This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/118dcde3-a891-420a-8178-70f11115d6c3.roa
File: 118dcde3-a891-420a-8178-70f11115d6c3.roa (raw, json)
Hash identifier: XnKCOhw8BYTwWGDglHsPunpyoLRetLwYpemZH+GWNmM=
Subject key identifier: 20:FF:F3:C5:3A:AF:71:76:FB:33:65:40:86:11:CA:F9:FC:39:B4:BE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 533805C92C45AA570E4820EDE8E94FE047145CEA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/118dcde3-a891-420a-8178-70f11115d6c3.roa
Signing time: Tue 11 Nov 2025 02:40:11 +0000
ROA not before: Tue 11 Nov 2025 02:40:11 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.236.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:38:05:c9:2c:45:aa:57:0e:48:20:ed:e8:e9:4f:e0:47:14:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 11 02:40:11 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=70676abd5d48836b67417c51fe3be426500de4e03404ae945c3e88593fbd2fcb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:30:54:d4:ba:8e:5d:a2:6f:cd:50:1a:aa:
57:ec:de:00:78:e8:d9:76:5f:fb:dc:0c:aa:ae:25:
01:34:28:57:ff:ac:b4:78:8d:44:b4:c7:8f:9d:26:
a3:3f:5d:0d:1d:c3:6a:27:6c:51:03:92:3e:6e:4d:
09:ca:3f:f3:c6:69:92:ca:6b:10:d4:26:61:5d:b5:
e1:d2:4c:a1:c9:24:f8:1f:ea:c0:b0:57:a6:10:fa:
a8:12:b5:9e:27:57:94:4d:9b:ca:79:82:a1:61:0a:
ef:0e:ae:19:ed:80:09:de:76:5c:3a:42:fd:57:32:
f9:35:8a:34:65:88:56:69:ea:62:fa:b9:63:bd:e9:
6d:99:d2:40:98:3f:c0:8f:3d:36:9d:d7:e4:c6:93:
6c:91:17:10:90:87:9e:b2:87:bf:63:5a:42:64:e2:
53:f5:65:6d:14:e7:49:e2:aa:d5:4d:70:f6:09:3e:
ba:d7:d0:63:7a:d8:c8:55:9c:45:cb:f6:86:05:17:
5d:2a:46:1c:39:ab:4a:26:e1:fd:2b:42:d3:58:e2:
fb:8a:f0:45:92:2c:3c:b7:ec:3e:5f:fe:ae:dd:2a:
06:28:29:e6:af:49:61:19:91:a7:f9:4a:48:30:bc:
22:9a:ac:4a:d0:57:25:b0:3e:3c:9f:56:a2:1e:05:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FF:F3:C5:3A:AF:71:76:FB:33:65:40:86:11:CA:F9:FC:39:B4:BE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/118dcde3-a891-420a-8178-70f11115d6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.236.128.0/17
Signature Algorithm: sha256WithRSAEncryption
37:57:6d:99:4e:1c:78:ff:95:8b:65:15:0c:ea:76:ac:a4:aa:
e4:11:04:80:9d:50:e8:7d:cc:41:fd:3c:59:0e:b4:62:ce:b1:
68:c4:8b:b8:5b:aa:f8:d5:5f:54:a5:28:17:bf:1b:c1:e9:e1:
ae:a3:bb:d3:e5:a7:8d:7a:10:40:49:d3:11:13:04:5f:8a:80:
12:8b:3f:42:ae:3c:d9:4a:5b:c2:e9:fd:4c:46:46:a6:c2:8b:
24:24:01:aa:7b:42:da:99:bd:2d:9e:06:87:9d:18:8f:af:c6:
93:35:2b:29:b2:20:08:9d:69:f2:ba:38:11:29:87:4a:8e:a2:
fe:ca:68:22:2c:a9:b7:73:97:d5:44:24:57:cc:5b:45:9c:82:
0c:18:ee:3f:be:ca:99:d7:c9:ac:44:d7:b5:37:73:cd:43:5f:
5f:a2:28:a1:fc:0a:ab:a2:d4:1a:64:54:8b:f0:98:20:3e:25:
2e:e6:7c:b8:1e:6e:29:92:8d:ca:ad:0d:d3:32:0b:29:85:76:
b6:b8:34:66:24:70:f1:ec:e9:a3:02:18:d6:6a:0a:47:13:61:
65:39:13:b2:a2:41:d3:1e:4e:0c:5b:85:34:2f:e6:d5:fa:ad:
93:14:e8:86:50:fe:9b:70:5c:ca:c4:75:ad:1c:03:f5:23:d2:
41:53:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:39:11 2025 by rpki-client