This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: JDSM1Os/4N6o2TZwCV4Qh/DfhMkU0uFun4vKFq1kbuY= Subject key identifier: 13:FB:18:4B:70:B2:33:5F:2E:4B:29:48:CB:AD:EB:A7:29:73:61:A9 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 4BD3FF510EDB86926076A2EEB361F3D03CD6C116 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS984.roa Signing time: Fri 19 Dec 2025 09:30:49 +0000 ROA not before: Fri 19 Dec 2025 09:25:49 +0000 ROA not after: Fri 18 Dec 2026 09:30:49 +0000 asID: 984 IP address blocks: 104.234.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 10:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d3:ff:51:0e:db:86:92:60:76:a2:ee:b3:61:f3:d0:3c:d6:c1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 19 09:25:49 2025 GMT Not After : Dec 18 09:30:49 2026 GMT Subject: CN=13FB184B70B2335F2E4B2948CBADEBA7297361A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:18:70:dc:a2:0b:af:dd:d9:f1:8e:f4:56: 1c:fc:eb:e2:b9:46:d8:af:53:37:db:51:4d:9c:ae: dd:03:42:d5:16:ae:ee:6e:59:d5:b1:c7:01:7c:ab: 51:e1:de:e9:a5:87:1c:84:d2:13:da:bc:15:74:05: ba:0d:ed:74:21:f3:c8:80:a2:ab:41:ea:52:8a:d8: 5e:a8:3c:bd:32:82:67:c8:26:93:39:e2:5b:d2:0e: 6c:92:db:18:83:0e:0a:b5:28:04:86:37:db:c9:02: df:07:58:90:a7:82:38:38:46:20:a4:11:36:9d:04: 53:11:b3:88:14:10:75:ba:c1:c2:fd:ad:69:69:b0: fa:ab:50:b2:8e:f4:59:58:6a:bd:f7:67:f9:7d:76: c1:d3:31:13:a5:6a:4d:62:86:73:22:78:57:75:a1: e8:70:30:4e:c7:71:b4:63:06:06:1f:67:cc:1a:e9: f9:1f:f5:6b:4b:6c:4c:b8:6e:ce:aa:75:f9:56:20: 96:8e:2b:f6:00:9d:dc:4d:18:17:eb:c4:e4:f8:3e: be:b9:e2:a3:cc:fd:37:0e:d1:cf:3b:db:37:ba:51: be:c8:c9:5a:31:0e:51:9a:e9:44:40:20:76:39:13: d9:46:57:c6:20:da:5f:83:00:1f:a8:1e:49:c1:66: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FB:18:4B:70:B2:33:5F:2E:4B:29:48:CB:AD:EB:A7:29:73:61:A9 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.64.0/24 Signature Algorithm: sha256WithRSAEncryption 87:f5:80:8e:ad:a0:6a:68:a9:0e:6f:7c:86:23:f9:85:2e:71: a4:54:ea:fc:ea:aa:d8:92:d1:93:7b:ea:f2:b8:05:e8:93:3e: 6f:67:f9:de:db:07:05:2f:fa:db:21:0e:6a:2a:bb:83:bb:40: 35:d1:c2:3f:4f:5b:37:f6:2e:86:25:b6:b4:3b:98:f6:e5:78: ef:4b:30:e2:02:5c:b5:5b:20:8c:41:8e:46:31:64:99:3c:cf: 4f:a4:05:88:7f:93:65:38:a6:88:e7:7c:e9:83:f0:1d:aa:62: cc:66:b9:e9:fc:02:3d:ff:00:11:ec:2c:d8:8e:95:c6:95:ed: 6c:c6:4b:5d:13:20:15:fc:21:13:1d:5e:b2:1f:4a:80:8e:e6: 25:e4:f8:a1:37:06:d0:81:2f:80:b1:47:b3:ef:9b:30:0f:60: c6:94:b7:a2:68:8d:42:b3:ea:9d:33:9b:26:65:86:1e:3e:1a: c2:19:35:94:8d:f6:d3:33:69:02:1e:f5:a6:75:82:5d:ce:c0: 5a:bf:54:b3:68:26:2b:35:d8:05:53:59:6d:ec:cf:df:68:98: 16:33:37:ed:a7:b1:3a:8b:01:c0:21:76:d8:07:7c:e9:48:42: a4:c6:58:9d:2d:ab:15:0b:79:64:d6:a0:6d:5e:91:d6:e5:21: a7:75:d5:5c -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUS9P/UQ7bhpJgdqLus2Hz0DzWwRYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjE5MDkyNTQ5WhcNMjYxMjE4MDkzMDQ5 WjAzMTEwLwYDVQQDEygxM0ZCMTg0QjcwQjIzMzVGMkU0QjI5NDhDQkFERUJBNzI5 NzM2MUE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSMYcNyiC6/d 2fGO9FYc/OviuUbYr1M321FNnK7dA0LVFq7ublnVsccBfKtR4d7ppYcchNIT2rwV dAW6De10IfPIgKKrQepSitheqDy9MoJnyCaTOeJb0g5sktsYgw4KtSgEhjfbyQLf B1iQp4I4OEYgpBE2nQRTEbOIFBB1usHC/a1pabD6q1CyjvRZWGq992f5fXbB0zET pWpNYoZzInhXdaHocDBOx3G0YwYGH2fMGun5H/VrS2xMuG7OqnX5ViCWjiv2AJ3c TRgX68Tk+D6+ueKjzP03DtHPO9s3ulG+yMlaMQ5RmulEQCB2ORPZRlfGINpfgwAf qB5JwWbCcwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFBP7GEtwsjNfLkspSMut66cp c2GpMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzk4NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqQDANBgkqhkiG9w0BAQsFAAOCAQEA h/WAjq2gamipDm98hiP5hS5xpFTq/Oqq2JLRk3vq8rgF6JM+b2f53tsHBS/62yEO aiq7g7tANdHCP09bN/YuhiW2tDuY9uV470sw4gJctVsgjEGORjFkmTzPT6QFiH+T ZTimiOd86YPwHapizGa56fwCPf8AEews2I6VxpXtbMZLXRMgFfwhEx1esh9KgI7m JeT4oTcG0IEvgLFHs++bMA9gxpS3omiNQrPqnTObJmWGHj4awhk1lI320zNpAh71 pnWCXc7AWr9Us2gmKzXYBVNZbezP32iYFjM37aexOosBwCF22Ad86UhCpMZYnS2r FQt5ZNagbV6R1uUhp3XVXA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:38:02 2025 by rpki-client