This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa
File: AS3356.roa (raw, json)
Hash identifier: eiHWYiFfwon7MpLBxvZnDm95FPjQLxV4ystmGR33DY8=
Subject key identifier: AD:29:62:A5:16:D8:4B:D3:EB:A7:89:21:EC:C7:C4:38:3B:E0:FB:7F
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 34AFE273B9AA482A372D85D526C94B2F7E2E826B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa
Signing time: Tue 02 Dec 2025 14:30:49 +0000
ROA not before: Tue 02 Dec 2025 14:25:49 +0000
ROA not after: Tue 01 Dec 2026 14:30:49 +0000
asID: 3356
IP address blocks: 157.254.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Dec 2025 15:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:af:e2:73:b9:aa:48:2a:37:2d:85:d5:26:c9:4b:2f:7e:2e:82:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 2 14:25:49 2025 GMT
Not After : Dec 1 14:30:49 2026 GMT
Subject: CN=AD2962A516D84BD3EBA78921ECC7C4383BE0FB7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:c9:05:65:71:e7:33:2d:7f:38:6b:a2:88:
21:83:48:62:f5:15:a9:ad:ce:69:4d:0f:85:fd:b9:
86:08:30:6b:5c:49:ca:e2:b0:7d:7d:5a:4b:0a:85:
5e:db:e7:62:40:a2:30:b5:b2:e2:a1:26:ce:29:ed:
be:0b:d0:77:3e:5c:5f:4d:79:da:ce:75:e7:6a:5f:
f8:97:2c:0e:e1:92:da:ad:21:de:d0:27:c1:b8:d8:
16:97:41:ca:aa:22:7f:af:89:ca:c1:76:b6:79:b7:
26:8e:81:76:31:18:bf:67:7e:52:7b:f4:4e:c1:59:
c2:3c:5a:f1:2f:44:58:aa:69:77:77:e6:14:c2:c8:
f6:6b:b1:a4:bb:e0:70:e1:01:81:e1:13:3c:70:ce:
3a:ad:bd:63:41:ec:03:20:eb:40:fb:09:8d:45:ee:
84:f6:a1:c6:7a:5d:d1:66:8b:4c:b3:8f:78:7e:4f:
d4:c9:1b:24:de:4e:fc:b5:a9:64:f9:0d:f1:a6:3a:
64:b9:c1:86:5d:1b:19:87:7c:34:ba:7f:09:4c:32:
22:73:6a:e4:8c:20:6a:72:65:9e:f2:34:cb:63:62:
d2:86:ea:18:24:1c:9f:61:3d:7b:0b:c6:f4:7a:8c:
c7:22:ad:13:f5:0c:b4:97:18:ed:b3:dd:8b:c1:ac:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:62:A5:16:D8:4B:D3:EB:A7:89:21:EC:C7:C4:38:3B:E0:FB:7F
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.132.0/22
Signature Algorithm: sha256WithRSAEncryption
71:e2:09:84:2a:27:fc:c4:c4:e2:27:bb:26:a2:b4:75:70:94:
73:ec:54:ef:ce:b0:2b:9f:36:4b:68:43:9c:68:88:75:b2:76:
cb:8a:fc:39:c6:fe:7a:36:53:52:0c:33:fc:61:fa:6e:57:35:
2e:b4:6d:74:f4:5f:07:22:fd:53:a4:ba:70:76:22:6a:22:4c:
69:08:ca:eb:71:e7:b7:4e:1e:28:82:48:32:6d:f6:24:f2:81:
c3:65:24:d7:b1:3b:c4:94:83:c9:4b:25:e5:a6:42:41:f9:d9:
22:a2:be:2d:74:d8:b3:07:a4:b5:12:ef:f3:e3:93:84:ea:aa:
77:2d:5b:70:35:ab:c4:80:4f:bc:ef:ff:84:78:00:15:fa:67:
a2:6a:07:e6:17:32:27:96:df:f8:6d:33:44:a1:15:9f:1d:df:
52:c8:f2:08:4c:84:d3:b9:3c:80:35:9e:4b:54:60:f2:5e:7b:
65:dc:15:d9:83:72:d4:dd:62:44:f4:22:63:a0:10:65:57:c4:
df:0f:d2:6d:38:b7:4c:c0:b6:42:0e:51:52:de:1e:87:50:7e:
29:af:6c:00:c2:37:94:b7:6b:51:35:c9:e2:6c:5e:92:d4:a1:
69:53:0a:3f:eb:4c:ad:b9:dd:84:28:1d:0a:11:25:92:d4:ce:
94:dd:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:25:55 2025 by rpki-client