This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: bxmKshmylWmFK7qfrsiAOb2MXxV/sRX2ZPdOYI6aCE8=
Subject key identifier: 2A:20:68:3C:8E:06:75:7C:54:73:27:65:06:3A:01:42:A5:AD:07:11
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 31EA96157347394F87E871D640AA211C4C05EFB3
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa
Signing time: Wed 05 Nov 2025 11:14:29 +0000
ROA not before: Wed 05 Nov 2025 11:09:29 +0000
ROA not after: Wed 04 Nov 2026 11:14:29 +0000
asID: 23470
IP address blocks: 104.234.114.0/24 maxlen: 24
104.234.139.0/24 maxlen: 24
104.234.142.0/24 maxlen: 24
104.234.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 00:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ea:96:15:73:47:39:4f:87:e8:71:d6:40:aa:21:1c:4c:05:ef:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 5 11:09:29 2025 GMT
Not After : Nov 4 11:14:29 2026 GMT
Subject: CN=2A20683C8E06757C54732765063A0142A5AD0711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:85:05:1f:d1:09:54:c5:8b:3e:ec:03:cc:
e6:e2:50:8e:6b:26:7e:94:45:62:c8:94:de:1b:ae:
e2:e7:b7:d4:c8:a0:b0:d7:dc:86:12:3a:65:14:47:
d7:04:19:fd:53:0f:af:8b:54:d4:84:42:5d:e3:95:
87:9d:80:eb:48:a5:54:4b:f1:56:51:58:05:00:79:
07:78:68:af:45:45:9f:63:eb:b1:f9:d2:11:c1:54:
55:e9:94:0d:d2:f7:a3:29:79:7b:22:85:a2:e4:a1:
57:9f:e3:fc:ae:d7:1a:07:21:0e:b8:c5:02:c7:bd:
f8:b9:b0:a1:40:81:3a:8f:f5:90:d9:ea:95:b3:7c:
65:72:0b:16:1b:03:71:5b:c9:e3:25:24:5b:09:f6:
0e:00:bf:7e:99:7a:a1:0c:4e:94:96:ea:f9:e9:be:
e9:3a:c2:ee:f0:82:d9:25:3f:b4:9c:b3:f9:c6:91:
b7:7c:7c:9a:27:ea:ed:75:40:af:d6:02:af:bf:52:
13:81:44:35:40:09:3c:11:78:17:ed:2a:ad:bf:12:
03:1b:d8:9b:81:14:22:8a:e5:55:bd:dd:dd:9f:92:
6d:32:18:80:a8:1e:3a:19:a0:07:4a:a0:f8:1a:ad:
ef:27:c7:62:5d:1a:d9:62:5b:61:4d:d3:67:da:e6:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:20:68:3C:8E:06:75:7C:54:73:27:65:06:3A:01:42:A5:AD:07:11
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.114.0/24
104.234.139.0/24
104.234.142.0/24
104.234.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:44:db:05:72:07:ac:46:4a:d6:0f:e8:4b:a7:26:23:31:b6:
f6:af:39:73:dd:93:22:66:f2:0a:f9:7e:2d:5c:91:1b:30:08:
3c:62:d0:39:ed:9b:6f:bd:63:ff:85:c0:d5:4e:aa:ed:c2:9a:
79:0a:77:ae:05:e1:38:9b:0f:7a:66:fb:42:ab:4f:44:ed:6e:
79:bb:5a:a3:9b:3b:36:64:51:63:03:42:ff:7d:42:0d:ba:08:
ed:33:fd:23:83:bc:bf:ef:fc:40:d4:39:09:19:23:59:f2:81:
3c:4e:77:6f:c6:b0:1c:73:4e:e7:48:39:0e:a0:ff:e9:0f:f9:
81:c5:7e:df:4a:74:f0:29:e3:64:a0:b3:b8:ad:01:18:33:95:
06:33:60:f2:d1:7b:82:83:5e:11:f2:cb:1b:41:26:e0:cb:16:
8b:a3:c9:fc:b7:a2:21:f5:ed:7e:23:8a:9d:2c:9b:a9:17:41:
39:2a:66:20:cb:c0:a9:76:4c:30:a4:bb:fe:d8:f0:8f:93:1f:
34:cd:03:c9:fe:be:ca:8c:0f:07:b2:8a:36:5c:91:ef:c4:82:
24:1a:bf:3a:d2:f4:b1:29:c3:03:57:65:3e:0e:53:f5:fe:72:
63:05:4d:5e:27:27:46:d0:79:d5:f4:47:86:35:c7:10:0a:81:
3a:60:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:08:29 2025 by rpki-client