This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: E10/cv5Tl8AMH/HORMjaT27v30WjOq3f4X2+ghKpGcg=
Subject key identifier: A2:4A:4C:2E:DC:58:73:D4:BD:32:00:26:EC:2D:CE:6D:EC:28:16:33
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 73CCEEF577EA384C11D0F99FC36B6B2264C823CB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
Signing time: Tue 06 Jan 2026 07:51:41 +0000
ROA not before: Tue 06 Jan 2026 07:46:41 +0000
ROA not after: Tue 05 Jan 2027 07:51:41 +0000
asID: 214025
IP address blocks: 104.234.112.0/24 maxlen: 24
206.53.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 20:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:cc:ee:f5:77:ea:38:4c:11:d0:f9:9f:c3:6b:6b:22:64:c8:23:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 6 07:46:41 2026 GMT
Not After : Jan 5 07:51:41 2027 GMT
Subject: CN=A24A4C2EDC5873D4BD320026EC2DCE6DEC281633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:31:c9:21:52:04:99:3b:ff:af:ce:1d:5c:
97:3f:10:46:7e:17:fe:98:48:a8:90:83:97:40:b8:
e3:72:99:3b:0b:83:5f:53:99:ec:49:47:ab:1d:cf:
a8:93:30:5e:b3:dc:60:d4:39:96:27:77:7e:7a:62:
8e:49:a6:24:be:86:00:88:23:4e:42:0b:33:d5:61:
80:9b:0e:74:f5:9b:7b:ed:09:26:9f:c5:b7:d7:ee:
72:02:98:6e:9b:e0:a9:b1:bc:8d:9b:83:48:72:00:
81:ff:5b:44:3f:eb:c4:43:c9:e6:94:d1:86:94:6d:
36:0b:63:60:42:a2:31:da:4c:91:86:5e:f5:60:8e:
dd:f6:b5:53:23:4c:80:0b:8c:a0:6e:38:a0:2f:f4:
f8:12:04:6c:4b:12:a1:d8:89:cb:03:2a:4d:e8:84:
01:16:16:cf:01:40:28:58:38:2c:78:32:70:ec:94:
58:24:7d:7b:25:4d:a6:c6:35:a4:96:17:fc:96:fa:
e2:ff:fb:02:7c:69:31:22:13:f4:90:6e:63:c6:2f:
e8:d7:45:24:3b:47:17:22:f8:63:8f:7c:ae:57:97:
b9:76:56:05:5d:58:c1:f1:f6:72:73:82:c6:2a:07:
6c:88:bf:92:af:d1:f6:55:2d:84:a0:b1:ed:47:e6:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4A:4C:2E:DC:58:73:D4:BD:32:00:26:EC:2D:CE:6D:EC:28:16:33
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.112.0/24
206.53.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c9:f6:21:ba:24:da:b9:a0:d1:2e:4a:bb:f3:a1:36:73:d1:
93:21:4a:3f:e3:71:ed:06:bf:98:4d:44:ba:03:00:91:c3:37:
46:5a:85:5d:9b:4d:e1:5e:40:cb:db:21:db:b3:21:17:57:a3:
b5:3a:53:26:36:04:97:ec:c8:bb:49:9c:2d:01:09:aa:95:35:
5d:67:9a:8f:d6:af:21:fd:d8:3b:6b:58:72:80:ba:23:28:a4:
3b:90:e8:92:41:3d:f1:a7:05:31:bd:9c:ee:fa:38:21:5a:29:
54:09:a1:63:17:74:2b:dd:6b:d0:7f:0f:6e:e2:d6:ae:ce:e8:
f9:6a:d5:bf:ca:a0:a2:49:de:7c:98:a8:16:8f:86:85:19:4c:
a6:c8:08:2b:7c:74:11:82:58:64:22:07:5a:45:de:a7:61:2f:
52:9a:a9:8c:af:97:a3:be:df:71:01:a6:69:93:ae:da:ad:91:
60:59:05:58:2e:1d:53:cb:5c:e3:2b:02:94:3b:29:33:54:c5:
7c:dc:07:e3:3b:7d:08:ca:57:24:d0:33:45:b4:9c:3f:3f:f2:
0a:66:e1:ae:fc:7d:cf:1c:63:06:ff:4a:8d:a6:24:ab:b0:28:
69:8f:cb:6e:f4:d6:e1:8c:c0:3c:e2:2c:db:1d:d3:28:22:67:
93:32:33:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 05:24:32 2026 by rpki-client