This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401104.roa File: AS401104.roa (raw, json) Hash identifier: GlofU/FDpeo9JLytBqLJhRiuOOC4dhPKsjg72VNDccc= Subject key identifier: 9A:43:BC:F4:99:27:28:1D:E5:3E:10:6E:20:5E:A6:48:1D:42:F3:5D Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0D3B284061983D7C0F081025BF070EC67BCDCDD3 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401104.roa Signing time: Sun 07 Dec 2025 00:30:49 +0000 ROA not before: Sun 07 Dec 2025 00:25:49 +0000 ROA not after: Sun 06 Dec 2026 00:30:49 +0000 asID: 401104 IP address blocks: 104.234.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Dec 2025 13:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3b:28:40:61:98:3d:7c:0f:08:10:25:bf:07:0e:c6:7b:cd:cd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 7 00:25:49 2025 GMT Not After : Dec 6 00:30:49 2026 GMT Subject: CN=9A43BCF49927281DE53E106E205EA6481D42F35D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c6:3a:5f:15:55:48:5a:e0:93:c7:3b:b0:5a: 74:ba:d4:aa:85:8a:a4:f0:a0:14:8e:7e:51:b3:dd: a1:f0:8e:64:d8:3b:21:b3:2d:19:87:96:6c:dc:9c: 5a:76:7b:d6:eb:8b:fa:5e:ec:9d:d9:b2:fc:ba:ed: b6:3b:e4:a2:31:4f:cf:eb:1d:e4:d8:c0:32:8f:be: b6:62:de:0c:e0:a3:97:dd:51:22:e1:a2:e9:88:64: c1:d9:48:e3:b5:64:38:3e:d0:45:7d:16:65:ac:7f: d4:39:78:2e:2b:5b:33:a3:af:fc:b7:e5:69:36:ff: e8:00:1d:ca:0d:b2:5e:7f:05:d1:ed:1f:9c:f1:39: c1:f7:51:32:4b:15:8f:71:e2:2e:dc:c1:5b:c9:90: 35:ed:2e:12:f5:51:e8:22:b5:8e:71:ff:52:38:ed: 90:85:15:4b:35:a2:10:75:fb:b6:70:f5:e3:c8:12: b4:1d:3e:22:e9:21:09:af:04:50:68:56:83:82:07: 4e:12:63:0f:8f:5c:f4:da:ef:39:1b:89:8b:fe:8f: 26:bd:54:c7:31:ee:35:71:3b:39:14:67:dd:55:de: e3:69:fe:f3:87:9b:1d:55:44:c9:70:bd:c7:2a:03: b5:5a:1c:60:bb:2a:89:d3:ac:ac:99:aa:21:a5:b7: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:43:BC:F4:99:27:28:1D:E5:3E:10:6E:20:5E:A6:48:1D:42:F3:5D X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401104.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.208.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:e2:b5:de:de:82:e9:5f:5e:ee:b8:b5:1f:a1:54:39:b7:79: ed:08:b2:bf:4f:ac:50:39:bb:e0:a8:31:82:2d:50:45:b1:87: b3:1d:4d:10:f0:11:e0:65:b8:b7:eb:15:76:74:25:fb:6e:f7: 0b:0e:51:e6:03:3a:e8:9c:50:f5:d9:ef:e9:1c:4b:54:bf:ce: 10:76:98:89:30:12:0a:77:37:3c:6f:e0:40:b6:26:38:0e:3b: ed:6b:de:4f:15:ad:15:ab:9f:3f:c9:e9:5a:e2:a7:99:70:9a: ea:97:3d:d0:dc:52:0d:c4:90:55:aa:f7:7d:89:d2:15:9a:96: 0b:d1:90:7d:00:c2:64:51:ce:fd:bb:fd:7f:d4:31:9a:5d:56: 95:44:54:27:5d:95:47:23:86:b3:75:ec:81:49:a1:0b:16:83: d6:4b:ab:08:75:d0:f0:52:d9:7c:db:6d:59:f2:87:37:16:2a: ac:93:d8:d9:6b:22:93:8d:d6:91:36:72:0d:48:d6:78:df:7c: 9b:6d:01:0c:ca:b5:f4:23:1d:3a:c3:7a:2a:34:af:4b:c7:f4: 9a:52:ee:91:1b:cd:0a:ec:26:08:50:1b:e2:c8:44:c4:fb:c6: cb:ce:d5:8d:23:a3:1f:f3:f0:fc:dd:98:3e:33:22:f7:ab:7e: 11:f0:75:e6 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUDTsoQGGYPXwPCBAlvwcOxnvNzdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjA3MDAyNTQ5WhcNMjYxMjA2MDAzMDQ5 WjAzMTEwLwYDVQQDEyg5QTQzQkNGNDk5MjcyODFERTUzRTEwNkUyMDVFQTY0ODFE NDJGMzVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsY6XxVVSFrg k8c7sFp0utSqhYqk8KAUjn5Rs92h8I5k2Dshsy0Zh5Zs3JxadnvW64v6Xuyd2bL8 uu22O+SiMU/P6x3k2MAyj762Yt4M4KOX3VEi4aLpiGTB2UjjtWQ4PtBFfRZlrH/U OXguK1szo6/8t+VpNv/oAB3KDbJefwXR7R+c8TnB91EySxWPceIu3MFbyZA17S4S 9VHoIrWOcf9SOO2QhRVLNaIQdfu2cPXjyBK0HT4i6SEJrwRQaFaDggdOEmMPj1z0 2u85G4mL/o8mvVTHMe41cTs5FGfdVd7jaf7zh5sdVUTJcL3HKgO1WhxguyqJ06ys maohpbek4QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJpDvPSZJygd5T4QbiBepkgd QvNdMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMTEwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq0DANBgkqhkiG9w0BAQsFAAOC AQEAf+K13t6C6V9e7ri1H6FUObd57Qiyv0+sUDm74Kgxgi1QRbGHsx1NEPAR4GW4 t+sVdnQl+273Cw5R5gM66JxQ9dnv6RxLVL/OEHaYiTASCnc3PG/gQLYmOA477Wve TxWtFaufP8npWuKnmXCa6pc90NxSDcSQVar3fYnSFZqWC9GQfQDCZFHO/bv9f9Qx ml1WlURUJ12VRyOGs3XsgUmhCxaD1kurCHXQ8FLZfNttWfKHNxYqrJPY2Wsik43W kTZyDUjWeN98m20BDMq19CMdOsN6KjSvS8f0mlLukRvNCuwmCFAb4shExPvGy87V jSOjH/Pw/N2YPjMi96t+EfB15g== -----END CERTIFICATE-----Generated at Fri Dec 12 23:11:17 2025 by rpki-client