This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401722.roa
File: AS401722.roa (raw, json)
Hash identifier: DTVbj0sMeqbyTE8RjrGeHtvif2zbX3GUPVzh+coaP7s=
Subject key identifier: 94:1F:A8:E5:8E:18:1B:48:DB:12:14:EF:55:55:B2:3F:55:8A:8C:57
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 2133CD459F33AB1F77333786DE19DB3C9690B7E5
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401722.roa
Signing time: Fri 07 Nov 2025 13:50:10 +0000
ROA not before: Fri 07 Nov 2025 13:45:10 +0000
ROA not after: Fri 06 Nov 2026 13:50:10 +0000
asID: 401722
IP address blocks: 40.27.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Dec 2025 01:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:33:cd:45:9f:33:ab:1f:77:33:37:86:de:19:db:3c:96:90:b7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Nov 7 13:45:10 2025 GMT
Not After : Nov 6 13:50:10 2026 GMT
Subject: CN=941FA8E58E181B48DB1214EF5555B23F558A8C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:41:60:6a:58:13:82:47:22:2f:fb:e3:43:
97:f5:6e:0d:67:d8:60:3b:d5:b9:95:45:52:c4:2f:
5e:c3:ac:ba:cc:05:e0:51:a7:ee:e3:28:3d:f2:37:
94:a3:18:d0:6b:4d:d3:05:4a:ae:7c:6e:fa:78:d5:
69:07:5c:b7:7a:19:98:43:57:de:d1:13:06:24:f2:
c6:85:52:82:25:92:a0:d2:57:a5:24:51:84:75:af:
4d:92:27:f7:7b:42:31:54:84:f4:f4:f9:4e:7f:81:
53:19:7e:51:18:65:71:80:ba:03:d9:30:1a:f4:4d:
14:cc:20:90:3d:50:e8:50:57:44:90:ab:5f:af:26:
42:1d:bb:a7:79:df:2a:ba:9e:40:2c:10:55:29:fd:
ad:63:d4:ee:83:43:f7:7e:79:58:5a:9f:52:8b:c8:
57:02:83:73:60:b2:b5:4d:d2:6a:56:16:33:55:f8:
ee:28:aa:d2:5f:ad:c1:08:16:82:57:ad:29:98:12:
5f:dd:09:eb:23:4e:ce:ce:47:4c:34:d2:e9:c9:fc:
25:b0:de:06:56:24:5c:f6:cc:dc:da:5c:c9:4d:64:
4f:c4:34:52:d3:70:15:cf:ac:64:ea:a0:8e:2d:80:
0a:f4:1b:b4:11:57:08:11:05:45:aa:a6:60:b7:6a:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:A8:E5:8E:18:1B:48:DB:12:14:EF:55:55:B2:3F:55:8A:8C:57
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS401722.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.20.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:22:53:80:6a:1f:0f:8f:10:fd:b4:83:46:5c:af:97:96:9c:
ca:00:87:ed:00:e5:ab:1f:e0:87:50:71:d7:85:fe:29:da:a1:
b9:88:f4:21:0c:1d:ca:29:80:bc:f7:97:81:9c:31:76:d9:cf:
42:7e:0f:91:3e:b1:86:6a:1b:36:13:26:1a:1c:da:d5:f1:dd:
eb:56:9a:82:0a:fa:36:7e:97:bf:aa:ca:8a:d0:28:a1:53:c5:
43:62:d2:09:47:74:db:50:07:fb:7a:51:06:f1:3a:b7:a2:97:
64:c8:40:17:e6:c2:40:c3:a8:81:11:91:0b:c3:94:60:9a:26:
b4:19:4b:6e:d6:8a:f5:3c:b4:a9:64:23:62:04:c0:b2:42:63:
99:09:c8:bb:c2:d4:43:6e:b1:0b:ae:a1:8b:1d:57:77:93:47:
14:2b:5d:d8:ce:be:5b:7c:4e:d6:5f:52:f3:a9:9b:d2:b2:9d:
39:4c:b4:9b:18:58:88:39:34:2c:6c:78:bd:30:96:4c:56:fc:
78:3c:cc:81:24:62:63:8e:84:e0:f8:12:a2:4c:ab:6f:a2:5f:
b6:94:cf:4e:76:74:1a:a5:12:e5:46:d2:31:50:57:ea:67:19:
f1:e3:fa:40:e5:7e:fa:33:ba:14:38:67:17:22:67:70:34:64:
c7:75:78:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 14:07:40 2025 by rpki-client