This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3623dc19-022a-4a7a-8a6b-a47be66dff37.roa
File: 3623dc19-022a-4a7a-8a6b-a47be66dff37.roa (raw, json)
Hash identifier: 89rAN1Xr5FGJynDs20vMGMT/ILUi7nNj+yiYlS2H9JI=
Subject key identifier: 34:97:0F:FE:EF:76:95:BA:92:BC:09:33:73:C8:1A:4A:9F:02:6B:9E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2BBBE24C1D9ECFC450DEB6389C32D85B4A21FDEC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3623dc19-022a-4a7a-8a6b-a47be66dff37.roa
Signing time: Wed 12 Nov 2025 02:41:17 +0000
ROA not before: Wed 12 Nov 2025 02:41:17 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.251.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:bb:e2:4c:1d:9e:cf:c4:50:de:b6:38:9c:32:d8:5b:4a:21:fd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 12 02:41:17 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=23514a258b9356baad6a7c95e15e9b39bddc60e51a0297a84043f7b2b8c76bac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cd:e8:22:d8:35:27:c6:b9:82:0b:09:13:28:
69:86:02:42:13:c3:57:59:3e:cb:89:19:18:0b:de:
cc:99:77:82:06:08:65:2d:a5:b0:aa:28:c2:3e:1c:
7f:55:80:4f:bf:56:eb:53:49:b1:89:90:7c:71:78:
bb:c1:2b:13:1e:43:05:10:87:1e:4a:ad:3c:86:65:
f7:68:e3:db:ac:de:a0:2c:59:ac:ab:7a:44:65:2e:
9d:9b:89:35:77:96:a6:7e:91:f4:85:f1:09:d4:ec:
f3:0e:64:49:6a:2c:91:2f:fc:03:17:f1:62:70:73:
2a:be:24:71:33:76:5e:13:e9:c4:f5:3b:f3:da:2a:
e9:af:e2:b9:3e:03:8f:30:34:9e:4a:15:5b:14:63:
6b:85:aa:42:b4:c1:bc:7e:ec:f0:47:08:ad:88:e3:
13:53:a5:2c:16:9f:d1:51:72:b5:bd:a2:c8:cb:af:
40:45:61:fc:14:e1:8c:1f:a3:8f:91:06:b2:e2:77:
b5:00:7d:f5:48:f6:6b:b2:c9:97:6b:09:3b:4a:d4:
de:87:c4:17:e9:58:a2:ea:2e:c1:46:6a:b5:e0:22:
aa:74:93:6c:4b:20:c2:68:04:ed:a7:47:a3:be:15:
0a:61:2d:b1:3b:fd:0c:6e:e7:4a:5a:08:a2:48:ba:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:97:0F:FE:EF:76:95:BA:92:BC:09:33:73:C8:1A:4A:9F:02:6B:9E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3623dc19-022a-4a7a-8a6b-a47be66dff37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.251.252.0/23
Signature Algorithm: sha256WithRSAEncryption
53:81:a8:b3:82:49:51:36:75:5c:25:f8:72:3a:b6:70:e7:8a:
d6:f3:50:13:9a:bd:12:1f:e7:84:5a:69:24:8b:8d:36:73:2c:
d5:7e:26:3e:01:dd:a4:39:c4:75:46:c8:32:d1:01:0e:fa:63:
f9:00:82:e0:ec:1d:e8:01:77:af:b6:88:37:49:bf:ce:ed:5f:
4f:a5:e2:d7:89:a5:84:7c:46:e5:07:aa:d0:ac:64:7d:df:77:
5c:63:04:65:47:5c:d5:f1:23:c9:bc:18:7d:ea:31:f8:2d:4c:
83:e7:67:b2:04:48:8c:e7:c2:51:be:d2:ce:03:d6:4d:ab:82:
ee:79:24:d5:a0:60:b7:ab:46:2c:e1:ca:38:72:e0:fd:3e:cd:
26:b4:48:66:b7:fc:1e:de:db:d9:45:08:89:e9:01:1e:78:08:
10:f1:b5:25:b3:92:d1:88:77:a2:da:04:2a:27:a2:40:59:fd:
f5:95:0e:26:89:3f:01:ee:3a:e9:6d:08:76:d1:e5:2d:2c:52:
db:a4:95:dd:c4:1b:d0:cb:5a:83:64:53:a0:ea:a6:c0:bf:9d:
de:b4:3c:39:d7:85:24:9a:72:f8:b5:98:dc:7a:74:58:f0:28:
da:da:2e:7d:ae:a5:18:8b:1a:4d:1e:68:6c:09:03:68:be:71:
0d:9c:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:00:07 2025 by rpki-client