This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: y9DJMs6wap2hExc6LSVEUpUekijmUEPDP7m6Moebdwc=
Subject key identifier: F9:96:78:35:87:24:DD:F4:AB:5F:3E:01:0E:BB:04:EA:F4:B8:08:6D
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 26881C8C08716DEE4001C096390EF6787872E78E
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa
Signing time: Sat 10 Jan 2026 14:53:55 +0000
ROA not before: Sat 10 Jan 2026 14:48:55 +0000
ROA not after: Sat 09 Jan 2027 14:53:55 +0000
asID: 20473
IP address blocks: 40.183.125.0/24 maxlen: 24
40.223.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Jan 2026 09:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:88:1c:8c:08:71:6d:ee:40:01:c0:96:39:0e:f6:78:78:72:e7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Jan 10 14:48:55 2026 GMT
Not After : Jan 9 14:53:55 2027 GMT
Subject: CN=F99678358724DDF4AB5F3E010EBB04EAF4B8086D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:f1:8e:ba:1f:d1:8a:f7:b1:31:bb:da:6a:
00:88:49:e6:08:81:c2:83:56:cc:9d:ab:41:05:59:
6a:ef:7c:61:c6:e5:c9:65:8f:15:aa:a4:1c:c9:86:
0d:cf:79:7d:28:7f:88:68:55:12:d6:94:c7:d4:77:
a6:bc:b4:59:37:f1:88:11:b7:22:64:c9:af:40:b7:
a5:92:db:98:5f:ef:1b:60:24:71:de:c8:13:de:61:
db:d1:70:24:68:56:d9:10:01:b5:03:05:67:30:e7:
75:06:50:95:45:34:d3:32:60:58:0e:df:6a:c1:cc:
d9:52:fc:d3:db:b4:48:0a:7c:b9:01:4d:4c:d1:72:
f0:3f:69:02:48:77:fb:93:06:a5:c8:c7:cb:f1:a8:
45:43:30:0c:12:bd:fd:fc:05:86:09:b0:7f:06:a2:
66:0f:d8:25:e0:ac:61:2d:5d:2d:72:be:4f:24:0a:
1b:7d:26:c5:b8:de:2b:56:36:96:19:be:8d:58:fb:
5a:43:cb:0e:6d:d3:4b:4a:e8:4f:9c:0e:a3:7d:22:
13:1a:6b:c3:d9:d9:e7:c7:59:4e:1f:e1:44:0c:b9:
49:dc:20:0e:38:a0:3b:64:aa:64:00:a8:be:62:a6:
1e:96:e1:65:92:6e:d2:d1:db:3c:4e:37:40:75:b9:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:78:35:87:24:DD:F4:AB:5F:3E:01:0E:BB:04:EA:F4:B8:08:6D
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.183.125.0/24
40.223.13.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7d:d7:06:6e:fd:96:22:f2:8c:0f:30:b0:b6:c5:0d:04:98:
da:59:12:fc:c4:09:db:61:ef:78:b1:c9:73:f9:77:da:f9:27:
2f:68:bc:4a:bc:4b:65:b0:db:df:4b:52:0c:56:5a:1f:8c:e9:
ad:4b:84:33:42:51:89:87:ed:79:d2:1e:73:30:36:45:95:2e:
ce:67:26:f2:f8:b2:96:84:b7:c4:88:b2:1f:7d:76:fb:b1:ac:
26:f3:23:da:3d:c7:4f:db:59:50:51:6e:0f:63:31:f8:eb:0c:
d6:61:1c:8c:d5:71:f1:36:db:4f:eb:82:c3:2b:c0:2b:1d:ab:
0b:76:22:6f:7e:68:cd:e3:93:92:88:c4:da:8d:e7:ed:77:7a:
b6:7b:a2:c7:92:b2:81:df:77:0a:20:6a:9e:5f:9a:79:27:a1:
6a:2e:34:02:bc:84:99:bc:45:7f:12:78:d1:6c:81:51:23:10:
36:74:12:1e:51:e1:e9:92:1a:46:df:59:20:36:10:c7:16:92:
41:f0:ea:ae:97:b5:f0:0e:c7:8d:86:fc:3a:38:96:58:3e:c7:
b0:44:a2:30:15:bb:6a:03:69:d2:70:d3:2a:f0:b6:e6:f8:34:
6d:85:5a:55:70:9d:39:b5:bc:16:71:4f:9b:76:71:58:53:88:
da:3a:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:01:45 2026 by rpki-client