cb:d0:a3:10: a4:99:a1:46:5c:8a:95:b1:82:f0:d3:e2:e1:27:85: 09:bd:38:41:af:0e:9f:57:0f:5a:bd:05:ff:3b:d3: fb:56:15:04:df:aa:a8:95:88:81:ac:fe:cc:a7:c4: ac:e1:37:21:3f:7d:3e:ec:08:53:b3:12:3b:3f:1d: 5e:16:23:fd:18:c8:9f:73:c2:66:ca:b9:f9:0d:f0: 52:4e:55:af:f8:83:93:52:77:86:43:e1:23:8b:86: 5e:4f:bf:61:8d:a9:9d:1a:1b:e0:84:c4:33:e4:5a: 73:fa:37:ff:81:d2:b0:9b:8b:b6:c1:a4:87:a5:c6: 85:3a:5a:1b:3d:67:9e:3d:5e:48:7a:c7:6a:e6:1a: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2C:79:F4:17:D0:96:EC:5F:85:C0:DA:24:07:9F:3B:2C:A9:EE:9A X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS151373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.236.0/24 Signature Algorithm: sha256WithRSAEncryption 23:d2:e5:fd:a4:71:3a:7b:3e:c7:c3:72:b5:fb:28:e9:3e:57: 8f:86:d2:d7:e3:77:2b:83:ef:db:7b:45:05:90:e6:dc:98:cb: 03:e5:9e:17:f8:f9:d1:0f:77:d9:69:ab:6c:c0:5a:54:ad:c9: e0:85:bd:d8:d1:51:74:f0:e0:75:8b:dc:4f:ae:f8:9f:98:dd: b6:a0:51:90:b5:87:8f:46:7e:5b:e3:b0:6f:d9:0d:52:9e:aa: d3:dc:6d:f7:3a:ef:41:26:bf:c1:11:28:67:cd:b8:99:52:a5: a7:2f:02:8f:bf:87:5a:94:68:60:14:42:12:3d:88:b2:61:58: 02:2c:4e:9d:44:3c:f1:13:33:15:10:ad:b9:95:c9:0f:3b:21: d6:a1:c1:e5:8f:97:08:a0:2d:fa:b0:5f:1c:e7:e3:5e:90:0a: d0:12:6c:37:18:ce:47:f1:4f:72:29:ba:ed:b9:18:11:01:49: 68:2f:35:07:0d:6d:a6:e7:e6:df:02:76:42:9e:88:02:ee:23: 75:bf:00:7d:70:ca:ee:48:48:57:0f:3e:0a:4b:31:9e:f2:de: ed:dc:68:f4:5a:df:19:2b:51:3e:0f:d7:9d:6d:29:c5:27:0e: 17:0c:18:5d:bd:bd:1d:01:ec:73:65:1c:1d:f1:bd:73:54:63: 0d:ec:90:6f -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUJ92v5spUC8bhLPOyLzyNd9YG1/AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMjE2MDAwMDQ1WhcNMjYxMjE1MDAwNTQ1 WjAzMTEwLwYDVQQDEyg1QTJDNzlGNDE3RDA5NkVDNUY4NUMwREEyNDA3OUYzQjJD QTlFRTlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZCGARuPczhq ETNzob/2iRb/t84CSfXGJYhrZMV4YWZF3gOz/pPw/8T2QH7f+im1Xz0dVLJFYVtx 2PHcu/G6bXx4LiJQryG6IbPLUBqjg/5xNEzPJsQDBWn9rVHs2FqXT2ekYyRIdybo NKmhaxVACra9z8vQoxCkmaFGXIqVsYLw0+LhJ4UJvThBrw6fVw9avQX/O9P7VhUE 36qolYiBrP7Mp8Ss4TchP30+7AhTsxI7Px1eFiP9GMifc8Jmyrn5DfBSTlWv+IOT UneGQ+Eji4ZeT79hjamdGhvghMQz5Fpz+jf/gdKwm4u2waSHpcaFOlobPWeePV5I esdq5hqIiwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFosefQX0JbsX4XA2iQHnzss qe6aMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE1MTM3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANHI7DANBgkqhkiG9w0BAQsFAAOC AQEAI9Ll/aRxOns+x8Nytfso6T5Xj4bS1+N3K4Pv23tFBZDm3JjLA+WeF/j50Q93 2WmrbMBaVK3J4IW92NFRdPDgdYvcT674n5jdtqBRkLWHj0Z+W+Owb9kNUp6q09xt 9zrvQSa/wREoZ824mVKlpy8Cj7+HWpRoYBRCEj2IsmFYAixOnUQ88RMzFRCtuZXJ Dzsh1qHB5Y+XCKAt+rBfHOfjXpAK0BJsNxjOR/FPcim67bkYEQFJaC81Bw1tpufm 3wJ2Qp6IAu4jdb8AfXDK7khIVw8+CksxnvLe7dxo9FrfGStRPg/XnW0pxScOFwwY Xb29HQHsc2UcHfG9c1RjDeyQbw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:47 2025 by rpki-client