This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: 78/61acEX51eI5lTrXtnBVQXoh2pK7me0igs9UmcW0k= Subject key identifier: D4:FF:34:7E:31:06:1F:AF:71:5A:48:E6:35:BE:CF:EC:23:8E:3E:DB Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 386C584C11F14809E7BA153B58B65B28713BE48A Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa Signing time: Mon 17 Nov 2025 07:27:21 +0000 ROA not before: Mon 17 Nov 2025 07:22:21 +0000 ROA not after: Mon 16 Nov 2026 07:27:21 +0000 asID: 20473 IP address blocks: 40.223.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Nov 2025 06:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6c:58:4c:11:f1:48:09:e7:ba:15:3b:58:b6:5b:28:71:3b:e4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Nov 17 07:22:21 2025 GMT Not After : Nov 16 07:27:21 2026 GMT Subject: CN=D4FF347E31061FAF715A48E635BECFEC238E3EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:7b:1c:f8:9a:40:43:3c:90:25:6f:47:9a: bc:c4:5f:f6:07:e0:db:2e:70:cc:1f:91:c2:bc:55: 89:06:f3:de:b4:92:22:f9:0b:4d:1f:95:93:7b:25: b8:20:d5:28:48:d8:58:1e:c9:66:3c:3f:d8:da:f2: aa:6c:64:93:15:0e:39:a9:76:11:ae:68:c2:14:93: 42:21:ad:5a:26:6c:da:e9:f3:6c:e2:c3:c3:e9:5a: 99:fb:f5:36:82:51:bf:57:a4:d2:00:51:05:70:1f: c4:e6:7b:5d:a5:bc:a8:eb:6d:f2:b4:f5:79:9e:8c: d1:56:04:e0:ac:88:b8:27:49:77:2d:2d:e4:f8:81: 2b:28:41:d4:6c:94:cb:b4:37:87:e7:b7:79:aa:a6: 0d:aa:28:83:9e:2e:98:ed:cd:ca:4f:e4:7c:f8:ec: 0b:e5:ac:9c:95:f8:cb:19:ff:d4:14:19:4b:d1:57: f1:39:68:3e:91:f8:73:d4:ba:f6:8b:38:20:f5:f1: 4f:62:d3:ae:f7:a2:1d:b4:fc:0c:da:9f:71:32:d2: 6b:4c:cc:77:53:d9:b1:7b:b8:e3:87:21:37:79:a7: 63:16:49:d0:40:64:46:26:a5:b4:ee:18:07:a2:dc: 88:b1:2a:29:d5:07:f0:c5:58:d2:ed:69:85:aa:f9: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FF:34:7E:31:06:1F:AF:71:5A:48:E6:35:BE:CF:EC:23:8E:3E:DB X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.13.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:ec:7b:b8:89:b4:bd:df:6e:05:78:26:e8:63:1e:44:4b:dc: 39:1c:3c:38:f4:ef:93:9d:ec:98:68:c2:e3:67:5f:3d:79:13: 1b:30:02:03:f0:ed:7f:66:11:45:13:84:1e:17:14:f4:5a:3a: 8c:2c:27:99:28:1e:0b:9a:2e:b3:dc:1f:40:1e:95:9a:ee:fa: 10:c1:cb:3c:00:4c:45:31:5f:84:d5:94:d7:80:d3:df:9d:27: d2:b0:cf:59:0a:72:69:ac:bf:f6:8c:6a:e1:28:9e:07:34:70: c9:15:e2:6b:c4:42:89:f1:f9:6d:38:ac:84:fd:d5:d3:0d:57: 7c:b2:e5:e8:b4:c1:1c:17:f0:6d:7d:0a:10:74:93:ec:a4:98: 2a:ae:1a:38:0d:a3:07:1f:e1:03:e1:57:af:dd:d6:69:ca:fe: ca:67:0f:fd:7f:07:7e:c9:63:7b:c4:52:04:fd:a8:b8:ce:97: 44:7f:35:84:59:5d:a0:58:42:de:ab:d6:de:44:79:03:0b:93: 44:9d:5b:02:38:bd:9d:da:ad:04:5d:e7:62:32:13:1d:be:5d: 98:61:d8:3f:27:25:d3:00:1e:0a:25:b0:7d:ed:eb:e6:e0:a5: 33:17:97:e1:13:97:62:84:73:41:31:87:a1:f9:21:4c:a5:7b: 8a:16:63:38 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUOGxYTBHxSAnnuhU7WLZbKHE75IowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMTE3MDcyMjIxWhcNMjYxMTE2MDcyNzIx WjAzMTEwLwYDVQQDEyhENEZGMzQ3RTMxMDYxRkFGNzE1QTQ4RTYzNUJFQ0ZFQzIz OEUzRURCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu157HPiaQEM8 kCVvR5q8xF/2B+DbLnDMH5HCvFWJBvPetJIi+QtNH5WTeyW4INUoSNhYHslmPD/Y 2vKqbGSTFQ45qXYRrmjCFJNCIa1aJmza6fNs4sPD6VqZ+/U2glG/V6TSAFEFcB/E 5ntdpbyo623ytPV5nozRVgTgrIi4J0l3LS3k+IErKEHUbJTLtDeH57d5qqYNqiiD ni6Y7c3KT+R8+OwL5ayclfjLGf/UFBlL0VfxOWg+kfhz1Lr2izgg9fFPYtOu96Id tPwM2p9xMtJrTMx3U9mxe7jjhyE3eadjFknQQGRGJqW07hgHotyIsSop1QfwxVjS 7WmFqvmknwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFNT/NH4xBh+vcVpI5jW+z+wj jj7bMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKN8NMA0GCSqGSIb3DQEBCwUAA4IB AQB87Hu4ibS9324FeCboYx5ES9w5HDw49O+TneyYaMLjZ189eRMbMAID8O1/ZhFF E4QeFxT0WjqMLCeZKB4Lmi6z3B9AHpWa7voQwcs8AExFMV+E1ZTXgNPfnSfSsM9Z CnJprL/2jGrhKJ4HNHDJFeJrxEKJ8fltOKyE/dXTDVd8suXotMEcF/BtfQoQdJPs pJgqrho4DaMHH+ED4Vev3dZpyv7KZw/9fwd+yWN7xFIE/ai4zpdEfzWEWV2gWELe q9beRHkDC5NEnVsCOL2d2q0EXediMhMdvl2YYdg/JyXTAB4KJbB97evm4KUzF5fh E5dihHNBMYeh+SFMpXuKFmM4 -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:25 2025 by rpki-client