This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399047.roa File: AS399047.roa (raw, json) Hash identifier: giubXhPOG7gLm2YSzyyC+8QZ/c3E/kAxwDXfLvGAZTM= Subject key identifier: B5:AE:B9:B6:EA:5E:1C:A4:70:48:DC:A4:F2:A9:A2:1D:E6:85:7D:5A Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775 Certificate serial: 417FA2767C56DCBC929B5BB3EDFC2EDE8B95E1BD Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399047.roa Signing time: Tue 02 Dec 2025 06:03:18 +0000 ROA not before: Tue 02 Dec 2025 05:58:18 +0000 ROA not after: Tue 01 Dec 2026 06:03:18 +0000 asID: 399047 IP address blocks: 50.102.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 12:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7f:a2:76:7c:56:dc:bc:92:9b:5b:b3:ed:fc:2e:de:8b:95:e1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775 Validity Not Before: Dec 2 05:58:18 2025 GMT Not After : Dec 1 06:03:18 2026 GMT Subject: CN=B5AEB9B6EA5E1CA47048DCA4F2A9A21DE6857D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:1e:9e:5b:07:a4:e3:c6:0d:d0:f1:54:c7: 80:54:fb:dd:e5:d5:da:b9:8c:a7:a0:36:36:83:1f: 5a:76:2d:1e:5a:ae:73:fa:3e:15:36:e0:ad:11:96: 09:b0:c5:9a:ad:d5:51:63:1c:6e:54:ba:f9:b0:f4: b3:cf:9c:f1:d5:05:12:e5:6f:4c:11:12:db:62:42: 6b:95:cc:d7:58:20:98:a6:fa:27:61:6a:75:37:6a: 80:c7:e9:dd:e5:ce:8f:c0:59:d4:d5:64:1b:20:11: 01:66:da:0b:61:73:d9:c9:4c:15:c9:7b:55:a7:09: bd:85:73:3f:d0:54:25:5f:8b:9e:a0:45:4f:81:e3: 03:3d:ea:f9:c4:e0:6e:4e:f2:fe:f8:b7:16:2b:65: 7a:a3:7a:79:38:9f:b9:e9:ba:1d:72:f8:8d:92:01: 62:40:cb:db:81:b6:10:88:e7:4d:32:51:05:a5:93: 4b:ee:2b:b6:62:1c:a3:7f:1b:fa:0b:92:7b:b5:e2: 3f:d7:50:d3:a9:17:1c:fa:df:c5:07:d1:9c:3e:70: 69:4c:af:65:91:19:08:01:63:c2:be:f6:76:9f:e6: d0:53:79:f5:11:ce:61:3b:3c:a2:b8:ed:a6:d1:dd: a1:52:58:de:eb:45:94:71:c2:c8:16:fa:23:48:b5: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AE:B9:B6:EA:5E:1C:A4:70:48:DC:A4:F2:A9:A2:1D:E6:85:7D:5A X509v3 Authority Key Identifier: keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS399047.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.102.253.0/24 Signature Algorithm: sha256WithRSAEncryption 40:8f:80:59:95:c4:29:31:63:48:b5:33:32:2f:90:3d:5c:e5: 6c:f2:ad:a4:22:e9:8b:e1:04:10:06:6a:ac:b3:90:76:88:64: dd:df:ac:5a:6b:67:dc:1e:b1:05:44:89:53:96:e8:2d:16:8c: f3:5b:59:a6:d9:2f:3c:fc:aa:fb:00:a0:ba:d9:0b:fb:51:d4: 9a:0b:00:cf:39:b7:e3:b4:84:3a:76:13:a4:6b:7d:88:a0:35: 66:0c:9b:78:7b:3a:28:d8:0f:70:d4:9f:89:e4:19:53:51:f7: 87:8f:2a:13:e1:2c:c6:f4:4c:9c:48:45:4a:68:56:cd:e3:90: 6b:52:a7:63:65:c5:ac:63:97:9d:52:10:be:50:6a:dc:f5:bd: 85:16:c0:0b:dd:dc:f9:43:7d:8d:8b:01:b6:a4:fd:10:47:71: 0a:9e:f3:9f:ca:84:3b:b9:17:42:0b:bf:0d:30:5c:8c:2f:70: ab:c7:b8:86:da:b5:c2:bf:90:1f:75:34:4b:c8:38:da:f9:5d: 40:fc:be:ba:e7:45:26:07:79:ec:0e:67:36:14:70:5f:e1:d3: b3:eb:76:35:65:f4:42:8b:df:53:93:54:5e:3d:c8:f0:c8:fe: 54:ae:d3:f8:d8:6d:0e:d0:76:2d:b2:a4:d3:6d:7a:0b:38:d6: d0:6b:75:65 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUQX+idnxW3LySm1uz7fwu3ouV4b0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2 MTZhYmU3NTVjOTMzODU3NzUwHhcNMjUxMjAyMDU1ODE4WhcNMjYxMjAxMDYwMzE4 WjAzMTEwLwYDVQQDEyhCNUFFQjlCNkVBNUUxQ0E0NzA0OERDQTRGMkE5QTIxREU2 ODU3RDVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HMenlsHpOPG DdDxVMeAVPvd5dXauYynoDY2gx9adi0eWq5z+j4VNuCtEZYJsMWardVRYxxuVLr5 sPSzz5zx1QUS5W9MERLbYkJrlczXWCCYpvonYWp1N2qAx+nd5c6PwFnU1WQbIBEB ZtoLYXPZyUwVyXtVpwm9hXM/0FQlX4ueoEVPgeMDPer5xOBuTvL++LcWK2V6o3p5 OJ+56bodcviNkgFiQMvbgbYQiOdNMlEFpZNL7iu2Yhyjfxv6C5J7teI/11DTqRcc +t/FB9GcPnBpTK9lkRkIAWPCvvZ2n+bQU3n1Ec5hOzyiuO2m0d2hUlje60WUccLI FvojSLXgMQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLWuubbqXhykcEjcpPKpoh3m hX1aMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy ZjA5N2YvNC9BUzM5OTA0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADJm/TANBgkqhkiG9w0BAQsFAAOC AQEAQI+AWZXEKTFjSLUzMi+QPVzlbPKtpCLpi+EEEAZqrLOQdohk3d+sWmtn3B6x BUSJU5boLRaM81tZptkvPPyq+wCgutkL+1HUmgsAzzm347SEOnYTpGt9iKA1Zgyb eHs6KNgPcNSfieQZU1H3h48qE+EsxvRMnEhFSmhWzeOQa1KnY2XFrGOXnVIQvlBq 3PW9hRbAC93c+UN9jYsBtqT9EEdxCp7zn8qEO7kXQgu/DTBcjC9wq8e4htq1wr+Q H3U0S8g42vldQPy+uudFJgd57A5nNhRwX+HTs+t2NWX0QovfU5NUXj3I8Mj+VK7T +NhtDtB2LbKk0216CzjW0Gt1ZQ== -----END CERTIFICATE-----Generated at Sun Dec 7 13:48:38 2025 by rpki-client