This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47d76cb8-4a77-4b47-bcc1-2306da9cea6d.roa
File: 47d76cb8-4a77-4b47-bcc1-2306da9cea6d.roa (raw, json)
Hash identifier: UHM3q8yCrOjeZHETfRTh0w2GbAsBIW1KqOx3wt7AbBc=
Subject key identifier: 7F:08:AF:EE:00:35:92:60:BE:14:94:C2:0E:10:7C:96:C6:9A:D8:60
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5778BC3ACF71CB9CF171BF765C1E9DD641894E08
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47d76cb8-4a77-4b47-bcc1-2306da9cea6d.roa
Signing time: Sat 15 Nov 2025 04:20:12 +0000
ROA not before: Sat 15 Nov 2025 04:20:12 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:78:bc:3a:cf:71:cb:9c:f1:71:bf:76:5c:1e:9d:d6:41:89:4e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 15 04:20:12 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=33e4c3b1697af085fad3543ea504859586429bc1c628a95f7665ec0b06e07665, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:1a:04:b5:97:a8:a7:59:4e:9f:80:e0:a8:
7c:f2:8b:27:01:68:06:dd:9c:68:9f:21:72:70:40:
88:e9:1c:7d:4b:1e:df:d0:f1:a6:9b:1f:50:43:1e:
fd:bd:3d:e8:de:f4:5c:82:47:87:1a:32:7f:21:fb:
7e:38:5c:0c:7d:19:36:13:cd:93:ea:27:6e:9b:fe:
fb:ef:8b:79:8e:75:5b:81:72:2d:eb:a1:bd:88:d6:
35:e3:b2:2d:a4:55:ce:52:ad:e0:45:82:2b:c3:ff:
50:30:1d:e1:73:ba:22:3a:e0:aa:86:6f:a7:51:cb:
de:7f:c5:a7:d8:1c:d0:36:64:5a:1c:ed:fe:e0:36:
e3:5d:30:7d:fd:3f:a6:0e:cb:50:7d:71:df:23:aa:
9d:90:aa:c6:70:dd:9a:0e:8d:fe:d4:de:91:1b:90:
c0:09:42:35:7d:bf:25:f7:35:5d:85:d5:40:47:7c:
c5:7d:a1:ec:53:36:9c:3e:3a:37:e1:50:fb:60:83:
64:1e:dc:4d:02:7e:74:3e:ae:ad:01:81:09:5d:5d:
ff:ff:45:97:0b:36:e4:77:3c:57:d0:52:26:20:dc:
73:3b:e4:2c:90:99:6c:56:46:6b:cf:c4:df:3b:74:
ca:5c:04:69:8e:e3:45:69:5d:05:b7:8a:99:5f:00:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:AF:EE:00:35:92:60:BE:14:94:C2:0E:10:7C:96:C6:9A:D8:60
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47d76cb8-4a77-4b47-bcc1-2306da9cea6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2a:06:c0:f4:06:29:10:8b:ad:75:ae:40:c2:4b:73:24:5a:
39:f3:b1:1b:79:75:73:ea:85:0b:00:b4:ba:6b:7d:09:3c:97:
8c:9d:60:fc:a1:ea:7a:14:b3:8c:31:1d:bd:2b:5e:42:19:3c:
a1:64:90:93:43:d5:30:cf:8f:2f:86:98:45:a4:0d:4d:bc:af:
96:84:49:39:e3:19:c7:5b:7f:38:d8:0a:08:b4:e8:f9:0c:32:
13:20:3b:d9:08:f0:74:af:16:9d:e3:b4:41:cc:a9:0b:71:49:
5a:17:01:ae:35:d2:40:12:31:0d:f9:6c:b4:01:b3:4b:08:16:
3b:b2:69:f7:0a:ba:3b:6c:07:b9:bf:15:ab:dc:10:dc:43:d7:
e6:8c:2e:20:5a:5a:f5:9d:70:0f:84:bd:c4:b4:3e:00:8b:2d:
3d:68:74:fc:60:78:2f:37:f2:2f:b3:5c:37:c5:6c:a4:1f:0d:
d2:25:51:09:ce:d8:95:9b:21:d6:1c:1a:83:6b:f0:7e:37:f7:
6c:9c:79:17:4d:aa:f8:e7:b4:e2:86:10:f2:57:82:26:93:85:
1a:24:0c:d6:6a:37:98:8b:94:10:5e:67:2d:b7:c6:bb:43:6e:
d2:36:cb:ad:72:3e:31:07:7e:74:74:4f:96:f7:d5:c6:5e:31:
30:b3:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:40:08 2025 by rpki-client