This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398355.roa File: AS398355.roa (raw, json) Hash identifier: 1660wALd4qsB5ERd+grq48fpZ2NgWyi28aTIyP15yWY= Subject key identifier: 82:27:55:D0:49:49:E4:3B:4C:6E:AF:CE:FE:01:AE:EA:DD:02:B6:DA Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6EB7AD9F8FB763E6CE8E61594626BDD92B580AAB Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398355.roa Signing time: Sun 07 Dec 2025 00:30:49 +0000 ROA not before: Sun 07 Dec 2025 00:25:49 +0000 ROA not after: Sun 06 Dec 2026 00:30:49 +0000 asID: 398355 IP address blocks: 104.234.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b7:ad:9f:8f:b7:63:e6:ce:8e:61:59:46:26:bd:d9:2b:58:0a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 7 00:25:49 2025 GMT Not After : Dec 6 00:30:49 2026 GMT Subject: CN=822755D04949E43B4C6EAFCEFE01AEEADD02B6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:79:33:c9:ba:6c:2a:ae:48:47:0c:a3:0c: a6:61:8e:b7:ad:72:e2:eb:6e:c7:b4:69:5f:a1:13: fa:aa:cb:2a:5b:73:f1:bb:f6:b0:e7:52:35:77:ab: 6e:c5:26:0b:26:54:f2:41:a4:90:48:a2:71:48:40: e2:4d:09:2c:06:48:9d:30:bb:70:8a:f4:e1:93:9c: b7:3c:32:55:c7:08:b6:5b:87:fa:88:10:b5:d5:54: 5e:bf:86:a4:5f:4e:5e:63:e6:53:37:f4:a9:58:1a: f5:93:23:62:b8:1c:0d:c7:2e:29:f4:fd:6f:5c:9b: c3:66:6d:96:e7:cd:80:11:48:4c:62:e5:85:40:1f: c0:66:ff:54:2e:f6:54:df:8d:e5:b0:00:77:6e:60: 0f:42:0a:58:75:25:1e:15:d6:1a:5a:74:32:b4:ba: 74:45:bd:a0:25:5e:fa:14:59:e6:54:a1:b7:1d:32: 4f:e8:b5:80:38:dc:e3:37:36:c3:96:b1:8b:1d:39: 55:f7:e3:4a:2b:86:a6:3b:8d:0b:28:43:f7:a9:9f: ad:76:23:6d:93:40:0f:a9:2c:90:0c:09:00:b7:ee: 90:9d:fb:b7:7c:77:0e:2d:21:87:b3:ab:d7:c3:c4: fe:3e:ab:cb:23:50:9c:a3:c8:1c:0e:02:70:5b:12: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:27:55:D0:49:49:E4:3B:4C:6E:AF:CE:FE:01:AE:EA:DD:02:B6:DA X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398355.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.208.0/24 Signature Algorithm: sha256WithRSAEncryption a3:cc:ba:72:47:4c:c8:cc:5e:38:bf:de:1a:04:75:3a:01:84: f3:b0:b0:c7:1d:3b:f7:ab:0e:e0:64:e7:c2:9f:72:3c:0b:9f: 6e:10:18:6a:1e:93:b1:2e:aa:c0:1a:21:22:16:24:96:47:94: 8c:61:a1:cd:0f:ab:7c:7c:fb:42:db:07:8b:84:5e:c8:24:98: e8:cc:38:d3:00:25:bd:cd:af:91:5f:b8:b2:f4:e4:b9:dd:ce: 39:1d:b6:f3:9d:57:ff:73:0d:44:a2:7b:71:4c:85:30:07:e7: 12:90:c6:dd:4f:b5:a0:48:b3:3e:11:aa:d2:f0:d0:59:19:b5: de:f7:f5:8f:37:f1:93:ce:8c:f7:86:84:a5:02:5b:36:20:31: d0:6d:90:3e:ef:50:64:8f:90:8e:d9:78:be:b6:6d:a1:6a:23: 1e:f9:1f:d9:a7:47:70:a4:53:4e:ce:37:62:41:80:cf:d8:c7: d7:65:ac:ee:ee:4a:93:56:ce:d5:e8:04:df:1e:53:09:0a:f9: d0:bf:e9:bb:1a:b7:d7:d3:1f:f4:5e:b3:6d:73:f1:07:ee:47: 33:df:9c:19:ab:19:1c:66:fe:ce:75:de:17:0c:1b:0e:70:f0: 79:0c:0f:70:c8:b8:9a:fe:39:60:dc:58:09:e5:35:bc:d9:a7: 34:ad:c4:fd -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUbretn4+3Y+bOjmFZRia92StYCqswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjA3MDAyNTQ5WhcNMjYxMjA2MDAzMDQ5 WjAzMTEwLwYDVQQDEyg4MjI3NTVEMDQ5NDlFNDNCNEM2RUFGQ0VGRTAxQUVFQURE MDJCNkRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3t5M8m6bCqu SEcMowymYY63rXLi627HtGlfoRP6qssqW3Pxu/aw51I1d6tuxSYLJlTyQaSQSKJx SEDiTQksBkidMLtwivThk5y3PDJVxwi2W4f6iBC11VRev4akX05eY+ZTN/SpWBr1 kyNiuBwNxy4p9P1vXJvDZm2W582AEUhMYuWFQB/AZv9ULvZU343lsAB3bmAPQgpY dSUeFdYaWnQytLp0Rb2gJV76FFnmVKG3HTJP6LWAONzjNzbDlrGLHTlV9+NKK4am O40LKEP3qZ+tdiNtk0APqSyQDAkAt+6Qnfu3fHcOLSGHs6vXw8T+PqvLI1Cco8gc DgJwWxIwYwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIInVdBJSeQ7TG6vzv4Brurd ArbaMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5ODM1NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq0DANBgkqhkiG9w0BAQsFAAOC AQEAo8y6ckdMyMxeOL/eGgR1OgGE87Cwxx0796sO4GTnwp9yPAufbhAYah6TsS6q wBohIhYklkeUjGGhzQ+rfHz7QtsHi4ReyCSY6Mw40wAlvc2vkV+4svTkud3OOR22 851X/3MNRKJ7cUyFMAfnEpDG3U+1oEizPhGq0vDQWRm13vf1jzfxk86M94aEpQJb NiAx0G2QPu9QZI+Qjtl4vrZtoWojHvkf2adHcKRTTs43YkGAz9jH12Ws7u5Kk1bO 1egE3x5TCQr50L/puxq319Mf9F6zbXPxB+5HM9+cGasZHGb+znXeFwwbDnDweQwP cMi4mv45YNxYCeU1vNmnNK3E/Q== -----END CERTIFICATE-----Generated at Mon Dec 8 02:03:10 2025 by rpki-client