This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32656923-9ec4-40b4-9ede-e8bf9d5fca35.roa
File: 32656923-9ec4-40b4-9ede-e8bf9d5fca35.roa (raw, json)
Hash identifier: yJQn7O0YnsvOoqzUSNgB1cUYkVmRWAVw8E5/v3Ku3/Y=
Subject key identifier: E0:84:F0:17:3D:DE:9E:E1:D3:51:33:2B:3A:42:7C:41:6F:3F:49:B6
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1A496D60F64FA5252ED041639A7C3163DA637F2C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32656923-9ec4-40b4-9ede-e8bf9d5fca35.roa
Signing time: Mon 10 Nov 2025 01:41:42 +0000
ROA not before: Mon 10 Nov 2025 01:41:42 +0000
ROA not after: Mon 15 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.94.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:49:6d:60:f6:4f:a5:25:2e:d0:41:63:9a:7c:31:63:da:63:7f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 10 01:41:42 2025 GMT
Not After : Dec 15 23:59:59 2025 GMT
Subject: serialNumber=4f5522495117f2bee8098a67b0ea8fa18996987bb85031e010261cad43d26c12, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:c7:0b:71:dd:79:8a:a4:27:57:bc:db:24:
8c:72:56:ee:4e:9b:19:43:30:dd:a5:9d:7a:90:e7:
9e:a7:77:b6:48:81:40:cd:3d:a4:cb:78:51:78:5e:
11:ee:04:4f:d4:28:4e:d5:fa:0d:8c:7b:a3:e9:c9:
89:6d:43:ec:91:4b:8f:5c:ab:4c:ec:b4:e7:47:95:
cb:4e:92:d7:75:91:06:e2:9b:4b:45:dd:ba:04:79:
75:4e:03:b3:d0:48:a7:92:7e:d8:ee:5c:32:53:df:
7a:11:cf:ea:bd:2c:67:62:e4:aa:33:35:84:37:7d:
bd:04:20:5e:9e:51:3f:55:a4:cf:a4:52:7e:56:d7:
25:0c:4d:2a:a9:18:81:96:f2:0c:99:77:8d:70:95:
85:4e:b2:9d:ff:18:d6:63:a1:4e:de:fa:49:13:71:
3d:7c:a8:35:ab:00:45:10:da:8d:65:5b:99:16:4b:
55:23:b1:ea:8c:4b:04:b1:fc:d5:c2:56:f2:c2:aa:
b5:03:8d:48:49:f7:13:b0:53:3e:b5:3d:c9:8b:2b:
c4:04:c8:89:22:d2:77:39:0b:f7:a0:78:3d:1b:d5:
c9:7c:fc:db:ce:da:8d:8b:0c:b1:aa:89:26:80:e4:
62:71:7a:7c:70:37:37:6b:7a:2c:ca:7b:5c:30:56:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:F0:17:3D:DE:9E:E1:D3:51:33:2B:3A:42:7C:41:6F:3F:49:B6
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32656923-9ec4-40b4-9ede-e8bf9d5fca35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.152.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:40:85:b1:8f:aa:57:e7:a7:d9:97:a8:af:cf:49:77:df:a2:
56:96:97:6b:32:15:02:fc:8d:72:aa:66:d2:33:01:c4:10:40:
63:f5:8a:31:5f:8e:d8:5d:4f:3a:64:1a:2a:14:6d:3e:40:31:
f4:be:60:f0:f1:e1:ec:07:db:64:12:49:4b:dc:6f:87:0f:3f:
0c:9d:2b:4a:1b:cd:e0:e1:ea:81:6d:ab:89:3b:c6:29:e9:96:
29:d0:59:19:3b:6a:ab:9f:57:68:1c:2f:15:0e:a1:d2:ab:87:
4c:45:c6:e1:01:69:47:54:b7:ad:59:34:af:02:e2:f9:4d:c8:
65:05:e9:05:47:f6:e6:a1:21:57:d3:76:67:63:2f:a9:e0:24:
3a:a4:95:6c:4a:7d:4a:fa:13:8e:e9:3d:7d:0d:64:fd:f6:7c:
06:31:7f:05:fb:f0:28:aa:66:62:06:1f:89:98:7d:4b:ff:a9:
45:1e:51:4e:4d:0a:46:cd:a3:36:06:5b:5c:02:bc:4f:a8:71:
f9:48:48:21:3a:12:1d:16:62:8e:5a:f9:0f:82:0f:1e:a0:93:
5a:e2:a8:6c:d1:15:10:e6:be:a4:fd:52:4b:00:c2:ea:5c:88:
fa:33:d7:76:47:26:ea:57:a7:cb:19:de:7f:73:9c:53:31:b8:
41:14:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:39:15 2025 by rpki-client