This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5177b928-5de6-4c30-97fe-987774456daf.roa
File: 5177b928-5de6-4c30-97fe-987774456daf.roa (raw, json)
Hash identifier: X+Ynb9+XGvPUGM6ZkkF9DnjR32IhI64IsxSKdhJnhD0=
Subject key identifier: 37:B3:D4:4A:85:48:EF:1E:0A:95:9B:37:7D:1A:5F:00:BF:06:84:39
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 492B9A36CEE594D2744D7A0FD9A8A41C78D8ABE3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5177b928-5de6-4c30-97fe-987774456daf.roa
Signing time: Fri 05 Dec 2025 02:11:37 +0000
ROA not before: Fri 05 Dec 2025 02:11:37 +0000
ROA not after: Thu 05 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 144.220.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2b:9a:36:ce:e5:94:d2:74:4d:7a:0f:d9:a8:a4:1c:78:d8:ab:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 5 02:11:37 2025 GMT
Not After : Mar 5 23:59:59 2026 GMT
Subject: serialNumber=8a610a50933f7c19a0cb9f301d10bb31e3b0bf2e45c51a601d338d2761b24428, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:b0:83:7e:d6:87:74:dd:14:97:5d:d0:90:
ef:e1:70:15:32:a0:2b:3c:3c:7a:48:37:39:2b:fe:
20:2c:64:8a:75:b7:a8:9e:62:04:93:50:39:6d:1d:
b4:01:6c:c7:19:e1:d7:40:69:18:4f:24:07:9d:99:
ce:a9:72:58:7c:be:11:1f:33:32:cb:e9:5d:42:e6:
f3:6a:4f:3f:7b:91:4a:dc:ab:d1:8e:10:e4:b2:b5:
97:68:c8:34:d3:c0:c3:b2:d0:a4:14:39:b5:3e:d2:
f0:22:e6:e4:43:4b:64:b7:b6:f6:35:68:33:66:f4:
59:36:37:cd:ba:87:06:06:9b:52:29:af:d8:68:78:
29:00:80:09:66:17:50:0e:15:c5:29:c0:df:62:ef:
a9:b2:44:58:7b:84:5f:ef:f8:9c:fc:42:a7:14:16:
07:52:5c:8d:cd:fa:33:2b:c8:af:73:53:5d:7a:11:
dc:ce:61:38:94:e8:8a:58:9d:0e:6c:2e:a6:71:81:
ce:dd:19:3e:7b:aa:02:99:13:fb:6a:2b:f4:f1:86:
45:01:5c:56:d8:86:c0:28:dc:45:c9:bf:c8:8b:ab:
b5:1d:e4:90:cb:cb:63:2a:1a:aa:36:0c:23:96:40:
45:07:05:f1:61:a2:6e:51:1f:6a:e6:17:dd:9f:a4:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:D4:4A:85:48:EF:1E:0A:95:9B:37:7D:1A:5F:00:BF:06:84:39
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5177b928-5de6-4c30-97fe-987774456daf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.220.25.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d0:05:50:d1:ec:a7:bb:95:d7:65:cc:68:df:42:7e:e9:98:
ba:dd:4a:bf:75:a7:6c:26:a3:6f:5d:e6:1e:e5:db:92:f6:08:
81:7d:eb:8f:18:87:f6:91:f1:ef:7e:5d:76:f8:10:a1:d8:21:
6c:96:fd:c8:1b:43:cf:64:e8:23:da:e7:0a:dd:72:eb:90:8f:
a1:bf:e8:f8:b0:f4:b2:34:51:1d:e5:e5:b6:ff:28:34:2d:94:
bf:6a:5f:c0:c8:33:a3:67:e0:d7:03:93:f9:5a:b0:8e:e1:78:
1d:60:d1:b6:be:5c:56:78:bc:d0:2a:0b:d2:3a:3c:e9:7a:d7:
7d:50:8a:ce:fa:06:b5:d8:e3:4e:e1:84:f7:06:fe:9c:08:76:
5d:bd:8e:4a:66:44:a5:68:9a:bb:dd:21:e8:e7:4b:ff:b4:e8:
a7:be:8a:3a:5b:70:ce:ab:dd:1c:ff:ea:3c:6d:f6:b3:eb:27:
a7:60:0d:c8:69:97:b4:8f:1e:89:58:d1:00:70:40:9c:cc:f6:
bc:b7:df:db:5b:0e:3a:56:64:6e:34:df:17:05:9b:fa:85:47:
45:6d:11:47:22:d1:51:57:f7:14:bf:6b:aa:47:95:e2:dc:a7:
d3:fc:64:b3:b4:3c:19:76:bb:6c:d2:d5:3f:ab:59:d3:fa:9a:
a7:f9:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:53:06 2026 by rpki-client