This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cab92bc-9aa1-4b48-83bd-11590a716fb1.roa
File: 4cab92bc-9aa1-4b48-83bd-11590a716fb1.roa (raw, json)
Hash identifier: bNNrS6/cKwfykxlO8AT1SBlAomsDCaeWgk+ORHJwDDU=
Subject key identifier: 20:E5:ED:41:0C:30:42:AF:2C:E8:47:A9:6F:AC:F6:66:8B:8F:6A:EA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 463A31866ED96E1020F8AA123125B70DB01D7D86
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cab92bc-9aa1-4b48-83bd-11590a716fb1.roa
Signing time: Sat 29 Nov 2025 02:21:03 +0000
ROA not before: Sat 29 Nov 2025 02:21:03 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.88.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3a:31:86:6e:d9:6e:10:20:f8:aa:12:31:25:b7:0d:b0:1d:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 02:21:03 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=4b63bca31ff697fa60328a8fb7a50537642af7d2075fd1c3bba34579e650c5bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:e3:81:11:4c:57:ff:52:e5:d1:93:90:f4:
53:47:e6:84:70:26:09:47:62:0e:14:cc:c3:2a:ad:
3e:88:bd:0d:1c:01:17:ce:af:07:7d:ad:f6:70:49:
ad:dc:71:d3:b0:89:39:f6:e0:6d:a8:c0:eb:c3:e0:
08:33:d4:ef:fe:3b:75:32:85:cc:df:20:31:54:36:
08:1a:46:08:47:f7:33:55:95:c9:21:33:d8:ee:c7:
79:35:2d:98:56:4b:5d:21:96:91:ca:1b:3c:0e:65:
ac:9a:ab:18:e2:f2:5b:14:84:9d:a6:5e:ee:e6:12:
62:9f:a1:e5:27:94:0a:b8:75:31:9d:bf:49:1b:ab:
cf:2b:e5:75:51:13:5b:1d:39:0d:2b:fe:39:0e:56:
1d:c8:28:05:05:0b:30:ad:b2:4f:94:5c:3d:6c:46:
81:23:7e:7e:e6:95:85:d4:cd:b7:7c:be:fd:0c:65:
c6:f2:43:cd:32:cb:7b:7a:9b:83:cf:88:43:ab:06:
b8:24:3b:40:4a:08:a5:13:9b:b1:86:30:bb:be:06:
71:d3:db:08:e5:fa:7d:b4:52:5f:68:a9:c3:3f:94:
96:a5:9d:94:bb:3d:d0:c3:1e:c8:2e:07:e3:4d:93:
9d:6e:6f:b2:00:20:90:0f:e1:04:9b:55:26:e5:db:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E5:ED:41:0C:30:42:AF:2C:E8:47:A9:6F:AC:F6:66:8B:8F:6A:EA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cab92bc-9aa1-4b48-83bd-11590a716fb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.88.0.0/15
Signature Algorithm: sha256WithRSAEncryption
af:06:53:e6:86:91:55:ac:e2:22:8f:2c:7a:83:4a:ea:d3:ed:
f6:7a:54:6b:28:3b:32:9a:42:86:da:3a:2d:3f:29:00:14:96:
0e:d7:79:c4:27:80:25:50:cf:4e:c2:a5:f4:31:3f:73:01:49:
14:92:bc:fb:c8:ca:fe:55:3f:05:7e:80:5b:43:f5:c5:71:8a:
e9:35:18:a4:41:33:93:b8:cf:fb:44:38:38:dd:93:69:7a:7d:
bf:63:da:0c:8b:8b:3a:28:02:fe:d8:dc:3e:e9:9e:60:73:5c:
6f:af:66:15:a6:bc:e6:02:dc:ad:3e:f0:9f:68:61:75:ee:d1:
91:df:18:e7:2d:65:de:d6:65:11:89:91:f3:83:bb:88:39:ba:
4c:77:53:8e:24:37:81:74:5a:89:df:2d:db:34:83:10:d0:79:
ba:19:9a:49:c4:e9:4f:f7:e6:51:a4:95:a4:a6:c3:b6:25:28:
64:ff:8d:2d:4b:13:14:9f:77:84:d4:a2:6d:36:2f:90:c2:5f:
29:ce:11:61:1b:11:14:01:d7:8c:88:1f:de:98:14:b7:c0:05:
87:34:0c:56:15:53:1a:ea:9e:f4:04:4e:84:8d:12:c6:e1:cd:
de:3a:f3:24:09:99:0f:89:41:7a:a4:c8:38:47:cf:94:f4:69:
fe:9c:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:25 2025 by rpki-client