This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa
File: AS133398.roa (raw, json)
Hash identifier: 9IoRVbjTsXxg1gAPvTS6thxH5alCep4SlNOSLOt90N0=
Subject key identifier: CC:70:52:E2:B4:58:2B:53:7B:D9:F3:23:79:BD:B7:59:86:26:4F:73
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 625017C51EE62C218D208EB70EFDE6A911E84A40
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa
Signing time: Thu 04 Dec 2025 12:30:49 +0000
ROA not before: Thu 04 Dec 2025 12:25:49 +0000
ROA not after: Thu 03 Dec 2026 12:30:49 +0000
asID: 133398
IP address blocks: 104.234.58.0/24 maxlen: 24
104.234.198.0/24 maxlen: 24
104.234.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 19:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:50:17:c5:1e:e6:2c:21:8d:20:8e:b7:0e:fd:e6:a9:11:e8:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 4 12:25:49 2025 GMT
Not After : Dec 3 12:30:49 2026 GMT
Subject: CN=CC7052E2B4582B537BD9F32379BDB75986264F73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:be:9e:25:58:df:a6:fb:51:20:2b:ce:05:
40:f4:6d:38:2b:3a:03:a6:aa:da:62:96:d9:ff:29:
55:3e:a5:8b:c2:57:05:c5:a0:d1:49:83:3f:f0:66:
32:fc:9a:ef:be:a1:e4:1a:d0:3a:29:5d:e6:0c:8c:
11:91:f9:62:25:9c:15:2f:4e:a5:47:24:47:59:91:
cb:2c:7e:a2:32:9f:3f:ee:11:15:d3:02:4a:9a:69:
ef:65:78:a5:5d:79:06:60:47:bd:3c:fc:2f:9e:e8:
c0:9b:2d:9e:61:d4:ef:e2:3e:ee:9c:f1:15:02:d0:
e9:f2:59:a7:6d:f2:2e:cd:eb:5e:c9:4a:f9:c0:6a:
9a:a9:36:48:e8:f7:96:2e:b1:2d:48:e2:d5:21:70:
ab:ea:3d:74:39:70:50:76:20:e3:19:28:dc:a6:2d:
4f:ed:c0:06:b7:47:b1:cd:71:84:e6:5f:25:2a:ad:
42:fe:3c:81:80:52:56:e7:37:5f:74:c5:99:09:57:
74:75:ca:ee:4e:11:fe:62:ab:f0:95:c8:b3:e1:1e:
b9:dd:ed:58:c9:f2:cd:59:50:ae:1d:15:48:67:11:
26:75:fa:0b:28:35:67:63:20:f6:e7:ca:c3:d5:57:
86:4e:c7:60:8c:7c:d4:34:13:0a:71:d8:c3:30:ea:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:70:52:E2:B4:58:2B:53:7B:D9:F3:23:79:BD:B7:59:86:26:4F:73
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.58.0/24
104.234.198.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:5c:1e:46:38:b9:ae:77:bd:0d:5a:92:5f:aa:e0:2a:45:a7:
95:ff:d1:01:ba:4a:66:2d:15:69:03:8e:db:95:36:e2:94:11:
04:36:55:07:7d:77:bd:04:b4:71:2a:0b:62:05:d6:06:c6:20:
a4:c5:6a:b6:f0:3d:15:af:ab:8a:e3:53:59:68:96:09:35:f9:
82:fe:cd:a0:31:5a:a1:d4:ac:fa:5d:1a:98:56:7c:94:bc:2a:
a1:22:82:2d:e2:5c:e1:dc:d5:23:dc:ab:f8:01:c8:91:3e:75:
15:f4:cf:4b:27:43:2d:14:c7:5b:a3:0b:f1:f7:f6:b0:18:6e:
63:2b:df:e1:58:11:e2:f7:90:e4:3e:ff:0d:45:d0:64:4b:ce:
78:0c:db:be:5a:c4:49:03:b2:cc:0a:2c:eb:df:5b:40:77:9d:
bb:18:67:87:a2:f0:b2:a8:45:e9:1a:a6:ce:7d:71:40:01:44:
b2:ce:53:14:f7:e2:60:93:cd:8e:b2:4d:3c:0d:80:a9:16:0f:
3b:40:09:54:ae:07:56:35:a7:5c:0d:35:f4:eb:6f:67:c0:db:
e8:2e:13:3a:a2:69:61:99:b3:d1:83:3b:da:1a:10:53:38:71:
1d:14:fe:70:3b:3f:94:27:be:8e:bf:c3:53:ae:f8:53:19:d5:
3f:07:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:35:29 2025 by rpki-client