This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199487.roa
File: AS199487.roa (raw, json)
Hash identifier: gQFK4gIHLRFuIboGL1KYBmILnPXcXE3Vz8tSl4eSvJI=
Subject key identifier: 01:8E:8E:09:BF:39:6A:50:23:F6:F5:3A:DF:0B:AC:B2:24:ED:69:4B
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 653950635E11FA5065DC1F589D275A3A34791908
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199487.roa
Signing time: Fri 19 Dec 2025 04:33:47 +0000
ROA not before: Fri 19 Dec 2025 04:28:47 +0000
ROA not after: Fri 18 Dec 2026 04:33:47 +0000
asID: 199487
IP address blocks: 40.27.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 01:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:39:50:63:5e:11:fa:50:65:dc:1f:58:9d:27:5a:3a:34:79:19:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Dec 19 04:28:47 2025 GMT
Not After : Dec 18 04:33:47 2026 GMT
Subject: CN=018E8E09BF396A5023F6F53ADF0BACB224ED694B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:f3:ff:cd:c0:9f:c0:2e:38:42:95:c6:20:
a2:39:f3:d1:bb:05:9f:e3:c2:29:2f:72:20:24:80:
d8:9b:a3:85:6d:1d:dd:3c:a8:75:d0:93:31:92:98:
88:41:e1:09:40:b5:66:63:5d:94:5a:cf:06:b4:17:
3b:42:af:cb:bc:56:bc:eb:8a:d1:c6:fe:07:40:97:
cf:58:66:7b:7b:9b:e5:6d:7d:ac:9b:7d:2d:b2:0a:
b2:86:9a:4f:c8:aa:ae:8c:3b:be:9f:1a:36:6c:49:
23:30:04:59:d5:e7:6e:8c:93:0d:4d:f8:94:b4:a6:
61:ad:86:e9:4a:8b:b6:70:8c:5f:fe:23:a6:36:c4:
c4:0a:8c:68:12:d1:7b:09:21:d6:ac:38:82:e1:bc:
9b:2e:34:f8:56:e9:99:c3:25:78:11:b3:c8:66:94:
63:d1:10:70:2a:af:63:20:06:25:fa:d9:85:44:c1:
fd:89:ad:ef:68:50:d7:f5:e1:ff:6f:eb:2d:4d:4a:
ec:d2:01:72:36:1c:89:19:41:9e:fa:11:ce:96:d1:
af:ce:ff:e4:96:be:e1:b6:66:21:74:25:bd:40:76:
7d:8b:7a:77:19:ae:ef:be:45:e3:56:b9:f9:da:88:
73:1e:26:be:3a:ff:6c:66:0c:00:af:d0:34:8e:a4:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8E:8E:09:BF:39:6A:50:23:F6:F5:3A:DF:0B:AC:B2:24:ED:69:4B
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:13:9f:0e:a5:a3:1c:fb:be:f3:29:47:10:82:10:f3:c7:a1:
f6:90:7c:54:e3:b8:ad:4d:f6:15:18:2b:3e:61:dc:da:bf:8c:
05:85:42:51:fc:86:91:50:83:32:7c:93:1e:51:cc:ef:8c:25:
d4:df:e7:95:74:95:71:d8:23:f1:28:b5:c0:17:b5:f8:a1:a9:
30:43:f8:0f:20:84:c4:e8:e8:92:5c:2b:84:22:c0:a7:0f:02:
32:d1:d8:50:81:5b:99:6d:92:a6:c4:27:ce:c3:c3:00:34:b2:
3c:ca:32:44:ec:25:73:df:d8:86:da:74:ab:28:13:b8:dc:0c:
94:35:de:07:ce:cb:a0:35:33:dd:ad:81:f9:d3:cd:9e:73:5e:
19:77:90:04:ca:9c:f7:7c:c4:29:a7:87:68:44:54:e6:a3:21:
b7:38:bc:ae:09:51:2c:07:98:ab:17:b6:4b:8b:c7:64:54:c6:
75:ed:0d:4b:e3:97:67:3f:2d:47:f9:1c:7b:2b:37:53:ff:e4:
26:30:c5:9f:1e:0b:fb:18:af:25:1e:63:5e:4f:e8:a5:b6:be:
22:c3:1e:50:9e:99:4f:ee:2b:e2:23:95:1b:71:98:c5:15:76:
c1:91:2b:4f:e6:f4:91:56:92:6c:20:ce:76:31:59:35:7c:30:
e4:25:df:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:59:21 2025 by rpki-client