This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa
File: AS133398.roa (raw, json)
Hash identifier: iZmigzSeYGxVMg3aO2Y7pk4NeGjkkCOq8SaGUG1QeBU=
Subject key identifier: 3E:B3:58:31:5D:5D:90:09:58:5A:48:86:0C:F7:FC:A9:13:22:E9:7C
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2E4618CDA1EA363D543E4A4156CB3306B3E35B70
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa
Signing time: Thu 01 Jan 2026 00:11:50 +0000
ROA not before: Thu 01 Jan 2026 00:06:50 +0000
ROA not after: Thu 31 Dec 2026 00:11:50 +0000
asID: 133398
IP address blocks: 104.234.58.0/24 maxlen: 24
104.234.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 06:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:46:18:cd:a1:ea:36:3d:54:3e:4a:41:56:cb:33:06:b3:e3:5b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 1 00:06:50 2026 GMT
Not After : Dec 31 00:11:50 2026 GMT
Subject: CN=3EB358315D5D9009585A48860CF7FCA91322E97C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:8a:33:bc:90:de:4f:d2:b3:07:08:dc:89:
c2:29:6f:fb:5c:72:e1:f1:6f:40:b0:7a:57:cc:75:
1f:2d:9c:5b:53:86:fc:35:ae:9c:11:dc:da:72:ee:
ef:30:8b:5e:52:bd:56:41:b2:f2:cb:de:84:b9:3b:
a3:09:f6:0e:85:11:b0:dd:83:37:73:82:7b:f4:96:
c6:7e:5f:ff:85:b2:76:4e:f3:e4:89:6f:68:3f:8c:
88:38:8c:3b:1c:01:7c:0f:da:f0:7e:16:ce:79:9e:
4e:8b:95:55:e9:cb:19:73:14:ab:85:06:16:d2:34:
11:37:8d:db:43:f9:64:fd:88:06:ea:34:80:d7:57:
00:cb:4a:7e:fb:82:6c:9d:6d:6a:34:6c:5f:05:e2:
68:d6:76:87:fc:9c:72:53:71:a6:74:2c:75:7a:ae:
98:6e:ab:db:07:d5:e9:dc:19:ee:53:e8:31:fa:c3:
e7:45:0c:60:a7:7d:ef:ed:6d:4a:37:28:bc:50:24:
ba:a2:25:46:9f:9b:f5:07:e3:4a:15:0e:2b:52:ac:
d3:2e:a9:79:77:6d:ed:31:1e:12:a9:5d:43:de:a5:
3c:96:d9:0f:5b:08:05:dd:ea:1c:ed:57:88:fe:49:
98:e3:7b:63:8c:fc:f4:78:64:0e:fe:f9:5f:6a:02:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:58:31:5D:5D:90:09:58:5A:48:86:0C:F7:FC:A9:13:22:E9:7C
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.58.0/24
104.234.198.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:50:ae:dd:55:3c:4e:76:62:6f:7b:e6:98:c4:c2:91:d6:65:
94:ac:b8:0f:17:94:17:4e:40:ff:c5:4b:d7:7a:5f:56:5c:49:
44:f1:f8:f8:0b:6c:1b:93:ea:a0:76:b3:d5:ae:d2:ff:eb:fb:
e0:32:43:f7:53:ad:10:08:ee:cf:42:0d:ae:b0:6a:62:ea:ac:
2f:e5:66:bd:6c:dd:8c:69:b9:2a:62:e3:f2:a5:a0:7a:52:4e:
a3:1c:de:73:6a:fb:46:ff:f2:9f:4e:4d:85:b5:5a:37:45:b6:
a8:96:d5:a1:a3:5d:cf:6f:26:cc:3b:32:c4:35:67:9e:a6:36:
cf:d7:dc:6e:3e:2f:88:d4:04:62:26:c9:a4:aa:c0:84:d7:63:
e2:86:e3:38:26:c4:ce:b2:8e:2f:7b:9a:4a:a4:93:fd:1f:a0:
92:7e:07:7b:da:db:e8:60:39:7b:4e:75:57:33:4f:d0:4e:9d:
1d:38:f3:c9:5f:b9:f4:05:61:39:67:db:03:3e:1d:4f:f5:68:
37:f8:e4:1b:24:88:bf:1e:ae:d0:e2:03:88:ee:90:c7:47:c1:
40:e4:55:4a:ce:0c:14:29:5b:b5:96:f6:e6:84:7d:f4:0e:40:
4d:b8:64:eb:30:50:71:39:db:1d:4a:3f:03:7e:79:c8:a2:be:
f6:3a:14:04
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIULkYYzaHqNj1UPkpBVsszBrPjW3AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMTAxMDAwNjUwWhcNMjYxMjMxMDAxMTUw
WjAzMTEwLwYDVQQDEygzRUIzNTgzMTVENUQ5MDA5NTg1QTQ4ODYwQ0Y3RkNBOTEz
MjJFOTdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1+KM7yQ3k/S
swcI3InCKW/7XHLh8W9AsHpXzHUfLZxbU4b8Na6cEdzacu7vMIteUr1WQbLyy96E
uTujCfYOhRGw3YM3c4J79JbGfl//hbJ2TvPkiW9oP4yIOIw7HAF8D9rwfhbOeZ5O
i5VV6csZcxSrhQYW0jQRN43bQ/lk/YgG6jSA11cAy0p++4JsnW1qNGxfBeJo1naH
/JxyU3GmdCx1eq6YbqvbB9Xp3BnuU+gx+sPnRQxgp33v7W1KNyi8UCS6oiVGn5v1
B+NKFQ4rUqzTLql5d23tMR4SqV1D3qU8ltkPWwgF3eoc7VeI/kmY43tjjPz0eGQO
/vlfagL6xQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFD6zWDFdXZAJWFpIhgz3/KkT
Iul8MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzEzMzM5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqOgMEAGjqxjANBgkqhkiG9w0B
AQsFAAOCAQEAT1Cu3VU8TnZib3vmmMTCkdZllKy4DxeUF05A/8VL13pfVlxJRPH4
+AtsG5PqoHaz1a7S/+v74DJD91OtEAjuz0INrrBqYuqsL+VmvWzdjGm5KmLj8qWg
elJOoxzec2r7Rv/yn05NhbVaN0W2qJbVoaNdz28mzDsyxDVnnqY2z9fcbj4viNQE
YibJpKrAhNdj4objOCbEzrKOL3uaSqST/R+gkn4He9rb6GA5e051VzNP0E6dHTjz
yV+59AVhOWfbAz4dT/VoN/jkGySIvx6u0OIDiO6Qx0fBQORVSs4MFClbtZb25oR9
9A5ATbhk6zBQcTnbHUo/A355yKK+9joUBA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 22:20:39 2026 by rpki-client