This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: mfSc+0xrH/GNfRHQhWBYybIKRarowZRK4dzVMtbVXR0= Subject key identifier: F4:30:B6:28:02:08:75:46:8C:01:22:06:39:A1:F0:DE:1C:C3:D4:D6 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0B068A4936B6D3A7F3574F07A6A7D592143BFEC8 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa Signing time: Thu 11 Dec 2025 00:00:14 +0000 ROA not before: Wed 10 Dec 2025 23:55:14 +0000 ROA not after: Thu 10 Dec 2026 00:00:14 +0000 asID: 21859 IP address blocks: 104.234.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 08:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:06:8a:49:36:b6:d3:a7:f3:57:4f:07:a6:a7:d5:92:14:3b:fe:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 10 23:55:14 2025 GMT Not After : Dec 10 00:00:14 2026 GMT Subject: CN=F430B628020875468C01220639A1F0DE1CC3D4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b1:fc:fc:11:78:f0:a0:74:d7:21:3f:da:83: ae:b5:96:a5:27:27:5b:c0:64:23:32:a3:90:5e:be: 20:35:ea:cd:82:b1:b3:dd:22:14:af:36:83:c5:aa: ab:ec:9f:5f:b5:78:e1:f7:35:40:f3:ec:68:9b:cf: 48:00:c8:69:4b:70:40:08:07:a7:8d:31:2a:61:3e: d4:0f:6f:f6:79:8a:52:9d:54:22:e5:2e:d9:1f:9d: b8:b9:2d:98:f1:89:25:41:97:02:01:d0:75:7a:f8: da:39:89:0f:7a:49:13:0b:b7:ad:65:54:b9:4e:a7: 04:a8:b4:2f:97:70:97:b6:86:45:1c:85:e2:e7:8b: 1d:70:d8:bd:0d:21:e1:31:7c:76:33:dc:79:ba:1f: 01:06:a4:1b:db:db:c6:f5:65:17:b0:24:b5:11:b6: f1:ad:5f:b9:c5:48:e7:1a:25:f1:bc:5c:02:1b:f6: 23:7a:11:b1:bc:92:73:ed:f0:d1:d9:95:ff:80:a5: 8f:6f:3a:af:05:43:ce:2b:41:ad:e0:f0:30:be:0b: 9e:2e:db:eb:11:5d:8d:d8:1e:d7:19:20:a2:86:f6: d2:df:16:55:2b:59:41:ca:de:db:7f:33:24:e6:aa: 11:2d:d4:63:24:2f:af:30:0e:7c:b8:8e:78:0b:6f: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:30:B6:28:02:08:75:46:8C:01:22:06:39:A1:F0:DE:1C:C3:D4:D6 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.98.0/24 Signature Algorithm: sha256WithRSAEncryption 54:1e:79:00:38:e3:a8:5e:67:92:7d:5b:0f:1c:7d:f9:4d:a6: 1b:73:4f:ee:a5:72:98:21:ce:dc:c2:c0:e6:3a:da:b2:03:3a: 3f:96:cd:25:ec:57:ac:2d:53:ab:b9:1e:6e:9d:8d:b0:09:f4: 32:f6:97:5b:e8:6b:95:34:5b:26:eb:af:b1:df:1e:7f:ca:4a: 80:8f:5e:7d:3d:8f:e5:90:34:c0:53:9a:c5:b6:6a:db:e2:c5: dc:67:fb:f4:42:0b:9c:5e:ef:78:bb:dc:4b:cc:82:03:58:47: 7d:25:0a:c4:56:ea:dc:9b:53:01:ba:4f:cb:16:2f:c1:0b:93: 38:84:b7:ba:d4:bf:7d:15:9f:5f:4c:58:db:38:dd:12:64:9e: 7d:93:30:f7:d9:63:e2:98:00:64:f3:fd:7e:22:f7:21:1f:db: 63:57:4a:f3:f8:2f:e4:66:b8:b7:02:72:41:48:ca:cb:6e:eb: a1:eb:2d:af:32:32:b8:12:93:de:07:a2:47:50:7d:df:9b:77: 59:f5:19:ff:40:2c:05:54:fe:2b:ea:10:6a:89:6a:2c:83:9a: 9b:1a:fa:b8:7b:21:3c:67:e1:7e:bb:c0:5a:19:c7:23:54:40: 59:67:8a:05:2f:07:c8:50:19:57:1e:b4:40:d8:d5:4c:65:3e: 23:d5:a9:8a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUCwaKSTa206fzV08HpqfVkhQ7/sgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjEwMjM1NTE0WhcNMjYxMjEwMDAwMDE0 WjAzMTEwLwYDVQQDEyhGNDMwQjYyODAyMDg3NTQ2OEMwMTIyMDYzOUExRjBERTFD QzNENEQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLH8/BF48KB0 1yE/2oOutZalJydbwGQjMqOQXr4gNerNgrGz3SIUrzaDxaqr7J9ftXjh9zVA8+xo m89IAMhpS3BACAenjTEqYT7UD2/2eYpSnVQi5S7ZH524uS2Y8YklQZcCAdB1evja OYkPekkTC7etZVS5TqcEqLQvl3CXtoZFHIXi54sdcNi9DSHhMXx2M9x5uh8BBqQb 29vG9WUXsCS1EbbxrV+5xUjnGiXxvFwCG/YjehGxvJJz7fDR2ZX/gKWPbzqvBUPO K0Gt4PAwvgueLtvrEV2N2B7XGSCihvbS3xZVK1lByt7bfzMk5qoRLdRjJC+vMA58 uI54C2/bRQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPQwtigCCHVGjAEiBjmh8N4c w9TWMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpiMA0GCSqGSIb3DQEBCwUAA4IB AQBUHnkAOOOoXmeSfVsPHH35TaYbc0/upXKYIc7cwsDmOtqyAzo/ls0l7FesLVOr uR5unY2wCfQy9pdb6GuVNFsm66+x3x5/ykqAj159PY/lkDTAU5rFtmrb4sXcZ/v0 QgucXu94u9xLzIIDWEd9JQrEVurcm1MBuk/LFi/BC5M4hLe61L99FZ9fTFjbON0S ZJ59kzD32WPimABk8/1+IvchH9tjV0rz+C/kZri3AnJBSMrLbuuh6y2vMjK4EpPe B6JHUH3fm3dZ9Rn/QCwFVP4r6hBqiWosg5qbGvq4eyE8Z+F+u8BaGccjVEBZZ4oF LwfIUBlXHrRA2NVMZT4j1amK -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:46 2025 by rpki-client