This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: dst+Ce0MjjnKT6Xmwa7W/GuChvBQpogksMdjBmqc8dg= Subject key identifier: 8D:32:B3:ED:4A:C4:FA:DD:44:64:D1:B5:D4:28:38:37:7E:27:C1:45 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3E14660D655589B08F8DF48B515145746C691118 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa Signing time: Tue 11 Nov 2025 15:00:42 +0000 ROA not before: Tue 11 Nov 2025 14:55:42 +0000 ROA not after: Tue 10 Nov 2026 15:00:42 +0000 asID: 14618 IP address blocks: 157.254.2.0/23 maxlen: 24 157.254.141.0/24 maxlen: 24 157.254.200.0/22 maxlen: 22 157.254.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 19:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:14:66:0d:65:55:89:b0:8f:8d:f4:8b:51:51:45:74:6c:69:11:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 11 14:55:42 2025 GMT Not After : Nov 10 15:00:42 2026 GMT Subject: CN=8D32B3ED4AC4FADD4464D1B5D42838377E27C145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:3d:3d:69:a7:95:28:b6:f6:d7:7f:22:0a: 3b:11:83:46:b7:82:dd:aa:12:15:01:8d:43:ed:e5: cf:19:20:19:2e:e8:98:2b:1f:dc:02:33:73:a2:b4: 9c:6f:05:66:33:58:ce:20:af:01:b4:a6:47:6a:a4: 3b:d9:63:92:63:32:1a:20:67:91:a6:aa:1a:90:54: 4a:f1:3f:14:e1:50:dc:d0:36:88:78:b7:3b:9b:95: 43:ad:b3:b8:50:a4:5e:ab:c0:ed:e1:9f:a9:3a:d5: 8f:86:3c:38:42:6f:fc:84:59:04:8b:c9:5f:ca:eb: 9d:75:90:07:3c:82:35:2e:28:24:bb:3d:02:6b:6d: d2:54:f5:5f:d2:99:2e:62:bd:8a:ab:7c:fb:2a:c9: 27:c1:38:85:d1:65:03:2e:49:23:34:f5:23:f7:15: ec:90:63:2a:7b:35:a9:e3:58:f7:01:a1:96:61:c2: e9:d9:9a:11:34:7b:5e:ca:f5:bf:51:70:43:c1:61: dd:dd:f0:d7:b1:ef:81:30:01:40:3d:cf:e0:20:2e: cb:d1:96:b9:c1:c6:1f:62:02:98:6f:31:cf:70:18: bf:60:26:b9:cc:91:3c:b4:b2:12:55:a6:99:ad:72: fb:72:46:dd:0a:99:a9:49:c9:1b:15:a7:1a:02:44: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:32:B3:ED:4A:C4:FA:DD:44:64:D1:B5:D4:28:38:37:7E:27:C1:45 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.2.0/23 157.254.141.0/24 157.254.200.0/22 157.254.217.0/24 Signature Algorithm: sha256WithRSAEncryption 38:dc:e3:2c:09:af:a3:f4:62:0e:4a:07:46:10:90:4d:59:4d: 03:2f:1e:06:01:98:f7:60:9a:f5:40:a3:d0:75:6a:cb:de:fc: 50:8a:1b:d3:8f:be:38:04:7e:f7:25:9a:5c:ac:33:c3:04:65: 56:44:82:74:0a:d1:f2:19:70:50:0a:a4:b8:9d:bc:3d:e4:6b: c1:e2:81:8b:ee:ec:2e:0f:ad:17:aa:da:d4:6a:8e:0b:a3:b4: d5:2e:b5:8d:ed:34:ba:4d:7f:34:95:4e:c8:ae:90:b7:e6:6a: a6:ed:a8:58:f6:52:54:fc:9b:35:88:d6:e2:28:23:2f:56:a4: 2f:36:a7:5b:c8:99:76:af:c8:98:14:d2:0b:76:ae:1c:d1:89: c1:4e:69:d3:fc:0f:c6:c0:9b:3a:dd:cb:5b:d0:f0:a6:c7:89: 43:79:ae:53:8e:63:6e:b9:3c:41:91:cc:8a:45:52:5b:96:bf: e7:4a:cb:07:64:37:a2:c3:db:e2:ba:23:44:e8:4d:6c:41:b2: d4:cc:c9:0b:8b:eb:37:74:b3:ef:df:28:a2:8e:dd:c3:94:5c: 6f:50:80:71:c4:8f:a2:e2:6d:ed:25:9b:4f:44:1e:6d:d4:c9: 82:27:2e:cc:33:0e:73:a0:7f:7c:43:8c:46:9d:e4:a0:cc:e9: 23:8e:5c:26 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUPhRmDWVVibCPjfSLUVFFdGxpERgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMTExMTQ1NTQyWhcNMjYxMTEwMTUwMDQy WjAzMTEwLwYDVQQDEyg4RDMyQjNFRDRBQzRGQURENDQ2NEQxQjVENDI4MzgzNzdF MjdDMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG49PWmnlSi2 9td/Igo7EYNGt4LdqhIVAY1D7eXPGSAZLuiYKx/cAjNzorScbwVmM1jOIK8BtKZH aqQ72WOSYzIaIGeRpqoakFRK8T8U4VDc0DaIeLc7m5VDrbO4UKReq8Dt4Z+pOtWP hjw4Qm/8hFkEi8lfyuuddZAHPII1Ligkuz0Ca23SVPVf0pkuYr2Kq3z7KsknwTiF 0WUDLkkjNPUj9xXskGMqezWp41j3AaGWYcLp2ZoRNHteyvW/UXBDwWHd3fDXse+B MAFAPc/gIC7L0Za5wcYfYgKYbzHPcBi/YCa5zJE8tLISVaaZrXL7ckbdCpmpSckb FacaAkQyKQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFI0ys+1KxPrdRGTRtdQoODd+ J8FFMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBnf4CAwQAnf6NAwQCnf7IAwQAnf7Z MA0GCSqGSIb3DQEBCwUAA4IBAQA43OMsCa+j9GIOSgdGEJBNWU0DLx4GAZj3YJr1 QKPQdWrL3vxQihvTj744BH73JZpcrDPDBGVWRIJ0CtHyGXBQCqS4nbw95GvB4oGL 7uwuD60XqtrUao4Lo7TVLrWN7TS6TX80lU7IrpC35mqm7ahY9lJU/Js1iNbiKCMv VqQvNqdbyJl2r8iYFNILdq4c0YnBTmnT/A/GwJs63ctb0PCmx4lDea5TjmNuuTxB kcyKRVJblr/nSssHZDeiw9viuiNE6E1sQbLUzMkLi+s3dLPv3yiijt3DlFxvUIBx xI+i4m3tJZtPRB5t1MmCJy7MMw5zoH98Q4xGneSgzOkjjlwm -----END CERTIFICATE-----Generated at Sat Nov 22 21:32:52 2025 by rpki-client