This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: Ciyw8dKOpXYogi2G/DX6r9Kfw5GuJn7uRXeQmJF3tiQ= Subject key identifier: 18:99:74:EC:D3:CD:E2:B8:E5:73:ED:ED:FA:1A:51:F2:73:C8:0D:1A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0D2B059F6C4D13FD354B44CD98C80ED622F62B6C Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa Signing time: Thu 13 Nov 2025 02:18:46 +0000 ROA not before: Thu 13 Nov 2025 02:13:46 +0000 ROA not after: Thu 12 Nov 2026 02:18:46 +0000 asID: 21859 IP address blocks: 104.234.62.0/24 maxlen: 24 104.234.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 00:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2b:05:9f:6c:4d:13:fd:35:4b:44:cd:98:c8:0e:d6:22:f6:2b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 13 02:13:46 2025 GMT Not After : Nov 12 02:18:46 2026 GMT Subject: CN=189974ECD3CDE2B8E573EDEDFA1A51F273C80D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:0e:19:c5:e1:89:18:b9:ab:e7:4e:fb:05: 0f:97:d9:61:ad:78:a9:b6:91:12:e7:ab:a6:37:29: d2:e9:c3:ee:d2:8b:ee:37:b4:59:c0:cb:10:7a:84: 77:ec:e6:ae:cf:e6:8d:4c:54:cc:ae:52:e3:19:fa: 8d:36:b1:84:2e:f4:72:a7:5b:b6:ad:bb:a3:7b:1c: 8c:eb:96:c8:a2:15:41:50:57:d0:f2:f6:c0:da:60: e6:73:b4:c8:0b:55:7b:71:42:f1:8f:68:ff:ec:d6: 27:a4:58:3c:df:51:c9:7b:34:04:b1:57:f2:8c:5e: 57:cf:4c:80:f1:7d:87:dc:bb:14:db:b9:73:f5:73: 9e:df:4f:24:b5:09:21:92:99:8a:da:e1:6a:c5:14: a6:7e:0b:7c:74:8b:bf:bd:49:e5:3f:37:7c:78:31: c2:11:72:07:dd:87:d7:69:9c:d8:d2:c1:71:39:98: 98:e5:b1:8d:0c:44:ba:f2:13:8a:7a:d7:d5:eb:42: 89:e6:c5:8e:28:f9:cc:55:e6:9b:f9:b0:57:5a:b0: 98:33:4e:98:56:d1:e3:57:28:b8:fb:5d:d7:08:ed: fb:99:17:af:b1:6c:ae:f5:1e:05:24:2a:b9:f5:fa: 85:92:08:56:2f:2d:de:a8:c5:99:e4:6c:e9:e9:57: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:74:EC:D3:CD:E2:B8:E5:73:ED:ED:FA:1A:51:F2:73:C8:0D:1A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.62.0/24 104.234.98.0/24 Signature Algorithm: sha256WithRSAEncryption 68:cb:a4:e6:9d:15:5b:b8:78:7c:68:5c:79:70:49:6c:05:e6: 3d:69:3b:22:3e:5b:84:9f:6c:60:76:91:88:a5:01:83:53:95: f0:33:25:ed:46:0e:5f:90:23:af:95:2f:4b:b0:ee:c8:22:46: e6:7c:72:9b:bb:ef:ba:05:a1:ae:9b:53:11:86:4b:58:2d:a3: 2b:0c:67:3c:e0:c0:7c:f3:d1:d3:53:1e:44:60:d5:1d:ac:67: 17:8e:cf:6b:5d:7d:8c:33:e1:e0:e1:f1:a1:c4:1d:ef:88:da: 59:d9:1a:40:7b:9f:49:53:05:56:c0:a6:fc:62:13:40:18:2b: 43:da:e9:cb:f1:b0:d7:6c:73:c4:ec:bb:3d:40:9e:26:6e:a9: 78:60:df:73:f3:d5:90:75:f8:2e:a3:4d:4d:50:ca:51:8d:12: b0:1c:6f:d6:2c:74:59:dd:2f:b3:fd:2d:bb:6b:81:26:37:9f: 04:70:e3:15:bb:49:0c:4a:71:0e:58:61:59:c5:2a:a2:f4:e7: 50:81:cb:0f:35:26:59:0c:2a:e7:94:af:78:e5:77:d5:d2:b4: 41:e0:2d:09:52:d2:15:5d:6d:b7:23:1f:21:18:cd:40:02:2d: 57:d3:ef:f7:2b:1b:6c:1c:3f:57:07:26:d0:64:5e:34:2a:1e: d4:81:28:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUDSsFn2xNE/01S0TNmMgO1iL2K2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMTEzMDIxMzQ2WhcNMjYxMTEyMDIxODQ2 WjAzMTEwLwYDVQQDEygxODk5NzRFQ0QzQ0RFMkI4RTU3M0VERURGQTFBNTFGMjcz QzgwRDFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX4OGcXhiRi5 q+dO+wUPl9lhrXiptpES56umNynS6cPu0ovuN7RZwMsQeoR37Oauz+aNTFTMrlLj GfqNNrGELvRyp1u2rbujexyM65bIohVBUFfQ8vbA2mDmc7TIC1V7cULxj2j/7NYn pFg831HJezQEsVfyjF5Xz0yA8X2H3LsU27lz9XOe308ktQkhkpmK2uFqxRSmfgt8 dIu/vUnlPzd8eDHCEXIH3YfXaZzY0sFxOZiY5bGNDES68hOKetfV60KJ5sWOKPnM Veab+bBXWrCYM06YVtHjVyi4+13XCO37mRevsWyu9R4FJCq59fqFkghWLy3eqMWZ 5Gzp6VfFgwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFBiZdOzTzeK45XPt7foaUfJz yA0aMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaOo+AwQAaOpiMA0GCSqGSIb3DQEB CwUAA4IBAQBoy6TmnRVbuHh8aFx5cElsBeY9aTsiPluEn2xgdpGIpQGDU5XwMyXt Rg5fkCOvlS9LsO7IIkbmfHKbu++6BaGum1MRhktYLaMrDGc84MB889HTUx5EYNUd rGcXjs9rXX2MM+Hg4fGhxB3viNpZ2RpAe59JUwVWwKb8YhNAGCtD2unL8bDXbHPE 7Ls9QJ4mbql4YN9z89WQdfguo01NUMpRjRKwHG/WLHRZ3S+z/S27a4EmN58EcOMV u0kMSnEOWGFZxSqi9OdQgcsPNSZZDCrnlK945XfV0rRB4C0JUtIVXW23Ix8hGM1A Ai1X0+/3KxtsHD9XBybQZF40Kh7UgSh7 -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:43 2025 by rpki-client