This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2579f5-f2b5-43e8-871b-7d661a802641.roa
File: 3f2579f5-f2b5-43e8-871b-7d661a802641.roa (raw, json)
Hash identifier: ohz7mEwovuAFUZVws9jVtmNTHzXkY8K45zAv5fcw4ag=
Subject key identifier: 45:3D:FA:A4:28:B7:B6:0F:11:EA:D5:19:AD:0F:C5:96:D9:21:53:66
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0A1BA6E25FD996C4253B4F5D26526D066A61AC4C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2579f5-f2b5-43e8-871b-7d661a802641.roa
Signing time: Wed 10 Dec 2025 02:01:19 +0000
ROA not before: Wed 10 Dec 2025 02:01:19 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 8987
IP address blocks: 18.253.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1b:a6:e2:5f:d9:96:c4:25:3b:4f:5d:26:52:6d:06:6a:61:ac:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 02:01:19 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=58738672818b29e86ed872df4163d4168eb38e7403ed40809e58c777c77985a1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:22:d3:98:5e:25:d9:1b:48:3b:b4:43:0a:
5a:25:00:cf:a3:0c:e8:af:65:e8:5b:f8:8c:f2:cd:
75:62:8e:e1:5e:c0:f1:8f:e4:8b:ac:ce:0a:7b:72:
39:74:f3:b6:7f:5b:10:b1:bb:11:2c:da:98:67:77:
ae:32:10:d7:19:88:70:d4:70:5c:67:37:4c:77:3f:
0a:90:8f:0b:07:58:81:c8:25:1b:82:ca:ac:54:6e:
47:23:06:ff:63:d3:74:d4:92:73:97:3c:18:bf:88:
07:dd:a3:be:a4:01:66:ae:61:7c:5c:4a:90:ed:b8:
d1:07:69:7f:d8:94:e6:8e:9b:56:4a:15:42:ae:ef:
ad:e8:11:3f:96:98:13:e7:07:e5:e6:9c:25:91:67:
22:35:2d:db:0a:62:ca:6c:17:d1:b9:78:c4:b5:84:
40:da:fa:6e:3e:f3:50:de:97:da:b7:bc:48:d5:bd:
cf:d5:4d:e9:de:2b:7f:dd:7c:71:a8:6a:0b:cc:28:
5a:cc:50:ae:6f:c0:61:c9:78:42:3a:3c:0c:b9:cc:
e1:7b:e0:c9:2a:32:35:bd:79:65:b0:29:fd:35:ca:
0a:d4:bd:e8:35:39:6e:c6:56:46:c1:8d:02:f1:9a:
39:f4:1c:97:4c:3d:aa:8d:c3:d7:38:e1:8c:d6:28:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3D:FA:A4:28:B7:B6:0F:11:EA:D5:19:AD:0F:C5:96:D9:21:53:66
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f2579f5-f2b5-43e8-871b-7d661a802641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.253.128.0/17
Signature Algorithm: sha256WithRSAEncryption
6c:13:fd:1e:35:a1:b5:3f:a6:f3:c3:d2:16:45:e8:d4:9e:4d:
65:37:cd:bd:30:5a:c0:74:04:a7:33:3f:4c:09:18:03:d9:70:
ea:d1:1f:12:77:91:8d:1a:75:fe:38:43:21:1b:13:0f:82:35:
c0:5b:7c:d8:8a:31:0f:f6:39:4f:9b:6f:77:ef:e2:f6:18:62:
8d:75:5b:0a:3c:1f:46:b0:de:8d:94:04:94:9a:cf:01:f2:0f:
cd:16:03:c2:f1:1e:48:ab:29:d7:fa:df:d1:bc:a5:ab:86:3b:
8f:7e:dd:a8:30:94:9c:b6:ab:43:51:c8:ac:6c:dc:b9:82:94:
93:b8:be:f2:b5:e2:ce:a4:32:a9:ae:16:bc:12:02:aa:86:d3:
0f:c0:4a:25:0a:6a:53:fd:33:8c:15:1a:3b:70:22:a3:23:e6:
38:f6:e2:39:5d:1c:2b:8a:c2:63:06:22:2f:0b:14:40:e2:9f:
cc:2d:28:8d:d7:7a:2f:51:a6:7f:ab:51:41:32:cf:12:aa:fb:
8f:57:c6:0b:bb:5b:e7:e0:72:55:5d:a2:3e:f5:2a:87:b4:00:
87:f8:8f:55:12:cd:bb:5b:b0:4b:97:87:51:fe:52:c0:dd:9f:
a9:38:27:cd:58:bd:12:ee:f0:6b:64:5d:de:f8:2c:70:88:6f:
24:c4:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:54:08 2025 by rpki-client