This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f06510e-3477-4d8c-ab04-e3435000a697.roa
File: 4f06510e-3477-4d8c-ab04-e3435000a697.roa (raw, json)
Hash identifier: 5PNN+AlVJ9HykjP680KNxyMuJsBo09D4gOC/uHc6eF0=
Subject key identifier: A2:75:09:D0:9C:CD:7C:38:3C:4A:7A:3B:06:38:58:0E:A3:1E:2F:0D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 21EF6E2DEF6AA9978F7FE2264A9CA2EF1B7E3755
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f06510e-3477-4d8c-ab04-e3435000a697.roa
Signing time: Sat 15 Nov 2025 02:21:56 +0000
ROA not before: Sat 15 Nov 2025 02:21:56 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.173.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ef:6e:2d:ef:6a:a9:97:8f:7f:e2:26:4a:9c:a2:ef:1b:7e:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 15 02:21:56 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=b116dedd48b090e7c32e7392c7c95741841e36929e46e3effc90d1381960415d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:15:18:e0:83:7d:5a:09:ea:c6:b0:f7:14:
02:3b:8c:6b:35:ee:6e:ff:32:27:d9:06:40:8a:63:
32:ee:7f:3a:66:61:d2:48:11:9f:b2:99:70:8f:8d:
70:1b:bb:dc:91:d4:08:4d:00:f4:4a:45:34:7a:60:
b5:80:36:41:bb:e9:54:68:33:db:e9:3c:0f:1c:5b:
ba:df:74:f8:2d:c6:df:24:f0:01:52:2a:9f:4b:5b:
aa:97:7b:b9:ac:e8:b3:8c:69:08:33:00:4c:1b:2d:
46:54:40:63:97:61:87:9d:ed:62:20:6b:26:de:b4:
58:cc:81:f4:f2:cd:a3:83:8b:80:a7:10:27:7c:85:
de:5e:93:1f:62:bf:ce:2d:dc:fc:37:7e:c9:7e:2b:
95:b8:d3:2c:78:c9:88:5b:08:cc:ed:2b:a9:fa:41:
ed:c7:7b:ec:84:6d:05:f0:7a:11:3c:43:2e:31:a0:
48:9b:2e:47:9f:8a:b8:e2:38:9f:98:fe:d4:fa:fd:
ee:6e:79:f4:be:09:15:29:4e:68:2a:14:bd:ad:4a:
dd:13:9b:71:07:d6:bf:42:2d:10:f6:15:1a:08:08:
c5:5d:9f:f3:9a:74:ad:b0:20:ff:4a:80:06:a7:aa:
55:c7:c5:e3:0f:e9:4e:1b:f9:01:5d:ab:3f:e9:94:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:09:D0:9C:CD:7C:38:3C:4A:7A:3B:06:38:58:0E:A3:1E:2F:0D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f06510e-3477-4d8c-ab04-e3435000a697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.173.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a7:36:07:f6:9e:9f:60:28:70:a4:0e:2b:b1:76:4c:83:af:27:
54:0c:0b:c1:ce:99:bf:d7:0a:69:62:00:bd:b0:9a:69:48:8b:
c9:8f:39:b6:ba:86:06:18:85:5c:05:ea:f2:26:0f:08:ab:02:
71:30:e9:3b:91:34:ff:cb:69:01:b1:4c:37:4d:1d:51:27:e7:
c5:68:39:0b:ff:76:b5:49:43:02:5d:5a:cf:ce:76:b0:0a:93:
48:fa:b2:ea:57:0f:d3:68:b8:99:f7:0c:98:a5:35:a7:61:42:
40:22:73:45:4c:85:f6:ed:e1:f0:db:76:bc:0e:6a:6a:c2:dd:
bd:39:78:ef:fb:98:dc:d7:8b:47:66:c5:f2:9b:20:a7:f9:a9:
25:26:c9:64:a3:c9:18:cc:54:a2:a8:dc:ee:47:b8:be:00:bf:
d4:f1:bd:fd:91:b9:1b:4a:8b:76:5a:27:ee:37:2b:75:77:79:
13:7a:0a:08:e5:71:fc:63:7d:7a:7d:f0:36:20:34:8d:4d:1f:
43:83:f5:11:9b:09:1b:e6:ec:f6:88:24:74:7a:12:6d:0a:39:
7d:75:1d:90:3a:df:42:cf:ed:ac:f1:61:99:cb:eb:37:d9:37:
96:d6:f7:21:7d:c2:83:eb:1e:24:7b:c5:fc:48:01:7f:af:8b:
78:af:1a:be
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIe9uLe9qqZePf+ImSpyi7xt+N1UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE1MDIyMTU2WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiMTE2ZGVkZDQ4YjA5MGU3YzMyZTczOTJjN2M5NTc0MTg0
MWUzNjkyOWU0NmUzZWZmYzkwZDEzODE5NjA0MTVkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDm8hUY4IN9WgnqxrD3FAI7jGs17m7/MifZBkCKYzLufzpm
YdJIEZ+ymXCPjXAbu9yR1AhNAPRKRTR6YLWANkG76VRoM9vpPA8cW7rfdPgtxt8k
8AFSKp9LW6qXe7ms6LOMaQgzAEwbLUZUQGOXYYed7WIgaybetFjMgfTyzaODi4Cn
ECd8hd5ekx9iv84t3Pw3fsl+K5W40yx4yYhbCMztK6n6Qe3He+yEbQXwehE8Qy4x
oEibLkefirjiOJ+Y/tT6/e5uefS+CRUpTmgqFL2tSt0Tm3EH1r9CLRD2FRoICMVd
n/OadK2wIP9KgAanqlXHxeMP6U4b+QFdqz/plB9JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUonUJ0JzNfDg8Sno7BjhYDqMeLw0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRmMDY1MTBlLTM0NzctNGQ4Yy1hYjA0LWUzNDM1MDAwYTY5Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYDrcAwDQYJKoZIhvcNAQELBQADggEBAKc2B/aen2AocKQOK7F2TIOvJ1QM
C8HOmb/XCmliAL2wmmlIi8mPOba6hgYYhVwF6vImDwirAnEw6TuRNP/LaQGxTDdN
HVEn58VoOQv/drVJQwJdWs/OdrAKk0j6supXD9NouJn3DJilNadhQkAic0VMhfbt
4fDbdrwOamrC3b05eO/7mNzXi0dmxfKbIKf5qSUmyWSjyRjMVKKo3O5HuL4Av9Tx
vf2RuRtKi3ZaJ+43K3V3eRN6CgjlcfxjfXp98DYgNI1NH0OD9RGbCRvm7PaIJHR6
Em0KOX11HZA630LP7azxYZnL6zfZN5bW9yF9woPrHiR7xfxIAX+vi3ivGr4=
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:37:41 2025 by rpki-client