This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16aa9567-f890-40c6-a7bd-22113a156278.roa
File: 16aa9567-f890-40c6-a7bd-22113a156278.roa (raw, json)
Hash identifier: KQVbv1xCllKNcQy4IZ8r2rHw5Edap9IRbdpGM1cU8kU=
Subject key identifier: 10:B0:55:23:D3:E7:A2:67:32:7F:26:B7:93:50:EC:9E:C1:E9:48:43
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 49CAF57D13534DD781C5665C56FC5284110A0F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16aa9567-f890-40c6-a7bd-22113a156278.roa
Signing time: Sat 29 Nov 2025 01:41:13 +0000
ROA not before: Sat 29 Nov 2025 01:41:13 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.84.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ca:f5:7d:13:53:4d:d7:81:c5:66:5c:56:fc:52:84:11:0a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 01:41:13 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=f6b3b69260cb1f98146518c90e0fa9e6bfd797b8a5c8571972815ae56f6158ac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:56:32:1e:85:89:f3:39:58:79:05:54:da:
14:d4:79:c7:54:40:f4:a2:56:de:d6:be:b8:b6:a8:
08:ca:98:3f:49:ec:d5:10:3a:e5:06:76:4e:1e:8d:
be:9a:c5:da:a5:df:05:75:92:93:59:03:49:3e:2e:
e6:77:d4:67:1d:d4:d4:fc:19:bc:c7:6e:66:cc:4c:
72:c7:af:c1:57:80:44:23:dd:82:64:fa:37:2a:f7:
45:83:31:66:1f:e5:07:8b:6a:95:5a:c0:6b:cf:35:
26:20:e4:e2:bb:bf:57:5d:3a:95:bc:b3:44:45:db:
33:51:38:7b:4a:74:74:7f:26:a3:24:a1:d5:79:98:
f6:fa:f8:eb:a2:d9:1f:9a:76:2a:b0:2f:a1:46:12:
71:6c:58:f3:c0:90:22:f7:e8:1d:5a:ea:e0:e9:9d:
f4:5c:cf:c8:7f:fa:18:b3:cd:87:ef:43:7b:3f:00:
6b:b3:9f:20:4d:06:a5:d5:05:d9:35:4d:3f:a2:8e:
f0:c5:ca:26:bf:10:cb:f7:95:0d:f9:97:00:5d:ad:
4c:d9:b8:2a:11:a8:aa:30:3a:15:1b:de:d1:d4:7d:
1a:2b:3c:88:49:bd:37:b0:2a:cf:23:79:de:18:b3:
7f:21:f6:25:a3:07:70:c5:de:3b:88:c5:c5:1c:04:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:55:23:D3:E7:A2:67:32:7F:26:B7:93:50:EC:9E:C1:E9:48:43
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16aa9567-f890-40c6-a7bd-22113a156278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.84.0.0/14
Signature Algorithm: sha256WithRSAEncryption
26:1a:f4:60:e9:2e:51:a2:ce:dd:ea:98:84:6f:f0:81:6f:6e:
d2:6c:11:c6:6b:57:03:fc:2c:cd:0e:5b:88:34:36:36:d1:9e:
f8:ab:b9:f3:eb:5b:58:df:6d:ce:e4:12:eb:cd:c0:7e:d3:49:
37:17:d3:11:74:e7:28:72:e1:40:d5:64:a6:d8:2e:21:40:85:
7d:51:90:b1:47:bd:3e:c1:e5:27:1e:b6:87:75:97:88:14:55:
14:c0:6a:b9:df:34:56:03:8c:c8:3a:8f:2b:96:24:a0:76:78:
ac:29:70:2b:f3:82:10:a5:aa:83:41:7f:f0:c1:6d:f0:27:bf:
f7:58:ef:6d:bd:6b:73:9d:2c:7b:c5:da:da:12:67:db:db:5b:
b8:18:9f:86:0b:9e:53:e8:14:fa:71:ce:a7:86:71:cc:3d:18:
42:61:18:56:6c:5a:9a:4b:a4:07:21:ee:8b:52:0d:59:a0:3a:
d4:60:ed:c6:85:09:b3:ae:c3:40:5d:e8:b9:25:fe:27:8c:60:
c0:d7:8e:3c:97:67:b2:a8:9e:9e:e1:db:eb:d4:ff:9b:d7:59:
15:2b:34:9b:3d:1b:e6:41:5d:45:4c:01:1f:0f:f7:1a:37:ff:
3a:55:41:81:d0:f0:75:c0:ab:f2:a1:bf:d2:17:12:23:3d:fb:
61:6d:84:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:36:30 2025 by rpki-client