This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1370a333-da8f-4e0b-a3be-a045b82024d6.roa
File: 1370a333-da8f-4e0b-a3be-a045b82024d6.roa (raw, json)
Hash identifier: k9TuZNgJHXPB1ybgP3pfwa6xS812FbUC2t3PNVD7Z0M=
Subject key identifier: EB:EC:33:1B:07:D8:28:72:E3:18:02:34:F5:C7:ED:05:6B:3B:A6:A0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3494C210F42405CA3489749C0F1BAC7BCB65C202
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1370a333-da8f-4e0b-a3be-a045b82024d6.roa
Signing time: Wed 12 Nov 2025 02:51:23 +0000
ROA not before: Wed 12 Nov 2025 02:51:23 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.207.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:94:c2:10:f4:24:05:ca:34:89:74:9c:0f:1b:ac:7b:cb:65:c2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 12 02:51:23 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=dedc47dab925767fb2a11ac453f35cffa4077182477535933f9e167ca07d9349, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:90:78:8c:18:f4:18:b9:d4:ff:20:47:ed:
a3:a9:98:3f:66:8d:40:9c:1e:c9:20:09:ea:9e:e9:
71:c0:4e:38:64:a3:28:61:87:4f:be:e6:55:f4:eb:
3c:b1:45:6e:4d:9d:9a:d7:63:b3:bf:fb:63:53:48:
c1:3f:d2:17:51:64:6b:71:7b:38:92:3a:16:99:e4:
c7:57:6b:33:5b:95:0e:0a:0d:24:e0:b7:71:9c:c3:
7e:34:65:90:2e:1a:fd:30:b1:72:3f:a6:46:20:0d:
6b:c7:4c:31:11:92:a7:c3:64:c7:7a:96:d3:81:f9:
83:bd:e4:06:1b:7b:fb:2b:ed:02:7a:e1:a0:68:d1:
27:cc:48:92:b5:2a:ed:ec:9e:f7:e3:73:43:d7:0f:
7a:ae:20:d6:66:be:66:63:e1:48:ef:16:60:8d:64:
b7:25:3b:d6:a7:2b:af:a4:22:af:24:de:1d:5e:d3:
58:12:ad:d8:51:ef:2f:9a:ff:6c:ff:ba:fb:90:ac:
47:f0:b4:c8:09:22:e3:e0:de:e1:f7:4a:fe:78:65:
a9:2d:e5:fe:01:31:37:0a:8d:ff:fa:b3:27:ff:69:
fd:30:8c:70:8a:0f:3e:cb:b3:cc:35:68:d2:9d:e4:
00:1a:37:21:33:41:ee:6e:18:49:1c:31:12:69:05:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EC:33:1B:07:D8:28:72:E3:18:02:34:F5:C7:ED:05:6B:3B:A6:A0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1370a333-da8f-4e0b-a3be-a045b82024d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.207.240.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:cb:bf:31:ed:29:0d:be:48:bc:cc:d3:3b:9b:6d:e7:b9:98:
77:a4:f6:1d:b4:47:d4:4b:8a:e7:6f:95:3a:dd:c6:d0:b6:25:
5a:e5:d5:d2:5a:f7:50:fd:1d:de:7d:44:54:aa:72:30:1d:87:
00:56:30:8c:96:07:5a:da:8b:cc:4c:ad:42:24:ff:ed:30:9f:
c0:3f:29:40:af:cb:c4:3f:8e:61:af:6e:96:89:79:6f:39:31:
ea:88:03:1a:15:60:ea:ac:5a:0b:5b:18:75:1b:14:91:5b:3d:
dd:08:31:8f:16:01:f6:55:83:cf:9b:26:55:d9:be:5e:4e:fb:
89:07:ba:95:3e:99:8b:3a:1a:08:7a:59:c6:22:e1:f7:fd:4b:
07:d3:fd:21:b9:6e:85:58:72:7b:34:74:66:11:d0:cf:5e:39:
10:46:36:64:98:b0:a1:34:2e:28:22:1d:d5:fc:00:e0:29:29:
2d:53:67:fd:26:a0:a0:88:df:d8:b4:b2:8e:b5:a5:5b:87:f8:
c2:09:a0:e3:8a:ce:ff:1d:f0:c9:d0:81:98:dc:9f:aa:db:85:
77:97:ea:2f:4a:8c:69:1f:b1:08:e4:04:46:b8:b9:ae:c6:f3:
6c:c4:c0:b1:82:64:bb:14:75:a4:f9:a1:70:a1:69:df:6a:34:
f4:e9:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:35:34 2025 by rpki-client