This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS395878.roa
File: AS395878.roa (raw, json)
Hash identifier: JoceDudMWuQf0lEKs3ELa7VOHNdIvMicVb5Emm+/eQ0=
Subject key identifier: 57:EA:63:21:22:8F:6F:D2:8D:DC:11:6C:97:F5:1D:14:10:F4:D7:15
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 3997607CEBEE962EB99833F63314DCC784E1A24C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS395878.roa
Signing time: Sat 13 Dec 2025 00:03:29 +0000
ROA not before: Fri 12 Dec 2025 23:58:29 +0000
ROA not after: Sat 12 Dec 2026 00:03:29 +0000
asID: 395878
IP address blocks: 40.27.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 01:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:97:60:7c:eb:ee:96:2e:b9:98:33:f6:33:14:dc:c7:84:e1:a2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Dec 12 23:58:29 2025 GMT
Not After : Dec 12 00:03:29 2026 GMT
Subject: CN=57EA6321228F6FD28DDC116C97F51D1410F4D715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:a3:45:af:ef:7e:97:fb:31:5c:7c:4f:61:
a0:3d:25:67:66:b3:06:ef:7f:70:b8:81:4a:87:3a:
ec:d4:e1:6b:e0:e5:03:eb:35:d3:58:a3:0e:fc:a7:
7c:7b:66:04:91:61:a2:bd:21:d1:7a:f0:1e:24:95:
fc:fa:a1:1a:94:b2:02:d6:8a:f1:19:0e:72:d9:62:
61:c7:c9:ce:cf:fb:c0:c5:1b:bd:0a:24:ea:8b:03:
16:cf:03:fe:04:64:ca:fe:aa:62:39:83:d4:85:d2:
5d:24:54:3c:dc:62:3d:de:1e:39:a6:e2:d9:ed:3e:
99:b8:87:93:57:0f:a4:a7:0d:00:36:ad:9a:24:3f:
5d:7d:93:7a:6a:2f:79:8f:14:c3:45:c9:b0:b3:ed:
51:5f:da:b9:da:11:98:8e:f8:c1:ee:13:fa:c3:fc:
df:45:5d:81:a7:f9:54:e0:a3:35:fa:ed:c6:e0:35:
c2:8c:d5:d9:98:b6:e5:41:ef:67:79:19:67:35:d8:
9e:5d:c8:8d:7c:4e:3a:60:91:d7:6f:13:b8:f7:cb:
f5:c8:65:6f:18:27:3a:c6:e6:5a:a9:4b:88:41:cf:
f3:68:3c:ec:3d:a8:36:e0:09:de:fa:fc:3e:1b:3d:
13:0c:e2:4b:43:23:4b:ac:7b:17:1a:c7:53:fc:dd:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EA:63:21:22:8F:6F:D2:8D:DC:11:6C:97:F5:1D:14:10:F4:D7:15
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS395878.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.0.0/23
Signature Algorithm: sha256WithRSAEncryption
61:d5:0b:6b:81:5c:09:bc:ca:0d:b5:d4:f5:28:45:b9:bf:e6:
88:b5:67:be:37:d7:30:89:a3:be:1c:e6:78:53:39:2c:7d:f8:
33:fb:53:9d:57:1a:fd:94:da:5d:12:b6:d1:98:32:c8:41:a2:
2e:a0:6e:0c:a6:23:64:5e:1c:b0:04:58:da:02:d4:d6:10:23:
5b:e9:4b:2d:f0:7c:fd:38:dd:96:ab:ce:32:d0:25:1c:7b:93:
04:08:1e:db:de:77:58:13:f1:e4:65:71:8a:fd:5b:b3:0a:33:
7a:07:f0:25:23:28:78:83:c5:86:d5:45:ee:70:f9:20:23:cd:
32:4c:be:dc:d5:ab:d8:41:9b:bd:55:bb:03:f3:34:42:b9:f1:
ab:81:8c:fc:18:9a:d4:a9:56:77:be:09:a7:ec:ee:be:58:ed:
a8:03:61:89:9e:8a:1b:67:3c:b0:81:32:55:e0:b5:78:06:69:
e2:7e:c3:4a:9d:05:d7:05:25:82:cb:01:99:38:99:8a:5b:5b:
ee:d2:a1:94:50:9d:21:65:83:0e:73:33:33:54:c5:7c:99:3f:
ee:1b:d1:3b:17:f7:74:59:19:89:1b:c3:cb:95:84:5c:02:7e:
31:76:8c:0f:92:ae:2f:8b:1a:92:a0:3f:6f:f2:25:2d:46:a7:
81:10:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:54:35 2025 by rpki-client