This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0855c042-58ed-4311-bbab-78cf83176ba3.roa
File: 0855c042-58ed-4311-bbab-78cf83176ba3.roa (raw, json)
Hash identifier: LmvmziacHTDDEF7Mv1EwJOw9YDrfsGrfCeYsqlsKrXE=
Subject key identifier: E0:EA:1C:50:38:C1:62:F0:28:19:74:10:BB:C6:20:76:3D:0C:B9:E6
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4D88C25C287DB14E8430D66AC91FAB06CD9CFD3D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0855c042-58ed-4311-bbab-78cf83176ba3.roa
Signing time: Sat 15 Nov 2025 01:50:10 +0000
ROA not before: Sat 15 Nov 2025 01:50:10 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.170.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:88:c2:5c:28:7d:b1:4e:84:30:d6:6a:c9:1f:ab:06:cd:9c:fd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 15 01:50:10 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=99de3ced53582d064514e6eea8c69102253c103ed0dc15e2a8bc5fcb51fe89cf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:9e:4e:94:95:91:55:4e:2c:6b:15:c7:01:
1b:67:53:ee:91:fa:48:47:8b:a2:92:9a:ac:50:f4:
60:98:ad:ce:bf:99:16:5f:3c:4a:78:16:6c:12:a6:
96:05:7f:f8:a8:d4:8e:cb:f0:69:22:c9:05:5d:eb:
64:50:fa:e9:50:81:7c:19:9d:6d:2e:42:a2:7c:bd:
ac:9d:ee:ba:cd:7b:27:e1:4c:5b:1b:3c:b6:ee:06:
8e:d1:b1:49:91:1a:67:4a:76:01:f2:6d:f3:2f:bf:
13:7c:8a:46:c0:4e:46:2a:0e:c7:ef:e2:a3:bd:92:
fd:35:ec:c3:2c:44:c1:5d:db:e1:20:87:44:65:19:
05:3a:b0:16:dd:5e:30:31:69:98:08:16:66:9b:6a:
04:db:ec:63:94:7e:90:27:99:cf:18:ac:ac:2c:dc:
c9:9b:af:1a:f4:9c:83:42:27:f0:ec:cc:8d:4a:70:
1b:98:1a:89:17:dc:9b:fb:08:42:42:0a:78:d3:48:
e9:16:f3:95:75:c5:ae:90:e3:5a:2d:f4:30:81:4d:
25:fa:0c:d9:fe:a0:a2:8c:79:bf:50:1a:0b:8d:76:
76:40:99:b9:08:97:e2:08:e3:7a:3d:bd:18:4a:cc:
9c:bb:5b:c3:b6:5e:f3:e3:f8:b4:62:07:39:35:8a:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:1C:50:38:C1:62:F0:28:19:74:10:BB:C6:20:76:3D:0C:B9:E6
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0855c042-58ed-4311-bbab-78cf83176ba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.170.160.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:e8:a3:78:97:0f:e9:9e:dd:36:0b:f8:3d:01:6a:c9:8a:3b:
7b:11:f6:01:3b:01:dd:58:f1:18:77:47:64:91:68:9c:00:be:
80:5e:a1:1d:7d:90:8f:8f:ab:fb:13:45:cf:6b:7e:48:38:d9:
e9:f8:41:f2:7f:3d:64:ec:06:49:a2:40:6a:4d:88:ec:8e:d6:
64:ad:b2:a6:bf:f6:e9:f2:47:fd:b4:9f:8a:71:72:f1:d6:0e:
2a:bf:cb:17:c9:81:1c:5c:95:f3:62:82:8f:b4:58:4f:33:5a:
10:6d:fc:f3:d1:b1:ac:cb:4c:e6:57:22:eb:b1:6b:08:fa:23:
00:49:57:39:dc:23:06:ff:db:27:c8:8e:65:41:48:5c:a6:5a:
61:11:7d:00:83:a1:c6:d3:f5:0a:5d:ce:34:a1:31:83:11:93:
af:2f:e8:0b:e3:d6:47:a0:6c:48:2e:28:b2:82:20:dc:34:8f:
be:c0:89:fc:8e:91:79:b6:33:0c:de:50:bf:52:6c:8a:ea:0c:
ef:d8:37:bb:b3:35:df:19:49:e3:e9:33:e2:98:18:32:2e:86:
92:a7:53:aa:75:27:21:2d:30:6e:eb:71:f8:bb:d3:84:2f:09:
d7:3f:43:ed:fb:13:2f:4f:86:7b:e8:f7:2b:6c:99:9f:80:79:
bc:12:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:01:26 2025 by rpki-client