This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401818.roa
File: AS401818.roa (raw, json)
Hash identifier: 8GfvSUXGyOG6htfRZCeEXYpN7ciQrCR8ojfq4l7cE98=
Subject key identifier: 2D:A5:1F:0C:5E:97:73:73:F9:0F:C1:A7:9A:29:1E:38:E3:CC:32:30
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 715A7DAD0BFF5213AA5826CEB6986B562F159FF4
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401818.roa
Signing time: Sat 13 Dec 2025 00:03:29 +0000
ROA not before: Fri 12 Dec 2025 23:58:29 +0000
ROA not after: Sat 12 Dec 2026 00:03:29 +0000
asID: 401818
IP address blocks: 40.27.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 01:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5a:7d:ad:0b:ff:52:13:aa:58:26:ce:b6:98:6b:56:2f:15:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Dec 12 23:58:29 2025 GMT
Not After : Dec 12 00:03:29 2026 GMT
Subject: CN=2DA51F0C5E977373F90FC1A79A291E38E3CC3230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7c:de:ce:7f:a9:55:a3:12:7e:6d:c1:5c:7d:
b7:19:2b:a7:db:8e:c6:c8:1d:39:48:29:02:af:79:
7a:c8:ee:5c:ab:73:43:f8:56:9a:78:1e:7a:7b:96:
54:19:30:dc:6d:80:be:5a:7e:b3:8d:7d:c4:fb:9c:
bb:af:cf:a2:d6:6d:92:09:37:fa:97:95:f6:34:ad:
02:80:f3:32:f3:57:eb:07:3e:99:7c:fc:9e:5c:3e:
a6:0e:a8:0a:bb:49:ca:6b:d8:31:83:14:7e:20:3f:
48:ae:01:26:b8:20:bc:57:e7:d2:0a:59:52:81:10:
84:6e:da:d3:52:46:a9:c4:65:8f:f9:1f:36:78:e8:
8c:fb:6c:cb:a8:a9:80:13:0f:62:c6:25:c8:2b:9e:
28:f0:43:fb:d9:b8:bc:65:cb:2b:d7:bf:6f:ac:85:
79:6e:df:c7:db:6d:ca:0b:1f:bd:13:0c:e5:fa:c2:
5a:3e:e6:90:a0:03:36:08:29:20:5f:6b:ef:eb:48:
b0:27:90:4f:b6:66:2d:7a:ab:2b:61:b6:95:fc:c7:
4f:61:e3:0f:b1:d7:b5:4e:32:ac:a7:9f:d3:88:1d:
b9:66:b9:49:d2:9a:6e:56:3a:20:d1:8a:3c:f8:d3:
2e:be:00:68:87:83:ae:c0:6d:0e:b4:12:c6:a4:dd:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A5:1F:0C:5E:97:73:73:F9:0F:C1:A7:9A:29:1E:38:E3:CC:32:30
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.0.0/23
Signature Algorithm: sha256WithRSAEncryption
07:6c:8d:a0:ec:77:a6:2e:bc:00:b3:53:2c:ba:e0:cf:79:49:
18:4c:09:f7:af:98:08:a8:cd:74:45:37:42:0e:2a:83:ab:75:
c9:e1:c7:9d:3c:82:f2:c9:07:90:df:0b:ca:8e:2c:f0:9a:ad:
18:c9:8e:ae:ac:59:51:09:08:9b:4c:55:70:1e:f8:47:4f:2a:
cc:1e:ed:f1:b9:df:78:56:16:08:46:51:7c:74:71:14:17:35:
60:7b:d7:83:98:6f:3c:d9:5c:09:fb:69:11:aa:11:16:dc:d7:
87:b8:85:87:a2:b9:fd:c5:5a:5b:39:7e:7a:88:46:ee:9f:be:
36:62:89:8f:b3:19:b0:5b:df:39:b8:47:a3:86:04:d7:fc:9c:
87:19:f3:1d:c6:4e:fc:4f:d0:72:04:08:cf:fb:40:81:2f:d3:
be:db:9c:98:5b:b9:2e:c9:36:04:d8:7c:17:25:28:ea:1b:a6:
57:b0:70:87:4b:c4:ec:88:ee:0f:8f:c8:16:57:a7:62:d5:73:
ab:23:75:d5:71:60:53:f0:ab:a5:8c:a5:bd:fd:84:41:8d:0c:
51:b4:13:ae:a1:0b:c5:5d:ad:39:88:fb:ca:0e:5c:1f:df:91:
ff:b9:f9:9e:80:e9:40:39:19:7a:0f:73:89:ee:42:d5:42:e5:
d6:2a:d6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:54:38 2025 by rpki-client