This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400799.roa File: AS400799.roa (raw, json) Hash identifier: rwehasY791o4MeZ6jn/0xseIdml9T2Xj5OQr4i2w4D4= Subject key identifier: 79:FA:2E:14:65:A2:0D:81:69:4E:82:06:7F:20:87:59:74:F5:AD:3E Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6232FDCD09F36B98E25A547843E4A7D77B657629 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400799.roa Signing time: Wed 12 Nov 2025 14:30:39 +0000 ROA not before: Wed 12 Nov 2025 14:25:39 +0000 ROA not after: Wed 11 Nov 2026 14:30:39 +0000 asID: 400799 IP address blocks: 104.234.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:32:fd:cd:09:f3:6b:98:e2:5a:54:78:43:e4:a7:d7:7b:65:76:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 12 14:25:39 2025 GMT Not After : Nov 11 14:30:39 2026 GMT Subject: CN=79FA2E1465A20D81694E82067F20875974F5AD3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:42:47:1c:96:1d:ee:15:8e:82:ad:a8:c5: 68:f3:30:1c:97:69:04:45:f0:05:87:be:f1:61:22: fe:47:89:19:b7:3d:5e:e3:ea:b8:fb:43:8c:85:7a: 9f:85:a8:a7:92:e1:13:76:f1:7f:30:9f:08:46:54: ca:6d:4f:c0:42:0d:1d:4a:43:1b:56:e6:49:a2:e6: 0d:4b:d5:d3:8d:8e:b9:f9:0b:a7:54:69:3f:96:04: c4:da:87:82:0d:16:37:ab:c2:00:93:06:cc:8d:cb: 69:1a:f2:e2:2a:8d:62:3e:0d:ac:3e:d9:22:50:13: ac:3a:3e:2c:64:0d:8f:90:ff:89:d3:eb:6f:01:36: 23:b5:b5:1d:7d:38:d7:06:f9:04:e4:17:15:d2:3c: 88:2f:d4:56:20:e4:45:7d:9f:33:89:04:fa:63:eb: fc:e2:85:82:35:cb:e0:d8:ee:e5:6e:76:07:02:e7: 66:50:be:4f:ab:a8:28:60:c5:ad:67:df:69:bf:ed: 55:fc:0d:85:08:62:71:9f:59:98:4c:f0:05:94:dc: 1f:b6:9d:38:9a:49:db:ed:9b:03:cf:9d:a4:e5:89: b6:f0:b9:01:f7:e5:5b:15:4b:a3:fa:17:88:de:86: 96:b1:6e:29:1a:a9:69:f0:d6:f9:da:07:19:7b:f2: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FA:2E:14:65:A2:0D:81:69:4E:82:06:7F:20:87:59:74:F5:AD:3E X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400799.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.169.0/24 Signature Algorithm: sha256WithRSAEncryption 08:ca:04:ff:f5:00:f7:d6:38:b4:e9:8c:e3:67:ef:93:5d:15: 1a:1c:e7:3d:90:5a:0e:de:42:da:8b:1b:97:8b:e3:0d:4b:0f: 72:9c:bd:a0:85:5a:d4:bd:60:00:e0:fe:7b:ed:5a:4b:77:2e: 62:14:e0:2f:56:e7:b1:42:e4:64:34:c2:8a:bd:18:a2:78:97: 5b:fa:d6:33:82:0c:e0:7d:3a:29:3a:64:fa:7d:71:4b:9a:b5: 5a:aa:d0:2b:af:cc:b1:f6:03:b7:b4:f0:de:ff:5b:3b:9f:c3: 2c:7c:95:1b:96:a0:f4:1e:db:39:2f:be:67:6c:ac:8d:ce:9c: d0:10:f7:8d:58:67:42:ce:8c:dc:87:1f:f9:0f:b5:e5:47:01: bf:c4:18:b5:08:1f:dc:cd:ca:12:68:bb:f1:43:38:32:70:80: 54:c2:90:a0:8a:a8:d7:fb:b5:21:25:1f:fa:7d:e2:a7:ee:2f: 3b:1f:dd:34:5a:44:3a:eb:a7:c0:bc:c7:20:6a:19:e2:5b:bf: 46:e2:dd:de:34:7b:ca:27:8a:c5:e0:f6:f2:91:47:44:ab:01: 28:2b:5f:ec:17:9a:2e:3a:1a:9d:f0:34:60:a3:a5:d1:c1:5b: 6d:43:60:1d:86:17:82:83:94:05:68:2b:c5:59:b3:16:eb:1e: b2:55:3c:41 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUYjL9zQnza5jiWlR4Q+Sn13tldikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMTEyMTQyNTM5WhcNMjYxMTExMTQzMDM5 WjAzMTEwLwYDVQQDEyg3OUZBMkUxNDY1QTIwRDgxNjk0RTgyMDY3RjIwODc1OTc0 RjVBRDNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKpCRxyWHe4V joKtqMVo8zAcl2kERfAFh77xYSL+R4kZtz1e4+q4+0OMhXqfhainkuETdvF/MJ8I RlTKbU/AQg0dSkMbVuZJouYNS9XTjY65+QunVGk/lgTE2oeCDRY3q8IAkwbMjctp GvLiKo1iPg2sPtkiUBOsOj4sZA2PkP+J0+tvATYjtbUdfTjXBvkE5BcV0jyIL9RW IORFfZ8ziQT6Y+v84oWCNcvg2O7lbnYHAudmUL5Pq6goYMWtZ99pv+1V/A2FCGJx n1mYTPAFlNwftp04mknb7ZsDz52k5Ym28LkB9+VbFUuj+heI3oaWsW4pGqlp8Nb5 2gcZe/KDvwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFHn6LhRlog2BaU6CBn8gh1l0 9a0+MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDc5OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqqTANBgkqhkiG9w0BAQsFAAOC AQEACMoE//UA99Y4tOmM42fvk10VGhznPZBaDt5C2osbl4vjDUsPcpy9oIVa1L1g AOD+e+1aS3cuYhTgL1bnsULkZDTCir0YoniXW/rWM4IM4H06KTpk+n1xS5q1WqrQ K6/MsfYDt7Tw3v9bO5/DLHyVG5ag9B7bOS++Z2ysjc6c0BD3jVhnQs6M3Icf+Q+1 5UcBv8QYtQgf3M3KEmi78UM4MnCAVMKQoIqo1/u1ISUf+n3ip+4vOx/dNFpEOuun wLzHIGoZ4lu/RuLd3jR7yieKxeD28pFHRKsBKCtf7BeaLjoanfA0YKOl0cFbbUNg HYYXgoOUBWgrxVmzFuseslU8QQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:04 2025 by rpki-client