This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394681.roa File: AS394681.roa (raw, json) Hash identifier: IbACuNdGBzOHZ3rKve2KWtiTPi+3Czi45lC9Bmf/uOM= Subject key identifier: 8B:C8:61:52:0F:78:4D:86:5C:FD:A5:03:55:C8:68:5F:F8:9F:01:A0 Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775 Certificate serial: 609D37E65AAEE790D222BCCB437817A5AACB8FC8 Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394681.roa Signing time: Tue 02 Dec 2025 06:03:18 +0000 ROA not before: Tue 02 Dec 2025 05:58:18 +0000 ROA not after: Tue 01 Dec 2026 06:03:18 +0000 asID: 394681 IP address blocks: 50.38.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 12:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9d:37:e6:5a:ae:e7:90:d2:22:bc:cb:43:78:17:a5:aa:cb:8f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775 Validity Not Before: Dec 2 05:58:18 2025 GMT Not After : Dec 1 06:03:18 2026 GMT Subject: CN=8BC861520F784D865CFDA50355C8685FF89F01A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:c1:60:4b:22:51:8f:1a:87:2e:e4:c6:9f: 43:1f:cd:f8:77:5b:97:a4:dd:fa:80:77:7f:1e:9f: 12:0b:c1:af:2e:9c:40:0d:50:6c:29:fe:54:ba:7d: c7:ed:eb:e2:ef:68:d3:3c:fc:73:2d:8c:92:d6:f4: 65:79:8a:3b:94:01:6f:3f:f1:f2:a1:5d:88:b4:8a: f4:08:87:6f:a8:cb:e7:e6:d2:55:db:fc:65:13:c9: bb:55:8c:c5:21:98:dc:42:72:86:e8:13:54:40:ac: c2:4a:f4:7c:66:56:7d:d8:00:99:b9:88:3c:d3:59: ce:32:ae:66:55:d3:8a:16:45:74:e5:9f:bf:02:9a: 37:7a:2f:24:a3:f3:be:bf:98:d3:2e:52:78:cd:cf: 34:5c:77:3f:85:d4:33:a3:f4:9b:4e:b8:6b:b3:11: 02:0e:f6:01:b8:7a:55:46:4d:7d:d9:44:ff:a9:fb: df:c7:fb:65:c2:98:91:20:4a:fc:4c:92:c8:b4:af: 4e:5c:8a:61:a9:b5:bd:d5:8f:30:8b:55:e5:12:8f: 48:71:67:91:02:51:69:7a:e6:1d:08:f8:bf:34:c7: 30:36:f5:56:58:e2:f1:c0:95:04:41:17:29:02:c9: 5f:c0:48:34:a4:0f:64:e2:ff:00:54:fc:ee:1a:1a: e3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C8:61:52:0F:78:4D:86:5C:FD:A5:03:55:C8:68:5F:F8:9F:01:A0 X509v3 Authority Key Identifier: keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS394681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.38.135.0/24 Signature Algorithm: sha256WithRSAEncryption a4:d8:c0:83:45:09:01:51:f2:b1:30:69:cf:32:80:f5:49:e0: 13:24:9e:0a:6b:28:2b:5c:93:f6:dd:6e:7a:06:51:6a:9d:b6: 48:65:13:c1:75:71:4d:5b:a7:a8:39:a0:4e:98:ad:cd:17:7e: 0f:11:71:89:0a:0c:14:10:a8:d9:98:57:18:15:bd:21:ee:d4: dd:01:52:44:cd:b4:5b:72:21:bd:4c:7d:1b:4c:4f:bf:69:ba: 4d:f8:17:bb:28:1e:d1:8b:82:97:3d:1c:26:42:bc:f7:ed:28: d3:e2:81:e3:72:9d:89:8a:e4:e6:d4:93:66:5a:0e:99:9e:06: 15:c8:a1:76:87:da:02:97:f1:18:50:92:f3:41:25:ef:cd:30: 7a:e2:05:0a:0a:28:bc:c7:f9:d7:d4:62:46:7a:a7:e5:f5:00: df:ca:0e:09:cd:72:b5:48:4c:c6:8b:5e:0e:49:ca:19:9e:99: 2f:3f:a7:49:1b:75:b8:2e:08:e2:e7:ec:ba:06:d9:5e:5d:77: 71:2f:fe:66:ad:54:a6:1d:97:38:c5:c7:ed:57:c1:2a:9d:f9: b1:be:bd:7f:9d:15:c2:16:69:d7:6e:f3:89:39:e0:4f:61:ae: 19:30:48:4b:ba:06:b1:ab:ee:fc:3f:94:37:26:3a:4c:b9:ed: b0:21:69:86 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUYJ035lqu55DSIrzLQ3gXparLj8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2 MTZhYmU3NTVjOTMzODU3NzUwHhcNMjUxMjAyMDU1ODE4WhcNMjYxMjAxMDYwMzE4 WjAzMTEwLwYDVQQDEyg4QkM4NjE1MjBGNzg0RDg2NUNGREE1MDM1NUM4Njg1RkY4 OUYwMUEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi/BYEsiUY8a hy7kxp9DH834d1uXpN36gHd/Hp8SC8GvLpxADVBsKf5Uun3H7evi72jTPPxzLYyS 1vRleYo7lAFvP/HyoV2ItIr0CIdvqMvn5tJV2/xlE8m7VYzFIZjcQnKG6BNUQKzC SvR8ZlZ92ACZuYg801nOMq5mVdOKFkV05Z+/Apo3ei8ko/O+v5jTLlJ4zc80XHc/ hdQzo/SbTrhrsxECDvYBuHpVRk192UT/qfvfx/tlwpiRIEr8TJLItK9OXIphqbW9 1Y8wi1XlEo9IcWeRAlFpeuYdCPi/NMcwNvVWWOLxwJUEQRcpAslfwEg0pA9k4v8A VPzuGhrj8wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIvIYVIPeE2GXP2lA1XIaF/4 nwGgMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy ZjA5N2YvNC9BUzM5NDY4MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADImhzANBgkqhkiG9w0BAQsFAAOC AQEApNjAg0UJAVHysTBpzzKA9UngEySeCmsoK1yT9t1uegZRap22SGUTwXVxTVun qDmgTpitzRd+DxFxiQoMFBCo2ZhXGBW9Ie7U3QFSRM20W3IhvUx9G0xPv2m6TfgX uyge0YuClz0cJkK89+0o0+KB43KdiYrk5tSTZloOmZ4GFcihdofaApfxGFCS80El 780weuIFCgoovMf519RiRnqn5fUA38oOCc1ytUhMxoteDknKGZ6ZLz+nSRt1uC4I 4ufsugbZXl13cS/+Zq1Uph2XOMXH7VfBKp35sb69f50VwhZp127ziTngT2GuGTBI S7oGsavu/D+UNyY6TLntsCFphg== -----END CERTIFICATE-----Generated at Sun Dec 7 13:48:34 2025 by rpki-client