This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d1b07c0-98b3-4578-85f9-7964c0554db7.roa
File: 3d1b07c0-98b3-4578-85f9-7964c0554db7.roa (raw, json)
Hash identifier: 705xT4ravk2UWGl4LE5egewt5IoN0cpb8bCmpybIBHc=
Subject key identifier: 70:91:EA:2B:34:0C:D0:2F:59:BA:69:5C:98:9C:E1:6C:56:BD:D8:F8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 524F77674A7D84A07E4EA108C5FCE95BD0E2A59C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d1b07c0-98b3-4578-85f9-7964c0554db7.roa
Signing time: Tue 11 Nov 2025 02:50:46 +0000
ROA not before: Tue 11 Nov 2025 02:50:46 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:4f:77:67:4a:7d:84:a0:7e:4e:a1:08:c5:fc:e9:5b:d0:e2:a5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 11 02:50:46 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=af0df21ddc68429dc700f2500920a4b3ae574eabeef7a7b6ade9adf40c703a93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:87:5e:61:52:98:87:89:b1:7a:b9:6f:71:
0a:7e:af:fc:30:86:32:63:83:4c:4f:fb:80:15:28:
d8:68:61:ac:6f:d3:b6:57:89:46:0d:28:64:1c:65:
61:6d:45:10:7a:3f:0d:5e:fb:1d:7e:0f:60:63:28:
7a:bd:df:05:f0:a9:89:56:48:08:ed:5c:d7:98:eb:
46:05:36:88:0f:5e:bc:9d:a2:e2:b6:f3:eb:ce:a4:
d0:5a:9a:e1:92:8e:79:09:80:c2:80:41:52:d6:15:
42:2b:5b:79:2f:52:4b:45:3e:1f:e4:e0:db:c6:e8:
48:d0:d2:3b:71:dc:da:dc:b7:65:f0:59:ef:9b:2f:
83:39:22:c5:6a:17:fe:e8:84:3e:39:d2:c8:b7:d1:
1c:bb:9d:c7:11:2b:f0:f1:8f:f0:41:4b:85:b9:ff:
8f:f3:2c:d3:d4:23:2b:79:1b:4f:3c:3e:56:f9:b3:
03:fb:c3:4c:b6:fb:96:1b:2f:be:1d:59:87:e1:8d:
18:42:21:be:53:0d:f7:3e:82:54:a0:9b:3e:0d:f4:
30:08:f5:4c:1d:72:88:f6:60:ec:82:10:58:dc:39:
a3:bc:d1:85:2b:3e:9b:b0:91:da:e3:fe:c9:56:41:
8d:2b:3d:90:f9:ff:71:74:38:0a:e3:9d:43:e0:e1:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:EA:2B:34:0C:D0:2F:59:BA:69:5C:98:9C:E1:6C:56:BD:D8:F8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d1b07c0-98b3-4578-85f9-7964c0554db7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.132.0/22
Signature Algorithm: sha256WithRSAEncryption
64:a9:60:5e:7c:ad:27:69:d8:dc:e5:b5:65:48:cb:8d:db:2e:
ef:de:70:d0:b9:66:d6:b0:d9:6c:67:4d:a4:6f:a9:cc:d4:fd:
1f:49:af:39:e5:93:24:49:a4:4a:10:bd:d8:e7:1c:74:25:f5:
19:2c:de:af:31:67:d3:4a:0d:22:60:d9:41:f9:a3:fa:30:c7:
ff:88:83:a2:76:25:8d:4e:f2:03:15:6e:07:42:1f:b5:61:72:
94:b5:eb:05:1d:dd:cc:ae:a3:13:33:a4:ca:81:40:67:ae:11:
49:70:bc:75:ce:c3:8b:84:ca:6f:c8:51:d6:d7:d7:0d:6c:26:
75:54:14:e6:05:19:d9:e3:15:4a:09:b0:16:1b:7f:69:5d:9c:
53:6d:e8:55:1c:c8:fa:c7:6f:60:78:6b:76:05:2c:44:e6:67:
8b:29:40:76:36:3e:61:d7:5e:2c:01:3a:a3:a1:bf:4d:d1:2c:
c4:bd:b6:fd:86:63:55:6d:2a:c4:48:1c:02:78:99:e5:93:79:
34:f9:a8:23:46:c5:69:43:09:8b:ff:77:e5:9a:1c:25:4b:68:
1b:c6:be:18:e1:19:b6:dd:6a:cb:d7:11:bd:46:69:c6:b7:a9:
50:4a:96:00:98:8e:9f:74:cf:5a:ad:45:8c:f3:61:52:15:e1:
47:b0:af:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:01:14 2025 by rpki-client