This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63473.roa
File: AS63473.roa (raw, json)
Hash identifier: b1ZrBbv/LyGPzm/hdWTw5m2NbRgHM7XCUMYWU0vAa04=
Subject key identifier: 7E:83:13:D7:BF:BB:E8:A0:84:23:8C:6B:03:EA:2B:EB:66:3F:5C:39
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 116E2ADF804DD67BCEAB5704CDED7D9F47EB1890
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63473.roa
Signing time: Sun 07 Dec 2025 17:56:31 +0000
ROA not before: Sun 07 Dec 2025 17:51:31 +0000
ROA not after: Sun 06 Dec 2026 17:56:31 +0000
asID: 63473
IP address blocks: 104.234.167.0/24 maxlen: 24
104.234.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 06:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:6e:2a:df:80:4d:d6:7b:ce:ab:57:04:cd:ed:7d:9f:47:eb:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 7 17:51:31 2025 GMT
Not After : Dec 6 17:56:31 2026 GMT
Subject: CN=7E8313D7BFBBE8A084238C6B03EA2BEB663F5C39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:80:1a:96:da:64:53:ba:53:cd:68:aa:a3:
dd:4c:d7:58:c6:e4:9e:f4:11:aa:29:a8:e8:b2:e7:
b8:2b:a2:1d:98:14:5c:d3:24:2f:46:33:83:76:2b:
6a:57:19:e5:5d:e4:5c:18:5a:53:c7:bf:8b:54:b1:
71:39:64:1e:0b:67:e4:53:01:dc:42:59:53:c3:6f:
bf:27:5b:42:03:74:c2:19:9e:d4:b4:a3:f6:2f:ce:
de:e1:2d:32:85:bc:fa:40:ef:37:d7:59:68:f7:2a:
28:93:90:88:61:bb:31:fa:03:cf:fe:40:06:6c:01:
ec:d6:1e:9b:a5:d3:e1:bf:2d:da:15:4d:7f:d4:9f:
21:29:e3:c9:e9:02:62:00:fc:38:26:51:d6:4e:dd:
fd:1d:b1:19:0f:88:4e:ea:c0:52:8d:31:f1:db:e9:
e3:72:37:f5:c7:cc:17:b8:bc:71:d5:32:83:1b:a8:
0c:eb:4d:6d:21:54:fc:d9:57:63:89:ca:ef:86:6a:
fa:ed:ef:47:ca:4b:a5:e2:6c:b4:94:21:e6:ea:eb:
c8:8e:73:4a:bb:95:2f:6d:97:c4:dc:60:ae:40:63:
ac:ac:c6:ee:63:da:08:ee:73:4f:3b:ef:2b:f0:25:
df:56:ec:71:05:d6:c3:cb:1c:4d:3f:36:00:9e:95:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:83:13:D7:BF:BB:E8:A0:84:23:8C:6B:03:EA:2B:EB:66:3F:5C:39
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.167.0/24
104.234.209.0/24
Signature Algorithm: sha256WithRSAEncryption
92:93:ad:32:5c:d5:ae:4d:68:f2:8f:d2:60:b9:cf:cc:d2:50:
4f:07:2d:b5:f4:9f:7d:47:f6:59:5c:46:62:90:c8:f9:33:74:
d8:af:81:67:bb:e2:a9:84:d9:6d:de:b2:43:75:98:3b:cb:6b:
c7:db:07:6f:fc:03:fb:1c:4f:50:fa:78:46:98:a4:56:f6:0d:
dc:8c:4f:61:e4:c0:f0:71:f3:77:d9:2c:c2:1b:44:18:da:5c:
89:c7:4a:c4:e6:66:e5:e8:e3:b4:d4:e9:0b:7b:dd:5d:8d:e7:
c1:a6:2a:f6:d0:c6:05:56:2e:38:ac:f5:48:ea:79:23:52:d6:
71:12:0a:97:20:8d:a6:99:fa:83:85:71:20:91:0e:73:bd:59:
f3:b6:c2:db:7b:8d:f8:f7:f1:93:20:1d:f3:4f:13:e0:8a:7c:
d8:50:66:a9:df:2a:62:89:eb:52:09:b0:f9:67:d7:a2:94:b2:
1b:d2:14:3f:a2:1d:30:4d:b4:d9:7a:45:ff:5e:77:de:52:72:
8d:da:58:c0:54:24:82:ae:fa:e7:77:65:9b:d2:22:19:c9:e3:
e3:2a:62:ef:c2:c2:4d:7f:bb:c1:20:a9:22:a5:cf:91:fd:d7:
fb:22:93:08:e7:f5:ae:e4:51:e5:51:fd:47:5f:c1:b6:a4:eb:
78:db:ae:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 22:20:40 2026 by rpki-client