This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS400069.roa
File: AS400069.roa (raw, json)
Hash identifier: 41w8pR+m3Ma8HKY1kKvYqzph+cl4grrI/UCUljjpoac=
Subject key identifier: 39:C5:3D:2C:AD:3D:BB:A2:DB:DF:0F:23:5A:EF:89:2C:61:FB:25:09
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 3E0EAF9F01206C469AF25A4F3A07E0384DE259C8
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS400069.roa
Signing time: Tue 02 Dec 2025 06:03:19 +0000
ROA not before: Tue 02 Dec 2025 05:58:19 +0000
ROA not after: Tue 01 Dec 2026 06:03:19 +0000
asID: 400069
IP address blocks: 50.109.132.0/24 maxlen: 24
50.109.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 12:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:0e:af:9f:01:20:6c:46:9a:f2:5a:4f:3a:07:e0:38:4d:e2:59:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Dec 2 05:58:19 2025 GMT
Not After : Dec 1 06:03:19 2026 GMT
Subject: CN=39C53D2CAD3DBBA2DBDF0F235AEF892C61FB2509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:31:4d:7d:c7:99:36:ec:39:44:03:d6:48:
87:e5:54:e0:b0:c7:91:86:60:22:2c:dd:9e:8f:b9:
39:40:e0:c1:c3:48:30:cd:b0:fe:1b:61:e4:5b:b7:
fb:4e:90:76:6b:ac:8d:95:b5:76:f4:d9:f3:a4:76:
30:3f:7e:a3:7a:35:09:b6:8f:54:29:9c:1c:7a:0c:
9d:fd:ef:72:6b:2f:c2:ef:55:8e:a3:42:64:17:48:
7f:64:c3:58:34:da:12:52:e9:97:3c:37:65:33:b8:
3a:02:0d:6b:5f:7d:31:5b:0d:79:45:0d:aa:a6:8b:
7a:a2:5d:94:62:ac:c2:b0:e0:19:f1:9f:70:a5:a4:
0d:95:e1:e3:70:fa:a0:62:c1:dd:e3:d0:ca:21:87:
dc:35:fc:99:d6:90:90:e8:5d:c9:64:f4:88:94:8c:
51:b9:8c:f9:1d:f0:a3:2c:22:6c:71:f9:33:dd:34:
40:bb:f9:0a:2a:ff:9d:bf:67:8e:bd:bb:5f:03:a8:
8d:7d:10:fb:a0:36:44:89:e6:46:6a:24:f1:da:36:
67:c5:00:55:f4:35:c6:67:d1:31:2a:e5:39:b7:91:
6b:4e:c9:fc:f3:51:0e:73:23:8b:32:af:91:5d:6b:
5b:cb:bc:d0:2b:e9:96:f4:92:ba:e1:07:6f:a0:57:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:3D:2C:AD:3D:BB:A2:DB:DF:0F:23:5A:EF:89:2C:61:FB:25:09
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS400069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.109.132.0/24
50.109.163.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c3:fd:d2:16:35:ae:a3:60:e6:6a:5a:44:65:e8:5a:fd:38:
20:d0:4c:24:b6:20:79:7a:aa:c2:d6:32:4a:41:16:d3:fd:53:
53:ae:70:c7:bb:3e:0f:b6:51:7d:93:ee:45:f0:55:db:61:db:
8c:35:22:34:0b:83:05:f3:ed:f1:ff:31:18:87:7f:b5:8d:2c:
a0:08:c3:2e:59:19:9b:14:23:c3:13:d3:04:ac:8d:23:7f:44:
e9:e6:b0:5f:ff:6c:da:7d:41:04:10:b0:e1:24:dd:21:95:19:
29:d5:93:d2:df:7e:ca:30:96:e7:24:b0:eb:b2:4a:3f:23:4e:
03:b9:ed:85:ff:bc:9b:08:85:fa:62:0c:96:0f:61:4d:1f:17:
f8:ae:1a:c5:14:77:56:ea:f0:f3:45:53:14:95:2f:df:0d:8f:
c9:96:1b:72:d4:bc:23:8a:e0:dc:6d:fa:2f:2b:79:98:a0:00:
30:f9:32:bf:67:0d:e1:10:51:b1:3a:6c:c3:06:2d:a0:01:4f:
62:df:fd:ad:f7:16:b8:09:66:6c:1b:bc:37:7d:dc:51:26:2f:
dc:07:a5:5d:76:56:07:28:78:8c:75:2c:e4:92:1e:8f:f4:79:
91:c2:a8:83:bb:bc:42:5e:ce:c6:94:8b:98:24:0e:51:af:31:
b3:01:47:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:48:36 2025 by rpki-client