This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa
File: AS399519.roa (raw, json)
Hash identifier: Vr4jYiCCBijHFI5bZ1duOtffV0ut+tUbF6To754d5YE=
Subject key identifier: 24:C9:A0:03:5E:F7:2E:88:FD:03:62:CD:59:5F:13:E3:48:11:DA:6C
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 390757A2DFD63A1EEA0D9E3495A136E28D8D778E
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa
Signing time: Fri 12 Dec 2025 13:30:49 +0000
ROA not before: Fri 12 Dec 2025 13:25:49 +0000
ROA not after: Fri 11 Dec 2026 13:30:49 +0000
asID: 399519
IP address blocks: 140.99.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Dec 2025 15:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:07:57:a2:df:d6:3a:1e:ea:0d:9e:34:95:a1:36:e2:8d:8d:77:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Dec 12 13:25:49 2025 GMT
Not After : Dec 11 13:30:49 2026 GMT
Subject: CN=24C9A0035EF72E88FD0362CD595F13E34811DA6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:a2:ec:bd:f1:6b:c0:3a:38:c3:44:98:75:
27:f9:6a:77:49:5a:36:22:23:c5:f4:a7:f2:da:50:
52:76:29:2d:69:57:00:66:85:42:6c:6e:e2:2b:8e:
2b:50:f4:2b:fc:f2:f4:55:6a:b0:1f:79:e9:c0:61:
e5:da:78:25:c9:3c:a1:7c:e3:fe:5c:45:ef:57:8d:
20:f5:61:1f:ff:8f:6d:78:0a:3a:c0:da:0e:e1:5b:
e7:8b:17:32:66:61:92:82:a2:f2:80:0d:0e:53:24:
e3:1f:fa:10:04:aa:e1:4b:9e:98:da:c9:be:70:78:
8e:8a:2f:c2:c9:b5:34:58:15:77:85:cc:81:f0:8b:
19:13:a1:aa:83:d9:2a:fd:19:9b:21:b6:51:9a:ea:
6e:b3:60:01:40:71:f5:0b:a1:54:a0:f0:02:3a:dc:
d0:fe:87:4f:17:a6:63:a1:97:9c:d2:b4:b9:fd:a7:
a0:1a:d1:45:48:e2:f8:fb:00:b6:c4:22:52:51:88:
99:55:00:50:e5:5a:9e:93:f6:14:2c:38:97:95:15:
bd:ec:36:60:49:52:1c:6b:4e:44:2e:e3:9e:58:69:
40:bf:d1:20:5c:9f:8e:a6:f6:92:9b:0d:24:b3:3f:
7f:4f:06:ac:9d:87:fe:c5:0f:2a:4a:ce:1d:36:f6:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:A0:03:5E:F7:2E:88:FD:03:62:CD:59:5F:13:E3:48:11:DA:6C
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.8.0/22
Signature Algorithm: sha256WithRSAEncryption
45:c3:ab:d6:e7:7a:b9:ff:5a:56:f3:0f:db:06:d2:0c:62:0a:
be:11:0a:ac:a2:b2:96:ca:25:e3:55:63:53:42:fa:66:29:04:
6c:40:fb:85:09:55:de:ab:5f:7a:84:14:bf:e4:ba:53:a7:40:
a6:52:d9:22:08:e3:65:fd:d8:1e:8a:5c:b6:a2:31:4b:6a:7a:
39:74:31:55:0d:56:3a:17:15:f8:3d:29:ad:b5:61:a9:fd:9a:
e2:f8:d7:7f:e5:14:c8:91:d9:1e:1e:74:37:9e:29:4c:8a:6f:
ee:5f:e2:1b:70:9e:b4:8b:31:14:79:38:1d:5c:63:b1:a6:32:
72:c0:90:96:86:52:72:6c:d2:76:66:9d:24:a3:d5:eb:0f:2f:
9c:34:c0:1a:92:a2:02:ba:af:66:2e:50:33:25:c2:41:cd:15:
8c:dd:bf:27:90:ac:d5:57:1b:1c:b9:17:f3:41:00:ed:a4:81:
c1:e1:0d:4a:e4:75:9c:89:d1:f4:85:e7:a8:83:2f:4e:b6:34:
4e:43:04:05:1f:3e:ea:ef:31:27:02:08:29:ca:c4:67:dc:80:
d7:43:93:0d:11:6c:af:fd:e4:7a:5d:d1:10:f3:80:66:80:7c:
de:cb:bb:39:63:e1:a2:4a:29:33:a4:db:58:cb:e9:99:80:f6:
c0:d8:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 22:26:14 2025 by rpki-client