This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21700.roa File: AS21700.roa (raw, json) Hash identifier: iI1sGUudAM8+OaPEHf+6lXeWMvzwt+OBjMHb9QkByVs= Subject key identifier: 34:C5:26:24:AC:43:86:24:B4:17:69:4F:6F:DB:23:C1:17:D1:41:53 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3132A0C53DF940436BD321D82A1ED820D87004C4 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21700.roa Signing time: Wed 21 Jan 2026 14:55:20 +0000 ROA not before: Wed 21 Jan 2026 14:50:20 +0000 ROA not after: Wed 20 Jan 2027 14:55:20 +0000 asID: 21700 IP address blocks: 157.254.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 15:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:32:a0:c5:3d:f9:40:43:6b:d3:21:d8:2a:1e:d8:20:d8:70:04:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 21 14:50:20 2026 GMT Not After : Jan 20 14:55:20 2027 GMT Subject: CN=34C52624AC438624B417694F6FDB23C117D14153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:04:5f:4f:be:23:eb:71:0e:27:0f:6e:d6: 29:bb:d7:e3:59:aa:94:25:37:d2:fc:e2:61:ad:e0: 14:83:45:68:e4:bf:a5:41:e8:21:b2:65:87:b3:a7: 37:e3:1b:dd:27:48:80:f4:6f:7a:c2:c8:fa:a3:32: 7f:6a:ce:bb:d1:8f:4b:73:1e:31:d8:0c:df:49:33: 88:ff:18:ee:f7:16:dd:db:15:a1:a4:e9:10:49:0c: 8b:48:a0:cd:38:d7:be:ec:2d:61:89:6f:2b:3a:e3: 51:0e:b4:b3:65:be:c0:c8:4e:61:e6:5a:2a:45:37: 9e:dd:5f:01:a7:92:50:ee:80:c1:c7:fe:52:2f:09: 96:46:e9:bd:15:a6:6c:30:b5:49:2d:b2:cb:f7:9f: 65:35:cf:ad:97:be:04:82:38:4e:43:1c:66:a9:0b: 97:e2:63:0d:91:fd:4f:a7:cd:66:90:6a:58:60:92: 75:4a:90:0a:d2:c2:c4:b4:1c:29:d5:0c:f5:8f:f1: 0c:27:e7:bc:e6:14:b3:41:74:7c:bc:86:f0:29:43: 4a:87:a9:3e:de:1a:ac:63:70:c5:28:97:1d:77:5c: b2:e5:2c:de:65:4e:5a:60:e6:1e:64:09:20:27:bf: 4b:0d:42:a4:e9:06:d5:d6:f0:f6:94:9f:b4:3f:03: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C5:26:24:AC:43:86:24:B4:17:69:4F:6F:DB:23:C1:17:D1:41:53 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS21700.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.142.0/24 Signature Algorithm: sha256WithRSAEncryption 41:98:8d:ae:25:f4:27:eb:11:21:1e:4c:a2:9a:4e:45:50:9f: ec:9f:85:86:ed:55:b4:fe:bf:8e:48:81:a5:d6:47:eb:7b:21: c6:02:71:75:06:63:bc:99:10:90:dc:1d:14:02:ae:37:67:00: 86:a8:69:95:3e:07:81:15:b4:bf:f5:77:45:51:0c:4e:9e:be: 68:6f:b6:5c:77:28:05:a8:0d:45:86:52:41:a2:fb:87:3c:4f: 4e:81:34:55:eb:75:27:30:96:46:96:26:b1:08:2f:29:78:6e: 2c:7d:39:8e:a1:34:7a:28:7b:07:10:9b:2f:bd:c3:67:88:89: 18:44:8a:8c:c5:8e:e8:39:10:b5:ab:9f:cd:8c:54:7c:9d:10: aa:eb:c0:c4:93:46:ae:c9:d2:d2:77:81:29:49:f1:82:72:ac: 17:91:f2:2c:49:9b:07:35:52:01:eb:52:3c:70:dd:2e:e2:db: 5c:69:aa:98:bd:c3:fa:e3:32:60:16:72:db:06:48:78:74:42: 5c:90:9f:5b:64:8c:48:64:77:d8:f2:8a:c3:14:72:9c:e7:83: 2f:2a:ef:e0:cf:90:57:63:c6:66:b4:e8:04:00:87:12:0f:3c: 63:16:b4:47:e9:92:7c:d3:dd:0d:99:82:f3:39:4a:2f:96:72: 40:24:99:d8 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUMTKgxT35QENr0yHYKh7YINhwBMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMTIxMTQ1MDIwWhcNMjcwMTIwMTQ1NTIw WjAzMTEwLwYDVQQDEygzNEM1MjYyNEFDNDM4NjI0QjQxNzY5NEY2RkRCMjNDMTE3 RDE0MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA8EX0++I+tx DicPbtYpu9fjWaqUJTfS/OJhreAUg0Vo5L+lQeghsmWHs6c34xvdJ0iA9G96wsj6 ozJ/as670Y9Lcx4x2AzfSTOI/xju9xbd2xWhpOkQSQyLSKDNONe+7C1hiW8rOuNR DrSzZb7AyE5h5loqRTee3V8Bp5JQ7oDBx/5SLwmWRum9FaZsMLVJLbLL959lNc+t l74EgjhOQxxmqQuX4mMNkf1Pp81mkGpYYJJ1SpAK0sLEtBwp1Qz1j/EMJ+e85hSz QXR8vIbwKUNKh6k+3hqsY3DFKJcdd1yy5SzeZU5aYOYeZAkgJ79LDUKk6QbV1vD2 lJ+0PwNRmQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDTFJiSsQ4YktBdpT2/bI8EX 0UFTMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxNzAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf6OMA0GCSqGSIb3DQEBCwUAA4IB AQBBmI2uJfQn6xEhHkyimk5FUJ/sn4WG7VW0/r+OSIGl1kfreyHGAnF1BmO8mRCQ 3B0UAq43ZwCGqGmVPgeBFbS/9XdFUQxOnr5ob7ZcdygFqA1FhlJBovuHPE9OgTRV 63UnMJZGliaxCC8peG4sfTmOoTR6KHsHEJsvvcNniIkYRIqMxY7oORC1q5/NjFR8 nRCq68DEk0auydLSd4EpSfGCcqwXkfIsSZsHNVIB61I8cN0u4ttcaaqYvcP64zJg FnLbBkh4dEJckJ9bZIxIZHfY8orDFHKc54MvKu/gz5BXY8ZmtOgEAIcSDzxjFrRH 6ZJ8090NmYLzOUovlnJAJJnY -----END CERTIFICATE-----Generated at Wed Jan 21 21:48:33 2026 by rpki-client