This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402139.roa
File: AS402139.roa (raw, json)
Hash identifier: fGxBFzxcMmNyS0NpLS5ZlpFjR4g4LYejh9nzmDU9+90=
Subject key identifier: BD:82:A6:82:D1:54:90:FE:50:FA:0A:89:B9:50:D1:05:80:4F:68:AF
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 4A2037463871E341C7A5537C9D19B67C5149A0C9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402139.roa
Signing time: Tue 27 Jan 2026 03:13:14 +0000
ROA not before: Tue 27 Jan 2026 03:08:14 +0000
ROA not after: Tue 26 Jan 2027 03:13:14 +0000
asID: 402139
IP address blocks: 157.254.32.0/23 maxlen: 24
157.254.52.0/23 maxlen: 24
157.254.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 31 Jan 2026 16:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:20:37:46:38:71:e3:41:c7:a5:53:7c:9d:19:b6:7c:51:49:a0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 27 03:08:14 2026 GMT
Not After : Jan 26 03:13:14 2027 GMT
Subject: CN=BD82A682D15490FE50FA0A89B950D105804F68AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:5a:76:f0:3c:fd:14:45:2e:67:2d:54:27:
0c:97:78:4d:cd:44:99:e2:17:ba:3f:04:c3:44:98:
06:b2:09:dc:ef:56:6d:a5:ea:6b:53:25:0c:3b:ec:
4c:b0:31:56:dd:1e:0a:1b:34:f3:23:be:f4:65:23:
9b:4b:4e:31:2b:0b:a3:3b:1e:77:b2:bd:00:30:12:
d2:d4:44:e4:e2:c6:61:7b:a8:d5:7a:d1:f7:7b:e0:
cd:27:cd:d6:fd:de:69:14:46:a1:a2:a5:54:b2:8f:
b0:da:17:9b:83:b0:51:cb:18:7a:d5:ec:d8:c7:f4:
75:c5:96:96:a8:c3:ee:22:0b:bb:85:d0:92:d2:ea:
5f:7c:2a:95:af:78:51:27:95:fe:e4:ed:d5:89:5e:
1b:06:eb:f0:88:c9:b7:1f:7a:af:3f:fe:92:c2:bc:
99:64:bb:5a:ca:73:59:8a:96:03:6b:0d:1a:02:3d:
4b:dd:eb:b1:f8:88:a7:af:65:04:d6:f2:ee:15:70:
5d:f0:e8:4c:8f:fa:d4:5c:52:f3:92:02:f5:c7:30:
cf:54:76:a7:60:c6:07:18:b4:61:a5:c5:bb:ea:b7:
51:7f:38:c8:f4:37:0d:d1:3c:29:da:21:b4:a3:63:
c8:f4:fe:e6:86:cd:c8:5a:00:8b:31:09:78:00:2f:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:82:A6:82:D1:54:90:FE:50:FA:0A:89:B9:50:D1:05:80:4F:68:AF
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.32.0/23
157.254.52.0/23
157.254.198.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:4f:d4:75:2c:8e:26:b4:ba:04:7e:cf:5e:75:0d:ec:2e:7c:
cd:bc:84:32:1a:fe:19:eb:b9:42:04:c0:53:69:fe:5e:e7:2d:
d9:b7:e9:77:fc:44:59:d4:76:5e:0b:48:1c:03:dc:a7:3a:0b:
06:fd:ca:22:63:94:dc:25:7f:ca:52:cf:ac:e8:59:ac:45:93:
cd:82:20:83:df:5f:cf:da:58:36:a1:77:c7:4d:84:46:5f:e4:
9b:ba:b9:f2:e7:00:e1:e7:eb:e5:4d:19:72:fb:71:23:ac:31:
f5:53:c6:39:de:87:bf:aa:37:3a:ca:e7:5a:7b:10:c3:f9:e3:
a4:c9:7d:7e:2a:a8:f6:d9:c9:b7:3d:53:cb:67:75:1b:69:40:
30:42:48:a2:a8:a9:e1:94:5a:61:c3:c4:b1:70:5a:b9:c1:e5:
1c:88:bf:2e:be:02:31:e0:aa:63:8f:41:dd:77:a5:cc:d7:56:
bd:b7:51:ef:9c:0c:88:fa:4d:56:f5:fc:2b:cb:c0:ec:e3:4f:
8b:57:a7:b7:3a:43:c3:fd:56:e6:aa:0d:ab:9e:be:7e:92:ce:
03:43:0e:6b:d3:c7:7f:bf:4a:4a:83:26:c2:02:43:09:3f:cc:
b3:3a:99:9b:f4:80:f9:91:78:9d:bf:0f:6f:65:b0:ca:70:7e:
f3:9d:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 23:16:27 2026 by rpki-client