This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/490da442-9a78-4422-8ee9-ded4482ab131.roa
File: 490da442-9a78-4422-8ee9-ded4482ab131.roa (raw, json)
Hash identifier: jsAP7RHMKTdyk2pm6Rjc2bQLq+MsnZWsZjrWeXDm5Zo=
Subject key identifier: A8:6E:22:DA:26:84:16:4A:60:60:84:4F:00:ED:E0:D4:4F:36:45:06
Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial: 34D176FAAC934FD3C18BFF3DED6FACF46394A5BF
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/490da442-9a78-4422-8ee9-ded4482ab131.roa
Signing time: Wed 12 Nov 2025 00:10:10 +0000
ROA not before: Wed 12 Nov 2025 00:10:10 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 198.41.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d1:76:fa:ac:93:4f:d3:c1:8b:ff:3d:ed:6f:ac:f4:63:94:a5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Validity
Not Before: Nov 12 00:10:10 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=97968d1e663c055473a8e88f1b077143c4f9aca7affcb92ed65a0ae5800a454b, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:7d:b9:08:56:b0:52:fd:2c:f8:f6:9c:24:
6c:e6:7f:7c:0e:d0:90:ba:1f:fc:77:dc:ac:28:cb:
30:60:db:9a:9a:ae:48:72:78:85:69:78:9a:5c:cf:
f2:7f:c2:c3:54:a1:ff:47:ae:14:44:3e:f8:59:57:
39:a8:70:e2:42:67:a2:bb:3e:98:11:84:b8:ea:70:
0e:bc:d7:09:33:1d:ac:3d:df:27:ef:e7:3b:d3:d1:
f0:1d:2d:d4:a0:76:02:84:cb:7d:46:13:47:56:c2:
97:61:31:29:41:1f:c8:eb:64:46:61:7b:6d:0e:c3:
d0:de:93:0c:0a:bd:a5:87:d5:51:39:5d:ce:36:03:
02:5a:bc:de:ab:93:f4:3a:56:06:c3:33:7c:68:c4:
b2:31:4d:10:5f:b8:b9:c7:82:fd:76:df:6a:8b:8f:
64:aa:23:c9:4c:13:b0:99:09:b7:f0:61:5a:f8:ce:
bf:66:8c:93:4a:f7:a1:a5:94:f6:87:8e:92:6f:01:
be:89:45:44:40:79:1f:2e:82:17:51:9d:1e:93:e3:
30:32:31:ef:b2:b1:8d:e5:84:03:f3:50:6c:37:37:
d3:1c:e8:91:e2:2b:89:11:ae:e6:fe:3a:8f:03:05:
76:d7:67:3c:d6:29:76:18:7b:e9:23:16:d8:2d:08:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6E:22:DA:26:84:16:4A:60:60:84:4F:00:ED:E0:D4:4F:36:45:06
X509v3 Authority Key Identifier:
keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/490da442-9a78-4422-8ee9-ded4482ab131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.41.96.0/19
Signature Algorithm: sha256WithRSAEncryption
01:62:35:da:d9:0c:b3:e3:6a:25:8f:d3:d3:67:03:7c:2b:af:
e3:29:a7:fa:ac:fb:da:14:f6:56:73:c5:df:7b:9f:83:36:ba:
7e:d4:79:cf:3e:20:6d:e0:4f:a2:8f:26:b4:c5:7f:f8:00:e0:
72:de:2c:6f:63:8e:87:b1:8f:02:dc:2c:35:23:9d:af:5c:34:
64:9e:e1:58:a0:75:8d:36:bd:f5:70:11:3b:13:08:6c:d3:a9:
66:d2:02:da:65:dd:f9:d9:7a:44:41:3d:0c:ae:fc:53:aa:72:
35:19:96:98:13:6a:73:61:7a:64:44:35:89:e1:d3:88:9f:e1:
13:0b:5c:aa:d6:c1:35:13:7d:12:b9:68:33:87:14:75:67:03:
38:2a:fc:ec:29:ea:61:d6:aa:be:ee:8c:b9:fe:85:a7:e3:f0:
57:87:2e:a0:81:75:fa:4e:fd:17:21:b5:fc:2e:9b:f7:2b:0b:
79:10:28:30:1f:c5:77:03:61:25:ef:25:34:d7:50:84:e4:a8:
1b:98:0f:12:e6:55:87:df:eb:07:eb:01:ff:7f:c9:c4:67:3e:
7d:42:0e:b1:d6:65:1c:b5:ce:fc:c6:e9:8b:f7:78:65:db:9e:
05:06:1e:05:f2:e2:8d:1b:71:17:49:71:b1:ae:1e:ec:8e:a0:
78:de:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:32:21 2025 by rpki-client