This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d642133-fe34-48fa-b5c3-4640b88222fe.roa
File: 2d642133-fe34-48fa-b5c3-4640b88222fe.roa (raw, json)
Hash identifier: er1SuFmhOj34QPZIBZ+F84jsxpGrVDW3GQIPxCyYd0A=
Subject key identifier: 3C:3E:B2:D9:FC:1A:3E:C8:72:17:8B:1A:F7:72:B0:FA:83:3C:C6:80
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6510549A7CD7EFB390392F282529036515374705
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d642133-fe34-48fa-b5c3-4640b88222fe.roa
Signing time: Sat 29 Nov 2025 01:52:00 +0000
ROA not before: Sat 29 Nov 2025 01:52:00 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.248.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:10:54:9a:7c:d7:ef:b3:90:39:2f:28:25:29:03:65:15:37:47:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 01:52:00 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=8b9349598700655d15c3b85df9b259afa168bcae07a5dd8d959c4e06cf40d466, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:8e:a5:16:d5:ac:f3:16:a7:12:b6:a3:13:
c6:59:1d:90:8d:89:ad:78:08:68:82:48:5f:4f:9a:
d3:f7:1d:80:5c:d1:c7:f0:68:30:0f:34:40:6f:89:
a8:90:1a:e8:1a:55:e6:6f:a7:6e:31:26:2f:3f:ce:
bd:35:39:02:d6:7f:77:ef:22:4f:d2:a9:22:cc:6a:
94:da:30:ac:c4:c6:7a:04:fb:04:13:f1:3e:f0:9d:
ff:8d:6e:28:12:a3:46:fd:ec:be:13:a8:fe:24:fb:
bb:cb:b6:ff:a3:ff:58:23:ce:9e:02:f5:c8:e7:f0:
60:07:ac:de:7a:ab:8c:10:aa:06:2f:cf:7c:7e:d7:
bd:c9:65:7d:9b:7b:f7:c6:4b:65:2e:34:ce:47:3f:
da:81:15:60:18:c6:ed:02:51:4c:2e:32:87:61:7a:
9e:e4:f5:15:eb:6d:b6:e3:62:92:1d:14:f0:90:ea:
77:42:44:cc:b9:65:ff:4a:02:a5:ce:d6:cf:c0:4e:
43:4d:0f:29:71:35:54:1a:c4:ac:63:20:5c:42:56:
5d:91:2d:30:b1:c7:6f:10:42:32:c1:b1:20:af:56:
70:5f:2b:fb:ce:e6:e1:c9:bc:68:87:8a:03:aa:8f:
4e:64:27:5c:db:f3:3f:cd:bb:74:2c:6d:b3:d8:fb:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3E:B2:D9:FC:1A:3E:C8:72:17:8B:1A:F7:72:B0:FA:83:3C:C6:80
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d642133-fe34-48fa-b5c3-4640b88222fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.248.112.0/20
Signature Algorithm: sha256WithRSAEncryption
16:91:85:79:3d:33:30:be:5d:b7:90:b6:c3:c2:19:84:1b:c3:
e0:a5:d6:3f:86:2b:fc:aa:19:b5:7f:5a:25:78:de:f9:66:02:
61:dc:64:eb:fc:84:67:ea:84:66:92:82:68:73:ec:36:41:a7:
cf:a6:66:89:d6:e7:86:e0:10:af:b1:e3:d0:34:c2:81:c9:58:
8e:04:a5:95:6e:08:0c:fc:a6:a9:85:90:42:fd:88:55:dc:fe:
6e:0f:06:5b:60:26:aa:37:2b:58:81:54:80:26:07:28:57:ac:
77:8b:fe:5a:cf:81:0f:46:96:c8:9a:d1:77:4c:45:ac:d8:f9:
38:19:d5:98:e5:03:87:c1:a2:dc:d5:7b:e9:25:2a:e8:0a:f0:
36:2e:af:ff:68:b1:26:8b:de:b6:52:d7:5f:08:5e:f7:a5:8d:
ef:eb:dc:ab:a5:bc:32:7a:71:85:3e:70:d4:0e:c0:a5:46:56:
04:c2:98:ec:64:31:bf:06:36:f3:05:f7:0f:8d:7a:9b:03:07:
83:c2:ff:47:a1:cb:9e:2e:88:94:75:88:f1:09:c4:51:39:02:
04:eb:29:83:57:66:c8:e1:63:62:cc:08:59:79:b8:fe:b1:d9:
10:5a:25:34:a2:5a:96:76:d6:b1:fe:16:b3:84:32:d8:12:fb:
39:39:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:03:00 2025 by rpki-client