This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20853.roa File: AS20853.roa (raw, json) Hash identifier: l7FbpDTyxGUKqzpWo9oy0OXn14EqkVa250Q8pzTjpNY= Subject key identifier: F4:95:8C:65:97:27:EF:60:0E:FA:3C:3C:1F:13:AA:E7:6D:FB:21:C1 Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 3B762295ED0426101E8255E4210676AC1AEA59D5 Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20853.roa Signing time: Sat 13 Dec 2025 14:30:49 +0000 ROA not before: Sat 13 Dec 2025 14:25:49 +0000 ROA not after: Sat 12 Dec 2026 14:30:49 +0000 asID: 20853 IP address blocks: 66.225.236.0/24 maxlen: 24 75.102.15.0/24 maxlen: 24 167.88.146.0/24 maxlen: 24 204.93.147.0/24 maxlen: 24 205.234.154.0/24 maxlen: 24 216.246.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Dec 2025 16:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:76:22:95:ed:04:26:10:1e:82:55:e4:21:06:76:ac:1a:ea:59:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Dec 13 14:25:49 2025 GMT Not After : Dec 12 14:30:49 2026 GMT Subject: CN=F4958C659727EF600EFA3C3C1F13AAE76DFB21C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:12:45:20:3b:ab:01:34:41:06:c7:08:b2: 4a:2b:9e:96:76:12:5f:48:76:27:20:52:e9:63:a4: 61:91:e1:18:ac:59:87:2f:38:38:d5:ef:2f:55:11: f8:81:c2:9c:85:f6:9e:45:1d:07:97:ef:de:bc:3c: a1:e3:5f:86:87:f2:36:b0:04:fb:2e:a1:6d:96:86: 3d:58:d3:b1:b7:5f:28:68:48:be:86:d7:a8:89:a8: 03:9a:00:e9:0b:8f:ce:24:e8:f0:24:f9:24:3d:72: 29:53:c4:e3:ce:4a:88:bf:ac:d8:f9:67:81:ec:df: ea:e9:41:d4:b7:ae:1f:70:0d:b4:53:8c:51:57:a1: 5f:38:fb:d0:3d:13:1b:61:d1:5d:a5:34:80:2e:68: c5:7a:c4:22:b3:6b:72:b2:08:eb:11:7c:62:96:71: 47:11:79:16:33:20:cf:06:6f:2a:50:d7:52:d4:1d: 4b:7d:14:72:ac:fa:2c:d3:47:55:c9:f8:58:15:4b: 09:72:92:84:39:94:78:a1:27:b3:d4:cf:5f:fe:af: 77:02:c3:b0:58:f5:28:10:93:7b:9f:a3:0a:5d:cb: b6:cb:db:51:d6:93:78:fb:66:8d:af:26:87:b0:a1: db:6b:75:d0:0d:11:77:be:c6:2c:01:93:7c:89:69: bd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:95:8C:65:97:27:EF:60:0E:FA:3C:3C:1F:13:AA:E7:6D:FB:21:C1 X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20853.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.225.236.0/24 75.102.15.0/24 167.88.146.0/24 204.93.147.0/24 205.234.154.0/24 216.246.106.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:27:1b:61:52:a1:46:fd:6e:30:31:4c:92:5d:a4:c6:a8:f0: 44:90:4c:d4:f5:dc:71:6b:b6:f5:a3:0d:00:9b:b7:6c:56:26: 30:ab:71:0f:e3:4b:e4:fa:fd:77:07:ca:52:de:21:9e:91:9c: 9f:5a:cc:49:27:5a:7a:fe:97:c8:c3:9f:ad:5f:1c:bf:20:7d: f1:0c:3c:e3:d3:40:4a:d4:8c:b3:45:98:86:4e:37:fd:0f:14: f3:8b:16:ca:11:9b:10:e1:3c:c4:f2:be:99:32:12:82:33:82: ca:51:8b:bb:d6:dc:23:8f:2f:b1:d4:0a:32:60:b8:35:21:6c: 50:21:5e:a8:2a:a2:97:6d:9b:44:f8:1a:3c:e3:36:d1:ad:48: a3:ef:f4:0f:7f:f0:8f:42:e5:17:c4:29:bc:82:10:6e:2b:65: ec:b8:c7:bd:17:85:32:38:5c:b6:2d:f1:80:60:af:0b:17:e7: 5b:7f:b0:bd:b7:a9:43:b3:73:bd:64:b8:60:ee:c5:fd:88:72: 41:8e:30:96:04:95:0d:e6:2b:d8:b4:68:7c:46:ae:4f:5d:2f: 3e:9b:60:72:a3:00:0c:c9:a7:f5:a8:40:f5:93:2f:44:f3:37: 5d:fd:4e:6d:9b:56:17:e4:be:fd:a9:91:e7:f7:41:7d:22:3b: 82:86:61:1c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUO3Yile0EJhAeglXkIQZ2rBrqWdUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUxMjEzMTQyNTQ5WhcNMjYxMjEyMTQzMDQ5 WjAzMTEwLwYDVQQDEyhGNDk1OEM2NTk3MjdFRjYwMEVGQTNDM0MxRjEzQUFFNzZE RkIyMUMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoASRSA7qwE0 QQbHCLJKK56WdhJfSHYnIFLpY6RhkeEYrFmHLzg41e8vVRH4gcKchfaeRR0Hl+/e vDyh41+Gh/I2sAT7LqFtloY9WNOxt18oaEi+hteoiagDmgDpC4/OJOjwJPkkPXIp U8TjzkqIv6zY+WeB7N/q6UHUt64fcA20U4xRV6FfOPvQPRMbYdFdpTSALmjFesQi s2tysgjrEXxilnFHEXkWMyDPBm8qUNdS1B1LfRRyrPos00dVyfhYFUsJcpKEOZR4 oSez1M9f/q93AsOwWPUoEJN7n6MKXcu2y9tR1pN4+2aNryaHsKHba3XQDRF3vsYs AZN8iWm9jQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFPSVjGWXJ+9gDvo8PB8Tqudt +yHBMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzIwODUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAQuHsAwQAS2YPAwQAp1iSAwQAzF2T AwQAzeqaAwQA2PZqMA0GCSqGSIb3DQEBCwUAA4IBAQB+JxthUqFG/W4wMUySXaTG qPBEkEzU9dxxa7b1ow0Am7dsViYwq3EP40vk+v13B8pS3iGekZyfWsxJJ1p6/pfI w5+tXxy/IH3xDDzj00BK1IyzRZiGTjf9DxTzixbKEZsQ4TzE8r6ZMhKCM4LKUYu7 1twjjy+x1AoyYLg1IWxQIV6oKqKXbZtE+Bo84zbRrUij7/QPf/CPQuUXxCm8ghBu K2XsuMe9F4UyOFy2LfGAYK8LF+dbf7C9t6lDs3O9ZLhg7sX9iHJBjjCWBJUN5ivY tGh8Rq5PXS8+m2ByowAMyaf1qED1ky9E8zdd/U5tm1YX5L79qZHn90F9IjuChmEc -----END CERTIFICATE-----Generated at Sun Dec 14 01:55:17 2025 by rpki-client