This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399437.roa
File: AS399437.roa (raw, json)
Hash identifier: mEk/wqR5pCHZeO1R6EfPTfUDZn7/ozyKwfuoHtTQQXQ=
Subject key identifier: 90:64:7B:DD:CD:AC:D1:02:4A:24:D1:FC:DB:88:1B:78:EF:BD:CA:5D
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 1B086AAC4364BAA40B97B9D9B9FB320CC4C79F5A
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399437.roa
Signing time: Wed 19 Nov 2025 06:03:17 +0000
ROA not before: Wed 19 Nov 2025 05:58:17 +0000
ROA not after: Wed 18 Nov 2026 06:03:17 +0000
asID: 399437
IP address blocks: 50.32.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 19:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:08:6a:ac:43:64:ba:a4:0b:97:b9:d9:b9:fb:32:0c:c4:c7:9f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Nov 19 05:58:17 2025 GMT
Not After : Nov 18 06:03:17 2026 GMT
Subject: CN=90647BDDCDACD1024A24D1FCDB881B78EFBDCA5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:a6:d0:10:16:28:a1:26:a0:e8:cc:5e:13:
15:e8:9f:24:f5:9b:99:3b:f8:24:05:39:9e:7f:81:
5e:e6:15:0f:3e:12:4f:a5:ba:cc:67:fc:6c:dc:48:
ca:eb:98:76:05:23:7f:64:d8:8d:43:17:d5:4e:52:
ac:00:bc:8d:15:82:8e:64:32:3f:00:46:be:87:12:
ad:35:e3:7b:06:f7:85:37:0b:4e:01:ca:7e:d3:aa:
95:38:f3:23:2c:cb:d2:1d:6e:e0:fd:4f:6c:d7:bb:
a4:ae:21:5b:31:08:bc:1f:38:46:1e:33:d6:d7:22:
24:dd:3d:a4:0e:c6:4f:26:88:94:a4:b1:ed:9f:35:
7b:89:55:c2:ad:43:8c:55:30:bc:ec:f9:4b:89:29:
de:f4:40:0d:35:f1:12:c7:40:bf:db:dd:e0:0c:62:
a5:a4:c6:51:10:65:ac:8d:fe:a4:84:87:18:4b:cd:
8f:53:82:a5:71:70:81:5b:0a:a5:1b:98:c6:64:e3:
30:a4:96:09:3e:55:d4:a8:0b:e1:88:96:a7:1a:89:
41:10:d4:0f:50:30:3d:fa:59:f1:57:ae:e8:ef:61:
5d:22:d9:28:2c:ff:64:a2:94:cf:e7:95:59:d5:57:
7d:ba:9c:9f:f4:e5:18:af:f0:fe:f2:9e:fb:d8:74:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:7B:DD:CD:AC:D1:02:4A:24:D1:FC:DB:88:1B:78:EF:BD:CA:5D
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.32.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e9:da:06:36:9c:74:11:ee:bb:03:79:c8:06:03:40:93:20:
88:17:ae:42:11:eb:d3:a7:cd:03:9f:92:e2:30:5c:b3:80:fe:
3d:e8:3a:eb:08:21:3a:49:c3:15:f9:b0:7f:a9:dc:5f:e8:18:
76:9c:82:7a:8c:a5:e6:cb:19:93:59:75:59:10:18:20:83:04:
d8:eb:5d:af:a2:c1:f2:1e:43:55:a0:b4:08:af:c4:88:6f:10:
50:5c:cc:3e:a6:68:66:ef:44:47:2a:ff:1f:24:2f:50:eb:85:
a9:3e:bf:d4:ef:b2:ba:87:98:dd:d1:3b:ba:8a:de:c9:7f:ca:
fb:7c:3e:4b:9f:2b:20:1c:d6:6d:69:9f:85:69:4d:3d:cf:e4:
e1:21:8d:d3:b4:7a:f3:c1:dd:a0:e7:fa:be:95:2a:ce:7d:b4:
d6:ab:82:6e:31:96:fc:45:a6:cc:e2:64:ea:14:2d:58:ef:0a:
19:df:85:ff:df:f4:56:ce:15:75:57:e3:29:d4:21:a1:52:7e:
71:82:8c:3a:28:3c:50:08:54:da:86:df:7c:ea:04:af:77:fc:
a7:58:8e:ec:3f:81:4a:6d:8b:89:47:5f:94:9b:45:53:61:a3:
e3:2b:2a:e2:5a:ec:c7:94:ab:8d:9e:d9:7e:d0:69:8d:a8:5c:
ac:10:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:35:49 2025 by rpki-client