This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400298.roa File: AS400298.roa (raw, json) Hash identifier: MIGjc1HLaDriCuTQswclAMpF44+2NismyUCwhbkGTMM= Subject key identifier: F7:E0:C8:E4:E8:B4:0F:EF:BB:22:2C:7F:36:61:D3:FA:F3:DB:F3:49 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 79E91DBCFDBBB08B561BA7FE4425BAC85B6F5AFC Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400298.roa Signing time: Sun 14 Dec 2025 01:55:01 +0000 ROA not before: Sun 14 Dec 2025 01:50:01 +0000 ROA not after: Sun 13 Dec 2026 01:55:01 +0000 asID: 400298 IP address blocks: 157.254.10.0/24 maxlen: 24 157.254.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 10:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e9:1d:bc:fd:bb:b0:8b:56:1b:a7:fe:44:25:ba:c8:5b:6f:5a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 14 01:50:01 2025 GMT Not After : Dec 13 01:55:01 2026 GMT Subject: CN=F7E0C8E4E8B40FEFBB222C7F3661D3FAF3DBF349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:9b:4b:12:38:17:b3:15:1c:21:e6:27:73: 5c:b0:8f:79:a7:ba:7c:94:c3:fb:f8:8e:2e:1b:dd: b3:4e:76:95:e7:2c:ae:ae:74:8e:a5:39:e4:7a:72: b3:c7:42:bb:48:35:88:5a:b7:5c:46:bd:20:60:18: c0:40:e3:da:ed:40:5f:14:b5:a9:05:91:b9:58:52: 98:b0:63:82:d3:e1:08:4c:42:11:87:6f:22:3a:77: f4:47:ca:c0:ff:ee:72:ed:65:9a:33:05:2b:6d:5a: 65:5c:86:82:6e:f4:1d:40:8f:07:07:9b:5d:61:76: 9b:68:8f:77:3c:4d:b5:49:78:c1:a1:d7:cb:43:78: a4:b8:88:d6:1d:83:ba:06:95:42:0c:f4:cb:5e:64: 09:2b:78:ea:19:cd:b7:17:5d:ad:4d:f0:c4:3d:51: 57:ec:94:01:0e:70:63:3e:2d:a8:c3:94:82:78:56: e8:f4:5a:02:d0:45:50:08:0f:b0:a6:0a:ed:94:02: a7:43:58:93:1f:73:ff:14:af:92:b0:85:98:a7:ad: 72:5f:a7:09:b9:91:3d:a9:fe:70:17:83:bf:fa:56: 37:a3:47:2e:ef:0d:75:6e:e1:0f:ff:f5:16:da:93: dc:88:08:74:9f:12:5b:b3:67:ca:8b:fb:09:62:1e: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E0:C8:E4:E8:B4:0F:EF:BB:22:2C:7F:36:61:D3:FA:F3:DB:F3:49 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400298.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.10.0/24 157.254.224.0/24 Signature Algorithm: sha256WithRSAEncryption 56:a1:b7:12:ff:09:4e:63:0d:5d:82:96:5d:f0:b9:6c:35:ff: 86:42:c8:b1:49:1d:28:cb:84:fe:bd:2d:d8:86:85:2f:8d:ae: 83:8e:95:57:ae:69:8a:7d:0b:a6:b1:81:1f:d2:9a:74:06:39: ea:fa:ed:27:5c:b4:20:3f:a4:7c:34:9b:a4:7c:48:9a:5f:db: 73:5c:83:1f:5e:26:10:dd:09:0e:12:4c:a6:99:78:7d:4d:50: 33:36:ee:5e:ab:17:84:42:54:f6:cd:90:e4:8d:51:20:66:81: 84:45:da:46:3a:a9:4a:17:57:17:55:96:85:c2:3e:5f:85:fa: ee:e7:ac:7f:42:f1:22:5a:e3:1d:a8:26:f8:db:6d:ad:30:1a: c4:ef:56:1b:b0:62:89:0e:e3:85:ea:e9:c8:a2:86:19:6e:ff: 06:6a:c3:35:71:05:82:54:0c:4c:47:22:31:32:35:b6:69:ea: 2d:6d:2a:a8:99:e0:c4:f9:bb:b3:43:f2:f2:3d:29:a4:e0:f2: a8:d9:90:aa:e7:de:ff:a9:10:39:6b:54:cb:4f:27:15:fc:83: d8:32:31:a2:d7:2e:54:6f:47:f0:90:9b:08:bf:bf:71:2a:73: eb:ef:72:58:17:23:e6:9b:7e:46:e9:35:e0:5f:27:70:ba:3b: d5:26:c2:91 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUeekdvP27sItWG6f+RCW6yFtvWvwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMjE0MDE1MDAxWhcNMjYxMjEzMDE1NTAx WjAzMTEwLwYDVQQDEyhGN0UwQzhFNEU4QjQwRkVGQkIyMjJDN0YzNjYxRDNGQUYz REJGMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt+bSxI4F7MV HCHmJ3NcsI95p7p8lMP7+I4uG92zTnaV5yyurnSOpTnkenKzx0K7SDWIWrdcRr0g YBjAQOPa7UBfFLWpBZG5WFKYsGOC0+EITEIRh28iOnf0R8rA/+5y7WWaMwUrbVpl XIaCbvQdQI8HB5tdYXabaI93PE21SXjBodfLQ3ikuIjWHYO6BpVCDPTLXmQJK3jq Gc23F12tTfDEPVFX7JQBDnBjPi2ow5SCeFbo9FoC0EVQCA+wpgrtlAKnQ1iTH3P/ FK+SsIWYp61yX6cJuZE9qf5wF4O/+lY3o0cu7w11buEP//UW2pPciAh0nxJbs2fK i/sJYh5b5QIDAQABo4IChTCCAoEwHQYDVR0OBBYEFPfgyOTotA/vuyIsfzZh0/rz 2/NJMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwMDI5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAJ3+CgMEAJ3+4DANBgkqhkiG9w0B AQsFAAOCAQEAVqG3Ev8JTmMNXYKWXfC5bDX/hkLIsUkdKMuE/r0t2IaFL42ug46V V65pin0LprGBH9KadAY56vrtJ1y0ID+kfDSbpHxIml/bc1yDH14mEN0JDhJMppl4 fU1QMzbuXqsXhEJU9s2Q5I1RIGaBhEXaRjqpShdXF1WWhcI+X4X67uesf0LxIlrj Hagm+NttrTAaxO9WG7BiiQ7jherpyKKGGW7/BmrDNXEFglQMTEciMTI1tmnqLW0q qJngxPm7s0Py8j0ppODyqNmQqufe/6kQOWtUy08nFfyD2DIxotcuVG9H8JCbCL+/ cSpz6+9yWBcj5pt+Ruk14F8ncLo71SbCkQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:49:35 2025 by rpki-client