This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fda11a5-3827-4922-97d4-a02926961ddf.roa
File: 1fda11a5-3827-4922-97d4-a02926961ddf.roa (raw, json)
Hash identifier: Kg7eijyPDCa9GkcNzjliog0vss3AI/hSLOKUzkT7N5A=
Subject key identifier: 00:0E:F9:24:28:EF:35:29:D2:CC:87:C6:32:71:62:58:10:A5:3B:04
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2C3F21173782E9D3EBE9F102010B315ECAE4FA2A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fda11a5-3827-4922-97d4-a02926961ddf.roa
Signing time: Sat 29 Nov 2025 02:20:40 +0000
ROA not before: Sat 29 Nov 2025 02:20:40 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.214.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:3f:21:17:37:82:e9:d3:eb:e9:f1:02:01:0b:31:5e:ca:e4:fa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 02:20:40 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=2def5608930a1b9d9379337f32fbb09059777f9094b32d3175fe160025fd40d8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:2e:18:da:0e:ed:47:30:cc:ce:af:7b:f3:
75:6a:3c:15:f3:25:4c:2d:1e:68:89:11:98:6a:14:
3a:24:2f:69:a7:df:4a:18:ea:de:1e:80:f9:81:55:
ae:86:a3:0f:f4:3c:19:0e:ef:be:40:7b:e4:f5:0b:
c5:f4:e9:89:88:b2:d1:40:ab:4e:1f:c4:2a:66:24:
ab:87:c1:9a:62:01:d4:d9:b1:db:e4:4c:bb:e6:b5:
33:cf:ae:43:77:28:75:08:bb:3a:71:27:18:2e:d7:
ed:8c:5a:c8:b6:b3:87:52:8a:89:cc:e7:bb:fa:48:
52:6f:5f:ef:eb:c5:96:1b:72:77:bb:fa:58:90:bd:
e4:ef:37:50:a1:85:81:cf:fb:46:ab:5e:94:88:81:
82:33:30:c3:35:4a:64:85:a9:8d:98:f4:ce:78:4d:
76:cd:0c:9b:6d:9e:7c:5f:db:80:41:8d:e5:d8:40:
93:c7:c8:f4:54:75:a2:b7:5c:8a:52:7d:04:bb:66:
13:64:89:ee:58:e6:74:52:3a:0b:0c:43:3f:ec:7b:
44:b9:02:a7:50:46:95:37:b5:89:63:73:9f:7c:ea:
94:35:5e:83:7d:97:d9:f9:b2:ad:af:da:f8:f3:d6:
0c:85:a7:d2:d1:0b:eb:c7:70:b0:4c:5f:e2:c7:6b:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0E:F9:24:28:EF:35:29:D2:CC:87:C6:32:71:62:58:10:A5:3B:04
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fda11a5-3827-4922-97d4-a02926961ddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.214.118.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:54:da:b0:14:65:3f:a4:d9:74:bb:a3:7c:b9:80:ec:c8:03:
5f:a9:58:4f:71:23:01:0c:82:92:d7:ad:0b:bd:d3:11:98:be:
80:23:9b:aa:56:1d:a7:f4:55:1a:ae:46:df:73:e8:de:6b:82:
ba:83:fd:d1:72:00:8e:f4:bf:91:b8:fa:61:13:a2:60:9d:b3:
4a:22:1c:96:5f:64:61:a9:54:3b:4f:46:2c:7b:2e:98:08:3b:
da:15:74:53:eb:25:6d:ec:66:e5:b6:be:1d:3d:49:72:65:34:
c0:a9:99:1e:81:cd:9e:2b:b3:4b:09:c6:19:37:19:55:41:4f:
86:28:9d:ff:c4:75:d7:e6:fc:cf:8b:1f:b0:1f:8d:2a:34:ef:
a6:12:2b:6e:de:04:c9:a1:1d:84:92:ea:b0:68:49:48:80:28:
51:2d:59:2a:bf:b1:15:cc:79:3c:68:09:e7:88:b6:dc:74:1b:
cb:4d:32:82:a2:79:ef:5d:ae:61:92:8b:e3:da:e3:a2:91:79:
5a:39:89:7f:d2:ba:c6:a0:d8:b4:86:18:ad:c4:04:f9:d3:b5:
92:df:df:6a:8b:38:f1:28:2d:e3:b4:7c:c7:2c:e8:ba:5d:73:
ff:7e:0d:fc:9b:88:d0:a8:af:c2:dc:cd:88:e3:16:c1:31:0b:
e7:20:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:03:05 2025 by rpki-client