This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46688.roa File: AS46688.roa (raw, json) Hash identifier: jCkLTF1AsHn2yajAhOYc7HNqYzwQXt23CIy25uT80pk= Subject key identifier: 8C:D8:5C:D9:3E:F1:27:02:B5:FD:AC:B1:BA:63:84:03:5C:80:C7:7D Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775 Certificate serial: 7EBBD480395D1A6129536DC116F7EAABA261B5CB Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46688.roa Signing time: Tue 02 Dec 2025 06:03:19 +0000 ROA not before: Tue 02 Dec 2025 05:58:19 +0000 ROA not after: Tue 01 Dec 2026 06:03:19 +0000 asID: 46688 IP address blocks: 74.43.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 12:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bb:d4:80:39:5d:1a:61:29:53:6d:c1:16:f7:ea:ab:a2:61:b5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775 Validity Not Before: Dec 2 05:58:19 2025 GMT Not After : Dec 1 06:03:19 2026 GMT Subject: CN=8CD85CD93EF12702B5FDACB1BA6384035C80C77D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:42:eb:60:35:f9:c1:26:34:cf:43:9e:b7:9f: cd:84:60:04:7c:1b:32:9b:83:02:24:07:32:f1:3d: 2b:ad:ec:6a:de:0c:03:0e:89:a1:95:ce:34:bb:9b: e3:06:0b:34:a8:6a:ff:d0:f4:29:42:33:69:72:d4: 40:4e:36:31:bd:66:b6:e9:d1:85:25:76:cd:fa:2b: e5:d4:eb:e6:69:9e:51:d3:f7:f7:38:86:1b:ad:74: d9:45:92:0f:ad:42:38:c1:1f:56:b6:c8:aa:09:03: 75:dc:11:da:c9:01:b8:6f:f1:e3:b0:ec:e4:fd:ac: 71:21:6d:67:57:05:c7:bc:b4:34:92:75:b0:6e:59: ef:4c:27:c7:1e:2e:82:51:09:b5:00:c1:f8:f1:fa: 5d:e0:68:9b:e5:cb:a9:55:fa:55:2a:cb:40:47:16: 77:01:87:e8:d2:4a:37:41:e6:a2:90:b2:0e:32:a6: 14:a2:71:64:4e:6b:1c:4b:ad:fa:9e:2a:26:14:e3: 71:7b:1a:cf:04:7f:b8:54:fb:2c:e9:95:96:93:9d: 21:8d:98:5e:9f:ab:18:b1:74:b4:52:93:2b:e2:71: af:7b:35:7a:ce:3c:69:0d:2e:5f:d2:c2:29:27:93: 61:73:8c:d9:14:e0:cf:df:4a:68:1a:6e:26:1f:4e: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D8:5C:D9:3E:F1:27:02:B5:FD:AC:B1:BA:63:84:03:5C:80:C7:7D X509v3 Authority Key Identifier: keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS46688.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.43.97.0/24 Signature Algorithm: sha256WithRSAEncryption a6:4b:12:b6:dc:26:d7:b7:da:0b:48:5b:a1:11:18:12:e3:11: bd:c5:0d:90:3f:73:76:18:e7:16:cb:12:77:c0:c4:9c:aa:21: 3a:2d:35:f0:3b:d3:b8:72:75:c4:d7:79:04:65:1b:69:0f:90: 68:21:5b:74:23:e2:ba:1b:32:46:f1:d8:a9:b9:c6:c2:0a:ae: 8b:25:81:0b:c2:c8:23:23:e9:14:bd:73:12:48:a6:20:ee:e7: f3:06:66:42:2d:58:12:7a:88:bf:10:56:1f:64:f7:6a:3b:c2: d8:55:77:a4:dc:09:75:9c:7e:78:87:0b:90:33:03:0a:fe:88: bd:39:73:c8:3e:2e:0d:1f:f7:38:92:a5:8f:e8:0b:b5:b9:af: 10:b7:2e:c5:a3:d1:95:d2:0e:03:a3:79:f9:59:63:b9:2f:a6: 66:8c:e8:2b:1f:1f:2d:09:8f:20:2c:bb:b3:e2:cd:75:58:16: df:4b:a8:e0:ec:a4:91:9a:d0:7e:ee:eb:ed:ee:eb:77:78:5e: 0e:20:7f:0c:54:ca:a9:8c:d7:a6:99:7a:90:48:b4:9a:d4:ea: 0b:63:92:cb:e4:9e:93:82:60:d4:96:96:7c:5d:ec:3b:5c:a0: 30:65:7c:86:aa:ff:b4:a0:a1:c5:55:9a:13:3f:f6:ee:0a:e0: f1:7a:81:83 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUfrvUgDldGmEpU23BFvfqq6JhtcswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2 MTZhYmU3NTVjOTMzODU3NzUwHhcNMjUxMjAyMDU1ODE5WhcNMjYxMjAxMDYwMzE5 WjAzMTEwLwYDVQQDEyg4Q0Q4NUNEOTNFRjEyNzAyQjVGREFDQjFCQTYzODQwMzVD ODBDNzdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ELrYDX5wSY0 z0Oet5/NhGAEfBsym4MCJAcy8T0rrexq3gwDDomhlc40u5vjBgs0qGr/0PQpQjNp ctRATjYxvWa26dGFJXbN+ivl1OvmaZ5R0/f3OIYbrXTZRZIPrUI4wR9WtsiqCQN1 3BHayQG4b/HjsOzk/axxIW1nVwXHvLQ0knWwblnvTCfHHi6CUQm1AMH48fpd4Gib 5cupVfpVKstARxZ3AYfo0ko3QeaikLIOMqYUonFkTmscS636niomFONxexrPBH+4 VPss6ZWWk50hjZhen6sYsXS0UpMr4nGvezV6zjxpDS5f0sIpJ5Nhc4zZFODP30po Gm4mH06HDwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIzYXNk+8ScCtf2ssbpjhANc gMd9MB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy ZjA5N2YvNC9BUzQ2Njg4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASithMA0GCSqGSIb3DQEBCwUAA4IB AQCmSxK23CbXt9oLSFuhERgS4xG9xQ2QP3N2GOcWyxJ3wMScqiE6LTXwO9O4cnXE 13kEZRtpD5BoIVt0I+K6GzJG8dipucbCCq6LJYELwsgjI+kUvXMSSKYg7ufzBmZC LVgSeoi/EFYfZPdqO8LYVXek3Al1nH54hwuQMwMK/oi9OXPIPi4NH/c4kqWP6Au1 ua8Qty7Fo9GV0g4Do3n5WWO5L6ZmjOgrHx8tCY8gLLuz4s11WBbfS6jg7KSRmtB+ 7uvt7ut3eF4OIH8MVMqpjNemmXqQSLSa1OoLY5LL5J6TgmDUlpZ8Xew7XKAwZXyG qv+0oKHFVZoTP/buCuDxeoGD -----END CERTIFICATE-----Generated at Sun Dec 7 13:52:11 2025 by rpki-client