This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
File: AS393278.roa (raw, json)
Hash identifier: cbvk9TPQvHMnlOTzGnwqbdNZVSC1dzBCPDlMxlqZnTY=
Subject key identifier: E1:E0:52:FF:09:32:32:99:9E:D9:1B:48:8B:7D:3B:97:C9:7A:85:47
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 484FEE45A83A1E5090BCA1E39B038E6C29E34658
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
Signing time: Wed 17 Dec 2025 21:30:49 +0000
ROA not before: Wed 17 Dec 2025 21:25:49 +0000
ROA not after: Wed 16 Dec 2026 21:30:49 +0000
asID: 393278
IP address blocks: 104.234.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 04:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4f:ee:45:a8:3a:1e:50:90:bc:a1:e3:9b:03:8e:6c:29:e3:46:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 17 21:25:49 2025 GMT
Not After : Dec 16 21:30:49 2026 GMT
Subject: CN=E1E052FF093232999ED91B488B7D3B97C97A8547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:7f:99:8a:fe:9e:e9:f3:4f:56:d1:50:a5:
8f:3d:46:e6:48:d9:e3:37:46:d6:4f:d4:d8:4a:ee:
96:77:1f:1a:20:5f:1b:7f:96:8b:bd:5f:1e:af:fe:
4c:54:f6:66:e2:6d:58:9b:32:07:c7:0f:8d:66:f5:
e4:13:c3:a3:e1:fb:72:60:8f:f0:d8:07:7c:d4:cc:
60:45:ba:6e:d7:8a:3e:25:93:90:9a:ff:ee:8f:aa:
b2:99:21:b3:d7:95:c2:b4:84:ed:19:fa:aa:93:fe:
86:28:a6:52:d3:36:de:c3:a6:65:97:be:f0:82:af:
4d:c4:87:0b:aa:7e:d0:1a:e9:ed:77:b9:20:9a:b1:
d9:90:94:e3:90:d5:93:d6:e0:76:11:b7:7e:af:cf:
e9:82:fa:62:5e:a5:7f:38:87:09:ed:cf:59:f2:7b:
e6:fe:02:fd:42:c3:3c:9a:1b:89:cd:25:57:5c:fc:
e7:5d:7c:5f:48:58:3e:e9:48:d5:c4:cc:38:1d:4b:
e4:a1:27:af:37:b2:cc:ca:98:e3:47:5b:e0:a4:e9:
db:41:bd:b8:f8:31:fa:40:04:41:01:8e:80:e5:3f:
39:f9:ac:ae:6c:00:a7:9c:cb:da:1f:28:7a:38:25:
1c:f3:97:91:ee:0e:27:42:dd:d7:81:c2:83:15:e8:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E0:52:FF:09:32:32:99:9E:D9:1B:48:8B:7D:3B:97:C9:7A:85:47
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS393278.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:83:99:89:5b:43:48:9b:5d:b9:9d:ff:fe:a4:22:af:5e:4f:
1d:43:0d:24:15:e3:67:dc:04:ad:40:a0:f6:d0:5a:f8:62:67:
4a:ec:45:1b:36:6f:02:12:4e:0f:b7:20:43:65:31:7c:2e:57:
81:e7:d3:bd:62:d9:2e:1d:8a:4a:20:f5:40:90:86:39:3e:6d:
5e:5c:a3:93:90:d1:08:84:92:9d:ca:4b:ab:21:e3:36:7a:b7:
80:f5:eb:6f:77:be:eb:02:fa:67:d3:d4:d7:ea:ed:4c:de:0e:
b6:e9:5a:2e:de:ff:2b:19:74:af:7c:7c:5c:48:50:5d:08:74:
83:ff:3c:ef:91:04:d2:49:3d:b5:df:80:f8:ca:82:bd:ad:b5:
d9:26:00:6e:58:9b:a9:cb:ad:59:94:de:b3:0d:62:24:d9:9c:
06:bc:e1:f8:27:d7:c1:39:1e:15:09:e9:3c:fd:ff:74:a8:08:
f3:31:ce:fa:21:20:6a:61:f5:98:75:ef:d5:19:7d:97:2c:29:
7f:f8:1c:b8:4c:a9:ee:2b:92:fe:ea:82:05:87:cb:b8:12:b2:
b6:4f:f3:e3:f1:b9:d3:7e:0d:33:a8:6c:30:62:d3:fd:f8:31:
1d:c6:9a:11:80:2e:64:56:01:9a:3d:79:cc:be:d0:c2:43:f9:
9b:33:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:54:00 2025 by rpki-client