This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS21840.roa
File: AS21840.roa (raw, json)
Hash identifier: EHzMZ34IYbKXdeBVRAq4OSnLTgHg5odyFf1a9gafdOU=
Subject key identifier: 91:8D:AF:5C:02:A6:83:E6:14:14:84:33:72:CC:DC:BB:7A:AC:84:DA
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 014630E060B238ACA0AFAF74A0F2B9FA3E564BC4
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS21840.roa
Signing time: Fri 17 Oct 2025 19:30:38 +0000
ROA not before: Fri 17 Oct 2025 19:25:38 +0000
ROA not after: Fri 16 Oct 2026 19:30:38 +0000
asID: 21840
IP address blocks: 50.31.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Oct 2025 10:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:46:30:e0:60:b2:38:ac:a0:af:af:74:a0:f2:b9:fa:3e:56:4b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Oct 17 19:25:38 2025 GMT
Not After : Oct 16 19:30:38 2026 GMT
Subject: CN=918DAF5C02A683E61414843372CCDCBB7AAC84DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:ba:d2:f4:17:4e:f9:70:90:10:bb:f3:2e:
7d:37:92:b4:40:37:ca:b7:05:9f:8e:a5:70:1a:94:
74:6e:c9:d9:d6:a3:9c:64:4d:88:96:d7:25:1b:48:
f3:30:b8:6b:47:12:97:81:32:f9:4b:21:35:67:bb:
17:68:11:91:9a:59:d2:54:79:6f:9a:d2:d9:dd:33:
7e:5d:40:31:24:da:a3:25:a2:84:38:1f:1b:6e:4b:
1f:ad:64:06:7f:82:7e:83:9c:34:e5:8f:9a:6f:c5:
d9:bc:4b:66:1c:cc:a0:2e:37:97:82:99:2f:ed:18:
f9:67:cb:a9:e4:b4:80:4c:cc:eb:4d:48:33:6f:f0:
d0:89:49:4f:bb:ee:5f:1c:70:ff:ee:05:de:5b:f0:
0a:ca:a0:7f:d9:27:0a:84:62:88:a7:00:9a:eb:60:
f0:8b:5c:f8:08:91:41:cf:66:72:e6:cd:39:86:bb:
62:2d:55:8b:e4:8b:a1:a7:e3:b2:79:fe:f9:a6:e3:
fc:7e:20:2c:c8:16:b5:f8:75:54:7c:fa:88:82:fd:
cb:84:ef:44:6e:17:d7:78:8c:fc:a2:7d:4f:65:5c:
92:e8:9a:40:29:59:05:ca:8f:e2:b3:5a:a3:94:f3:
44:0c:e5:2e:83:20:38:c8:de:68:f8:f8:e2:86:28:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8D:AF:5C:02:A6:83:E6:14:14:84:33:72:CC:DC:BB:7A:AC:84:DA
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS21840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.31.187.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b5:da:9c:c9:0e:bf:2c:cf:ff:43:fb:d5:14:52:dd:96:59:
cc:41:55:29:a0:76:7e:90:b2:41:e6:e8:03:d5:6e:bf:ea:50:
e0:1d:8c:db:c8:2e:2a:7d:bb:d9:30:8d:c4:ac:87:de:2f:fa:
1d:96:e9:94:c3:dc:e0:ea:d4:b1:82:d2:71:85:59:9f:84:ad:
fa:49:b4:3b:84:99:8b:23:46:cb:6e:58:10:60:9b:0e:2d:a1:
68:64:a4:00:d2:ed:8a:a7:d3:0c:03:b6:e3:96:f7:3f:da:53:
0f:81:f5:b6:1c:57:90:54:7b:c0:bd:f0:93:ee:13:b6:fc:0e:
2c:19:37:0e:6a:32:11:c4:1a:98:80:4a:96:6d:84:17:3f:b3:
87:18:9b:eb:b0:92:f1:d0:ce:61:9d:4b:e9:39:e8:d6:18:b2:
1f:01:7d:de:e3:1f:a5:12:00:b3:80:43:86:4b:98:7f:e9:f8:
fe:98:05:ca:03:a3:3d:1a:e2:e1:f0:15:ee:05:54:bc:cb:03:
75:a9:6a:b0:67:f3:e0:9a:8b:4d:12:9f:d0:95:3c:a3:6f:95:
67:09:c8:5a:db:0a:04:e1:d3:d9:cb:ff:30:92:d9:1e:6f:cf:
ad:93:92:20:30:03:9f:77:b8:cc:2e:8c:8d:d4:6e:af:88:90:
ea:3a:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 10:50:34 2025 by rpki-client