This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401558.roa File: AS401558.roa (raw, json) Hash identifier: Zu8Gpkru8Q9KafwRc8We6Gh6/mJz+cQWQSXOzDtCCb0= Subject key identifier: 9D:14:67:DC:92:AB:9A:C6:56:CE:D9:7C:30:AF:A5:73:F1:EA:F8:5A Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 030535CD5979C73A8F6456504CCCC50A7E3C18CB Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401558.roa Signing time: Mon 15 Dec 2025 18:08:03 +0000 ROA not before: Mon 15 Dec 2025 18:03:03 +0000 ROA not after: Mon 14 Dec 2026 18:08:03 +0000 asID: 401558 IP address blocks: 40.27.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 01:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:05:35:cd:59:79:c7:3a:8f:64:56:50:4c:cc:c5:0a:7e:3c:18:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Dec 15 18:03:03 2025 GMT Not After : Dec 14 18:08:03 2026 GMT Subject: CN=9D1467DC92AB9AC656CED97C30AFA573F1EAF85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:7d:91:06:ff:2e:65:c6:05:a8:ff:0a:1b: 7a:1a:7b:13:3d:b9:e7:0e:00:5a:85:f7:24:f0:de: 90:0e:d3:ee:5c:55:7e:f8:63:52:89:8b:ac:3f:76: 14:53:c0:45:e7:37:6e:1c:8e:13:35:e9:7c:8f:ec: 38:28:4a:62:34:4c:81:7a:b2:b8:44:48:bd:01:13: ec:62:9e:e5:d3:8d:88:55:96:8e:84:03:83:84:b1: 4f:fe:bd:d8:88:f2:88:53:e3:11:e3:e1:f0:ef:94: 67:fb:7c:a5:28:7c:cd:97:42:7c:6b:22:e4:6b:31: 59:a3:4e:f8:fb:91:0e:ee:78:53:e1:57:41:e5:8a: 9b:c9:8e:6f:67:b9:aa:de:4c:69:0e:03:b0:bb:0b: 8d:27:e6:76:ae:49:8b:b3:85:48:f7:3a:ad:31:27: fb:ce:82:e7:3a:f4:c3:07:f1:3a:bc:17:06:90:eb: fd:eb:4d:cc:4e:56:b9:99:68:48:8d:ea:d7:64:f2: f1:a9:16:0c:6f:b0:f0:2b:f4:74:5e:e3:a0:24:3e: ef:38:8c:68:40:82:d6:eb:49:28:0f:b2:37:a2:6e: dc:55:c3:fc:19:91:e5:65:c9:b7:51:eb:85:3e:be: 17:8e:0c:9e:70:0a:10:98:7e:49:fd:8d:e3:ee:bb: 79:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:14:67:DC:92:AB:9A:C6:56:CE:D9:7C:30:AF:A5:73:F1:EA:F8:5A X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401558.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.23.0/24 Signature Algorithm: sha256WithRSAEncryption 32:99:65:33:f5:04:4f:94:e1:74:4e:fd:25:0e:7d:f0:18:6b: b8:72:02:ce:5d:7f:05:d0:6b:5a:c8:2c:a4:d8:5b:4b:6f:20: 69:30:99:0d:f0:4c:05:4f:4a:74:f9:7f:36:ca:48:01:ba:af: 92:f7:aa:e8:d8:6e:bb:7e:af:4c:2c:ca:bc:5c:05:b7:33:3b: 5c:01:c4:68:25:e4:4d:de:b8:ad:37:46:dd:6a:c2:e8:f5:21: 7c:ec:38:e6:b7:b8:b3:ae:3f:e2:d0:a7:2e:df:ad:db:17:54: fd:e4:ea:d7:45:b6:c2:b4:9a:0c:79:c6:d6:34:ac:4a:e2:83: 2d:f7:06:23:fe:1e:35:88:66:27:14:85:8d:53:fa:7e:21:03: 1d:62:d5:61:0a:57:c6:c9:9c:ee:19:23:48:57:37:8c:33:24: 48:37:ef:71:70:83:39:af:db:1d:38:c1:db:df:49:86:a8:a7: 5e:ff:a5:c5:94:9f:40:74:72:20:a6:45:16:a5:66:ba:96:5b: e9:fa:75:96:b8:8d:04:f3:9d:ac:db:48:33:83:44:98:6e:64: fb:45:a3:8e:0c:a7:f3:de:e7:be:19:fc:1b:ab:a1:54:df:5a: 9a:d6:ee:fe:b5:98:be:f9:93:a0:3d:26:50:4c:aa:90:ea:28: 9c:ca:d4:9d -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUAwU1zVl5xzqPZFZQTMzFCn48GMswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMjE1MTgwMzAzWhcNMjYxMjE0MTgwODAz WjAzMTEwLwYDVQQDEyg5RDE0NjdEQzkyQUI5QUM2NTZDRUQ5N0MzMEFGQTU3M0Yx RUFGODVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG19kQb/LmXG Baj/Cht6GnsTPbnnDgBahfck8N6QDtPuXFV++GNSiYusP3YUU8BF5zduHI4TNel8 j+w4KEpiNEyBerK4REi9ARPsYp7l042IVZaOhAODhLFP/r3YiPKIU+MR4+Hw75Rn +3ylKHzNl0J8ayLkazFZo074+5EO7nhT4VdB5YqbyY5vZ7mq3kxpDgOwuwuNJ+Z2 rkmLs4VI9zqtMSf7zoLnOvTDB/E6vBcGkOv9603MTla5mWhIjerXZPLxqRYMb7Dw K/R0XuOgJD7vOIxoQILW60koD7I3om7cVcP8GZHlZcm3UeuFPr4XjgyecAoQmH5J /Y3j7rt56wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJ0UZ9ySq5rGVs7ZfDCvpXPx 6vhaMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwMTU1OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACgbFzANBgkqhkiG9w0BAQsFAAOC AQEAMpllM/UET5ThdE79JQ598BhruHICzl1/BdBrWsgspNhbS28gaTCZDfBMBU9K dPl/NspIAbqvkveq6Nhuu36vTCzKvFwFtzM7XAHEaCXkTd64rTdG3WrC6PUhfOw4 5re4s64/4tCnLt+t2xdU/eTq10W2wrSaDHnG1jSsSuKDLfcGI/4eNYhmJxSFjVP6 fiEDHWLVYQpXxsmc7hkjSFc3jDMkSDfvcXCDOa/bHTjB299JhqinXv+lxZSfQHRy IKZFFqVmupZb6fp1lriNBPOdrNtIM4NEmG5k+0Wjjgyn897nvhn8G6uhVN9amtbu /rWYvvmToD0mUEyqkOoonMrUnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:59:14 2025 by rpki-client