This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dabc189-1d07-461f-8b59-6d4f575d5265.roa
File: 2dabc189-1d07-461f-8b59-6d4f575d5265.roa (raw, json)
Hash identifier: XTcy0mPfbFogdOWzwiLBf/keZ5IDTY6llj8tx3h4hYo=
Subject key identifier: E5:AD:E3:C2:65:73:88:18:BD:52:4C:D6:9A:DA:AA:0C:21:3F:F6:82
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 05214F9423C3579DFEF48E10F7C65E2568A1314A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dabc189-1d07-461f-8b59-6d4f575d5265.roa
Signing time: Tue 11 Nov 2025 02:51:18 +0000
ROA not before: Tue 11 Nov 2025 02:51:18 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.251.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:21:4f:94:23:c3:57:9d:fe:f4:8e:10:f7:c6:5e:25:68:a1:31:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 11 02:51:18 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=5038cc647224aec793b03e4e5981eb3d31b6dbe1bc58b408a95d7b2cff97ebc2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:07:1e:45:0d:18:58:65:e8:de:82:bd:f6:
73:2a:30:d4:92:20:bb:56:92:49:3e:56:f8:e7:58:
9e:a6:ad:5f:a4:8d:d4:38:de:d4:87:cc:31:c4:9d:
19:0e:8d:d5:b9:8e:b5:93:f0:10:64:91:1b:ca:3a:
8f:07:0a:95:ee:55:4a:f8:67:5d:fd:2d:da:2e:15:
fc:33:39:7c:e5:60:2e:02:8a:5d:46:29:22:65:96:
6a:97:20:9a:e3:46:ce:71:65:4c:79:c7:e2:7a:3a:
52:99:9c:de:c2:94:f1:aa:79:2a:46:2e:5e:b9:c0:
8e:02:8a:10:25:5c:30:a2:01:9f:e1:83:13:35:98:
96:23:df:93:de:53:cf:ba:0b:80:19:b1:c9:21:2d:
55:f3:44:34:d0:9e:33:c7:be:95:d1:ba:fa:cd:d6:
a6:52:6b:dd:c8:87:62:84:79:bd:42:51:6e:2d:3b:
7b:1c:be:66:ee:6f:af:bd:07:15:73:39:6e:0c:f5:
bf:c5:82:bf:ba:72:c1:9d:c1:6b:72:4e:32:8c:4f:
a2:22:12:e8:b1:46:ea:ef:bb:e7:9d:d2:d2:aa:36:
75:4f:ab:1a:58:fa:f8:bc:27:ed:66:2e:88:1b:03:
d3:79:cb:08:87:ac:a2:d0:bd:1c:6f:cd:e2:b2:96:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AD:E3:C2:65:73:88:18:BD:52:4C:D6:9A:DA:AA:0C:21:3F:F6:82
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dabc189-1d07-461f-8b59-6d4f575d5265.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.251.224.0/21
Signature Algorithm: sha256WithRSAEncryption
67:04:01:7b:e9:60:b3:63:43:f6:86:c4:a0:c3:2c:d2:f9:a9:
2b:c8:f4:7c:21:ba:47:29:d5:6a:36:73:46:85:4f:27:17:a8:
6f:f3:32:be:41:47:ce:53:dc:33:9b:ff:8d:5a:10:65:45:5a:
eb:fb:bf:10:64:21:34:a4:d9:f7:38:b8:de:24:c4:48:4d:cc:
e7:9b:9a:3b:82:38:69:2b:fc:76:8b:6d:e6:eb:1e:82:5d:78:
95:4d:66:47:3f:ae:89:32:48:40:24:66:30:b7:a2:e4:24:73:
04:f2:05:25:0e:f5:bb:ad:05:d9:b6:17:a0:60:2f:ec:79:35:
e3:0b:84:4d:e9:cb:9b:22:e1:d9:d9:0f:e1:cb:8c:1f:69:f5:
4c:6e:7f:0a:72:7c:a6:e2:bd:1a:62:42:9e:7f:32:8e:88:46:
c0:eb:d6:fb:d2:06:63:68:91:a9:b3:25:cc:e2:36:30:5d:40:
6e:0c:93:b0:9c:95:c0:7c:5c:59:62:ce:9f:47:2a:3e:39:5b:
28:38:ba:2c:55:87:80:1b:74:91:21:0a:c8:81:4b:4f:24:e0:
8a:93:c8:90:61:9b:8e:42:30:75:c1:82:3d:7b:ce:e6:31:cc:
22:b8:3c:07:81:ed:eb:0b:27:aa:55:8a:6a:2b:97:20:a6:12:
6d:3c:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:35 2025 by rpki-client