This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
File: AS400810.roa (raw, json)
Hash identifier: on+m4vJyyMdlcZ/d4rDxtwyv5PXV0MG8dXIPsbxLxlk=
Subject key identifier: E4:A5:DE:F3:B6:FA:CC:DA:FA:BE:72:3C:9B:B5:35:46:C0:10:66:24
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 0BA83EE39513F60BCC9E30E4DE2F832B6B1D0D26
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
Signing time: Mon 17 Nov 2025 02:14:13 +0000
ROA not before: Mon 17 Nov 2025 02:09:13 +0000
ROA not after: Mon 16 Nov 2026 02:14:13 +0000
asID: 400810
IP address blocks: 98.142.246.0/24 maxlen: 24
104.234.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 00:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a8:3e:e3:95:13:f6:0b:cc:9e:30:e4:de:2f:83:2b:6b:1d:0d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 17 02:09:13 2025 GMT
Not After : Nov 16 02:14:13 2026 GMT
Subject: CN=E4A5DEF3B6FACCDAFABE723C9BB53546C0106624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:31:f3:1e:27:49:ce:3b:1c:c9:67:e4:a9:
7d:21:5d:63:d2:f8:e5:e0:72:04:ad:a9:47:f3:3f:
b4:67:b1:86:a7:09:da:43:b9:a8:0c:4b:13:77:c7:
85:63:c5:50:7e:71:3c:dc:12:8f:07:da:c3:c0:a5:
e8:4b:d3:bd:ef:e7:15:3e:83:72:81:3c:ef:d7:29:
df:f1:14:bc:fc:47:57:61:0e:af:5a:26:dd:c2:3b:
b7:50:da:6f:5e:50:a5:43:c7:29:9c:25:61:87:42:
e1:e2:f4:98:d5:cd:d7:fb:22:1b:ce:a7:21:0f:36:
2e:64:ae:ce:e4:1b:da:85:cb:ef:93:a1:d9:19:13:
81:72:79:1a:d4:3c:45:55:8c:0f:6d:01:34:7d:b1:
33:fe:d7:be:95:b5:b3:cd:06:98:93:f2:c3:7e:8c:
ab:47:c7:ea:f8:17:1e:25:17:ce:38:94:de:aa:a9:
02:7c:33:14:6b:5d:6e:15:14:b2:39:85:9c:a4:47:
5f:ad:31:55:16:f5:88:d6:22:f8:82:76:06:1f:19:
c6:1b:fd:c9:07:f3:00:c6:7c:18:bf:1f:94:b4:d4:
0c:b1:55:e4:1f:4f:f3:2a:86:05:90:a0:fa:e7:56:
06:9a:d2:79:e3:ef:75:eb:0f:a4:48:64:5f:ea:fd:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A5:DE:F3:B6:FA:CC:DA:FA:BE:72:3C:9B:B5:35:46:C0:10:66:24
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.246.0/24
104.234.191.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e9:36:b5:d9:33:56:1d:4a:e2:9d:b1:05:a1:ae:1a:2e:ac:
69:e6:98:45:e6:e9:f9:ff:a4:2d:de:44:3c:c9:26:96:6f:92:
65:c1:74:0c:e7:cd:6d:b7:fb:56:e9:12:32:07:30:fd:34:0f:
e8:39:71:63:1e:1f:f0:53:95:fe:9b:b4:92:b9:e4:0a:c3:6f:
1d:94:a8:aa:80:8b:26:54:7a:5a:a2:bf:63:b4:4f:45:f5:39:
b9:b5:ca:51:68:16:93:d4:61:01:88:f3:91:2b:49:ac:08:82:
20:17:65:b6:ce:d1:74:cb:80:18:79:39:62:a4:1a:17:6a:61:
50:66:e4:d9:ed:e9:3f:e6:d1:b6:15:6c:b3:8f:62:7d:22:9e:
76:7e:b7:03:02:3a:49:d4:97:7a:05:4c:27:c2:98:85:8e:aa:
6c:a3:01:5f:49:8d:17:b0:fa:4e:ac:bb:bf:94:8e:32:f6:da:
39:36:73:8f:b7:7b:a2:50:15:8d:91:dd:99:53:3f:45:dd:98:
af:ad:73:e7:32:c1:89:b3:12:cf:e8:a1:ab:36:b9:af:30:a4:
04:3b:9f:d9:91:34:45:47:3a:e9:fa:68:04:07:8e:e8:8f:8a:
31:80:23:42:a5:c8:2f:20:6c:13:de:0d:66:fd:c0:14:5e:cc:
93:fa:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:50:08 2025 by rpki-client