This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: OrrUORaizNM6AFKtNAlovrNhBVPUeU+sRXi+TPguaJ0= Subject key identifier: 9A:CC:FF:FD:40:C5:55:80:80:4E:D8:D8:2A:52:1F:24:C1:BD:8E:32 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7C2BCE2809F837D2AF6F2E6F090227220DF53725 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa Signing time: Tue 02 Dec 2025 14:11:37 +0000 ROA not before: Tue 02 Dec 2025 14:06:37 +0000 ROA not after: Tue 01 Dec 2026 14:11:37 +0000 asID: 20473 IP address blocks: 104.234.123.0/24 maxlen: 24 104.234.150.0/24 maxlen: 24 104.234.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 00:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2b:ce:28:09:f8:37:d2:af:6f:2e:6f:09:02:27:22:0d:f5:37:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 2 14:06:37 2025 GMT Not After : Dec 1 14:11:37 2026 GMT Subject: CN=9ACCFFFD40C55580804ED8D82A521F24C1BD8E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:25:bd:cb:3c:33:84:be:26:32:91:02:fc:5e: 81:a4:5f:2b:86:dd:8f:24:bc:bf:4b:d8:68:a6:7b: d9:0c:2a:07:19:23:46:c6:d6:b1:07:6f:ff:1a:25: 0a:76:eb:2a:a0:2a:86:d7:5c:c4:21:c6:8f:8a:64: 10:12:aa:85:28:34:51:20:e4:79:c4:a0:7d:89:2b: 86:77:1b:9f:ae:4d:65:f9:23:d4:7c:ac:a5:d2:6a: 8a:6e:52:7f:bd:aa:23:66:e6:8c:33:36:71:2b:82: e3:e3:18:27:e9:80:59:ce:45:12:2c:5e:5b:89:96: 57:41:78:8a:37:8d:9a:6f:6e:d1:22:05:7c:86:04: 85:59:e4:12:da:52:6c:fa:44:a1:79:00:c5:41:3f: 38:b4:2e:0f:0a:2b:aa:1f:cc:87:36:c0:54:21:cd: 46:a6:23:6b:55:10:2a:12:0c:d7:8d:be:a4:e9:fa: 04:36:21:10:1e:8d:48:5b:13:24:ca:19:60:9e:3e: a2:6f:df:39:9e:b1:35:35:02:4d:85:28:f5:03:a9: 8f:74:c0:81:74:86:e0:1c:97:bf:a8:ef:f3:8d:ee: d2:5d:9b:7e:56:b5:63:41:a5:e5:4f:e7:cb:9e:e8: 19:f1:ec:a7:0b:fa:6e:cb:4c:b6:f0:ea:dd:3f:bc: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CC:FF:FD:40:C5:55:80:80:4E:D8:D8:2A:52:1F:24:C1:BD:8E:32 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.123.0/24 104.234.150.0/24 104.234.242.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:b0:cc:97:37:e1:78:ed:ce:44:98:06:bd:7a:0a:b8:77:49: 0a:5b:30:16:51:28:81:08:ef:d9:db:90:f2:a1:58:fa:5e:14: fb:77:9a:0a:28:52:d1:30:b6:ff:91:79:73:4b:a8:e2:1f:2d: 02:7c:e4:f5:60:8a:4a:19:62:ab:c9:c8:eb:c1:9c:59:ad:11: 4c:16:cb:c8:67:e1:b3:41:a7:64:01:3a:91:e3:b6:0e:a7:5c: 39:f3:64:c6:ed:bb:c6:ba:78:65:a1:05:09:3b:1b:33:c7:a6: 8c:1c:dc:cc:51:ed:01:7a:88:e8:bb:6b:12:08:1f:3d:da:b2: d0:45:1f:6c:bb:25:6c:18:b6:1c:0b:63:79:d4:c2:37:91:1a: 04:82:b7:97:de:57:c8:f1:7c:6f:3a:fd:63:00:78:07:48:b2: 4c:9a:ed:73:6b:39:33:8a:a7:cc:ac:59:50:b0:b9:15:40:02: 0e:98:ba:9d:d7:46:5b:59:2c:5f:8f:b8:d2:3b:ff:6e:b2:49: 38:44:d3:3b:c0:f8:55:91:e6:33:eb:c4:49:37:ce:00:26:e7: cb:98:82:da:be:75:ac:5f:79:fe:5d:c9:69:0d:d7:d8:47:c1: d9:ee:1c:f6:b8:1a:3d:60:49:91:4f:a8:52:19:cc:e3:46:13: 2c:e0:6b:6c -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUfCvOKAn4N9Kvby5vCQInIg31NyUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjAyMTQwNjM3WhcNMjYxMjAxMTQxMTM3 WjAzMTEwLwYDVQQDEyg5QUNDRkZGRDQwQzU1NTgwODA0RUQ4RDgyQTUyMUYyNEMx QkQ4RTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSW9yzwzhL4m MpEC/F6BpF8rht2PJLy/S9hopnvZDCoHGSNGxtaxB2//GiUKdusqoCqG11zEIcaP imQQEqqFKDRRIOR5xKB9iSuGdxufrk1l+SPUfKyl0mqKblJ/vaojZuaMMzZxK4Lj 4xgn6YBZzkUSLF5biZZXQXiKN42ab27RIgV8hgSFWeQS2lJs+kSheQDFQT84tC4P CiuqH8yHNsBUIc1GpiNrVRAqEgzXjb6k6foENiEQHo1IWxMkyhlgnj6ib985nrE1 NQJNhSj1A6mPdMCBdIbgHJe/qO/zje7SXZt+VrVjQaXlT+fLnugZ8eynC/puy0y2 8OrdP7wQTQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFJrM//1AxVWAgE7Y2CpSHyTB vY4yMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOp7AwQAaOqWAwQAaOryMA0GCSqG SIb3DQEBCwUAA4IBAQAqsMyXN+F47c5EmAa9egq4d0kKWzAWUSiBCO/Z25DyoVj6 XhT7d5oKKFLRMLb/kXlzS6jiHy0CfOT1YIpKGWKrycjrwZxZrRFMFsvIZ+GzQadk ATqR47YOp1w582TG7bvGunhloQUJOxszx6aMHNzMUe0Beojou2sSCB892rLQRR9s uyVsGLYcC2N51MI3kRoEgreX3lfI8XxvOv1jAHgHSLJMmu1zazkziqfMrFlQsLkV QAIOmLqd10ZbWSxfj7jSO/9uskk4RNM7wPhVkeYz68RJN84AJufLmILavnWsX3n+ XclpDdfYR8HZ7hz2uBo9YEmRT6hSGczjRhMs4Gts -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:36 2025 by rpki-client