This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS141968.roa File: AS141968.roa (raw, json) Hash identifier: BltOUmgh6fRsh4cAXe9s/MReqVHRTJ+Uh9O6Kzvx8tg= Subject key identifier: 46:16:97:A4:4D:90:D9:C8:CD:30:C1:90:6D:23:B9:F7:DE:FB:F7:6F Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 4E062D768C2892F88FC3202BB9E0EB1533B25EE1 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS141968.roa Signing time: Mon 15 Dec 2025 10:30:49 +0000 ROA not before: Mon 15 Dec 2025 10:25:49 +0000 ROA not after: Mon 14 Dec 2026 10:30:49 +0000 asID: 141968 IP address blocks: 98.142.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 06:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:06:2d:76:8c:28:92:f8:8f:c3:20:2b:b9:e0:eb:15:33:b2:5e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 15 10:25:49 2025 GMT Not After : Dec 14 10:30:49 2026 GMT Subject: CN=461697A44D90D9C8CD30C1906D23B9F7DEFBF76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:db:8d:af:5d:68:3e:29:64:41:89:19:50: 5d:ad:e7:4c:3c:9f:52:bb:07:42:38:75:b7:3c:bc: 53:1b:16:d2:36:cf:e2:07:df:ba:06:1f:56:18:60: 8c:c5:b2:c9:ca:71:1c:25:46:a0:8e:af:80:dd:5c: f5:37:db:e1:59:3a:3d:73:91:9b:3d:95:22:09:65: 56:89:9b:70:80:44:3d:53:8c:9c:e9:2c:2c:76:3f: fa:0a:e5:f8:d6:58:59:98:61:10:88:1b:f6:6f:4f: 21:c5:70:77:34:3d:43:0b:88:c3:51:fc:42:e0:49: 44:bf:02:6a:ca:a6:a2:dd:13:da:3c:e9:57:26:2b: 2c:ec:99:8a:f4:b3:86:dc:5b:be:0e:49:cc:f5:a6: eb:76:5b:90:15:cd:c3:e7:15:c5:6c:c3:1a:67:f1: 8b:73:d9:e6:d4:b3:2c:57:fd:e6:33:dc:ea:b2:55: fd:5d:d0:4e:ac:54:56:69:23:4d:56:da:1a:87:81: 08:25:88:a8:c0:2b:db:dd:94:a9:6e:d7:4e:b5:92: af:a7:78:03:41:2c:c2:f7:fb:76:f9:7c:01:5e:b6: 07:21:c6:a1:f0:63:f9:11:75:b7:ae:f5:7a:2c:a5: 1e:23:81:00:aa:62:c2:d8:c2:00:f7:06:81:15:92: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:16:97:A4:4D:90:D9:C8:CD:30:C1:90:6D:23:B9:F7:DE:FB:F7:6F X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS141968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.245.0/24 Signature Algorithm: sha256WithRSAEncryption 32:8f:a7:48:ba:3c:5e:de:c2:5e:d8:13:ac:75:56:11:65:d3: 70:66:eb:47:db:36:0b:d4:20:90:83:57:fc:ad:a4:0f:c6:58: ea:6a:89:e3:88:b5:ac:e6:4f:01:9c:14:a4:76:cc:d5:5a:dd: 7c:1c:85:ff:aa:d9:9f:d0:9f:f2:7e:d6:3b:d5:91:ec:af:da: 4e:74:a9:ad:eb:5e:b2:32:f1:cb:2c:73:13:f1:33:de:a9:a0: 58:e2:24:7c:23:90:2b:21:fb:f2:23:3b:b1:48:c9:29:c6:19: e9:d5:6a:6a:18:23:69:e4:96:bc:4c:61:8f:2d:ac:99:3f:df: 3b:6c:a5:3e:8d:3c:25:f0:78:ad:bf:35:07:4c:15:51:6a:0a: eb:9e:30:1c:2d:a9:52:9d:e0:e9:02:2d:5f:0c:93:ba:5c:f3: 05:19:fe:6a:f5:1d:94:80:5d:48:7b:40:df:81:73:1f:65:27: 70:1f:65:58:19:cc:c9:d4:1a:ff:69:c3:ed:8e:84:1b:3a:9e: 31:12:77:46:8f:a2:0e:71:70:d5:13:2a:d7:d4:6c:51:f9:49: d3:75:7f:c9:e0:56:47:5d:5f:51:ef:a5:36:8c:52:fd:db:a1: 12:06:e6:89:d8:4b:87:01:13:d4:1c:4f:51:1e:92:a5:1a:a4: d5:f3:a7:ff -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUTgYtdowokviPwyArueDrFTOyXuEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjE1MTAyNTQ5WhcNMjYxMjE0MTAzMDQ5 WjAzMTEwLwYDVQQDEyg0NjE2OTdBNDREOTBEOUM4Q0QzMEMxOTA2RDIzQjlGN0RF RkJGNzZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYDbja9daD4p ZEGJGVBdredMPJ9SuwdCOHW3PLxTGxbSNs/iB9+6Bh9WGGCMxbLJynEcJUagjq+A 3Vz1N9vhWTo9c5GbPZUiCWVWiZtwgEQ9U4yc6Swsdj/6CuX41lhZmGEQiBv2b08h xXB3ND1DC4jDUfxC4ElEvwJqyqai3RPaPOlXJiss7JmK9LOG3Fu+DknM9abrdluQ Fc3D5xXFbMMaZ/GLc9nm1LMsV/3mM9zqslX9XdBOrFRWaSNNVtoah4EIJYiowCvb 3ZSpbtdOtZKvp3gDQSzC9/t2+XwBXrYHIcah8GP5EXW3rvV6LKUeI4EAqmLC2MIA 9waBFZIQEQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFEYWl6RNkNnIzTDBkG0juffe +/dvMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE0MTk2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGKO9TANBgkqhkiG9w0BAQsFAAOC AQEAMo+nSLo8Xt7CXtgTrHVWEWXTcGbrR9s2C9QgkINX/K2kD8ZY6mqJ44i1rOZP AZwUpHbM1VrdfByF/6rZn9Cf8n7WO9WR7K/aTnSpretesjLxyyxzE/Ez3qmgWOIk fCOQKyH78iM7sUjJKcYZ6dVqahgjaeSWvExhjy2smT/fO2ylPo08JfB4rb81B0wV UWoK654wHC2pUp3g6QItXwyTulzzBRn+avUdlIBdSHtA34FzH2UncB9lWBnMydQa /2nD7Y6EGzqeMRJ3Ro+iDnFw1RMq19RsUflJ03V/yeBWR11fUe+lNoxS/duhEgbm idhLhwET1BxPUR6SpRqk1fOn/w== -----END CERTIFICATE-----Generated at Thu Dec 18 11:16:20 2025 by rpki-client