This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: l4UrfbHnb8TTcEjviZtl8czcbWmkimwkWFnOZMfMY0Y=
Subject key identifier: FB:BA:BC:7E:63:29:D6:71:BF:B3:23:7B:89:28:74:18:E4:1C:74:23
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 7F323583835D8E97C68DB100A71CA01766F5DD7A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214432.roa
Signing time: Thu 22 Jan 2026 12:12:21 +0000
ROA not before: Thu 22 Jan 2026 12:07:21 +0000
ROA not after: Thu 21 Jan 2027 12:12:21 +0000
asID: 214432
IP address blocks: 157.254.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Jan 2026 22:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:32:35:83:83:5d:8e:97:c6:8d:b1:00:a7:1c:a0:17:66:f5:dd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 22 12:07:21 2026 GMT
Not After : Jan 21 12:12:21 2027 GMT
Subject: CN=FBBABC7E6329D671BFB3237B89287418E41C7423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:6c:46:22:c7:38:67:63:ee:5e:f0:a2:ef:
ca:0e:29:6b:09:d7:5d:86:77:8e:ca:b4:81:ce:cc:
46:63:ef:5b:bd:9f:87:db:fc:7c:a8:3f:bf:33:d1:
ed:2a:5e:58:33:15:bd:6c:05:19:14:17:73:56:3b:
98:e7:a9:47:b2:6f:05:75:07:69:f5:9a:b6:c7:50:
ab:d1:6a:38:f1:fc:5c:28:0c:51:13:74:d0:6a:f8:
fe:5a:7e:5a:92:3a:2c:04:7d:fa:0d:5b:2e:34:70:
57:f0:09:7c:51:b9:dc:95:c6:2c:41:84:1f:53:a4:
29:82:26:46:d8:b6:c8:4d:0d:11:82:6b:ed:2a:da:
c8:87:84:cd:0d:48:ad:6a:fe:86:ee:72:6f:04:fa:
20:a0:41:83:31:14:59:e0:38:05:2b:f9:40:5b:0e:
ec:fb:15:3d:bf:e3:3b:66:5a:59:30:0f:bb:bb:d5:
a4:0c:d9:bc:97:29:b2:11:2c:d9:58:1b:63:7e:ca:
6d:d9:9e:50:fe:f3:bb:80:b3:6b:43:ec:54:ba:14:
e5:b2:82:88:45:2c:9f:68:fb:3a:ad:ae:97:56:8e:
39:a9:01:bb:7b:d5:a7:7a:14:4c:89:39:81:bb:fa:
95:2e:34:0b:21:3d:a4:21:b4:a6:7f:d6:a7:0c:aa:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:BC:7E:63:29:D6:71:BF:B3:23:7B:89:28:74:18:E4:1C:74:23
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.212.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:4f:13:b3:f7:8a:91:7f:67:91:6c:a9:fb:85:d8:eb:aa:42:
68:9f:65:47:eb:2e:94:5a:8d:fe:b1:60:ca:f3:62:8d:39:72:
c7:0f:f6:0e:89:69:16:cf:5f:ca:c7:e4:93:5d:14:9f:e8:ce:
0a:90:6b:1c:f8:4b:e5:29:a3:89:13:63:5e:57:8d:7b:3b:b9:
e4:07:71:92:eb:38:dd:0a:cc:25:16:7d:32:72:e5:07:b2:6a:
2c:7e:05:e2:d8:bd:88:0a:fc:7f:9b:89:d6:03:7e:5c:9f:41:
23:91:ac:c1:3c:16:de:8c:41:9b:b8:da:f0:a0:38:58:52:f2:
68:50:66:45:1d:d6:f3:47:0d:12:33:e9:73:56:c0:3d:63:90:
aa:eb:ec:74:a2:f9:6f:53:7e:df:88:03:85:27:84:5e:36:d2:
96:9f:d1:84:6f:8d:c4:61:40:c5:c6:da:5b:16:f9:bf:97:43:
f8:ec:bc:77:6d:35:1a:2f:80:73:47:6f:0e:e1:2f:5b:24:3b:
d6:22:60:8b:61:64:bc:5a:37:04:39:dc:48:0e:26:71:dd:1d:
ab:47:22:5a:55:9f:d3:c1:9f:87:30:5d:6a:e3:e5:90:69:81:
4d:ec:69:5d:32:59:05:f2:a0:ec:3e:fb:6c:ac:f9:53:4a:ad:
e1:61:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:35:40 2026 by rpki-client