This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54568daf-56db-418f-b2da-5826999cac49.roa
File: 54568daf-56db-418f-b2da-5826999cac49.roa (raw, json)
Hash identifier: aifKZFpe2/yVi4gkAQ+SxcC5Pb2erBtUi8hCpcH7+GQ=
Subject key identifier: D7:5B:24:C1:FE:FA:B2:29:A7:68:B8:14:7B:2F:EA:C7:4B:61:32:9D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3F3B9C1E25E19CCA7AD7762D1E78F0C41230D151
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54568daf-56db-418f-b2da-5826999cac49.roa
Signing time: Sat 29 Nov 2025 01:41:15 +0000
ROA not before: Sat 29 Nov 2025 01:41:15 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.66.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3b:9c:1e:25:e1:9c:ca:7a:d7:76:2d:1e:78:f0:c4:12:30:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 01:41:15 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=d4293465cde24ce443d3b1a540a5fef1dfabf3aa402e26a4f6dc65ee8e5b527a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:b8:e4:a7:23:67:86:68:e1:87:ba:c5:e0:
78:4a:34:54:bc:8f:03:1d:c6:6c:e2:b4:a3:96:6a:
ff:0d:e2:88:ab:27:36:f0:fa:6c:f2:4a:22:1e:02:
a8:dd:71:ab:6b:70:82:ad:d9:cd:28:69:52:f7:ef:
d6:ad:cd:c8:62:12:8d:2c:0a:da:70:9f:58:46:e8:
2d:7f:a2:21:5b:ab:f1:8e:49:d8:53:24:02:9b:e8:
a2:c3:79:d6:a0:5c:52:dc:a4:dd:e9:38:66:5c:78:
f0:e3:69:52:5e:c0:ef:66:3c:14:ce:f4:27:01:6e:
9b:ed:65:8c:24:fb:6e:2d:5e:d1:74:17:c1:fb:bf:
a2:17:e2:9b:ff:bf:a1:fc:ee:79:64:4d:ef:03:6a:
0d:55:6a:ae:ff:e6:3b:03:19:75:07:fe:ab:16:b1:
75:d4:c5:e8:3d:76:b9:c3:e2:58:59:a9:8c:97:61:
6a:c8:bc:5d:56:1a:fb:3c:3c:4c:21:79:df:18:d4:
c3:46:dd:a4:42:0c:4d:46:01:3a:86:e1:93:9f:be:
14:9c:44:bd:3c:62:43:fc:3b:62:a5:84:6d:2a:58:
ab:1d:54:01:c8:61:c8:0e:61:c6:78:5b:0b:8f:07:
37:6d:29:da:68:70:9a:b3:44:d8:29:54:11:4b:4e:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:24:C1:FE:FA:B2:29:A7:68:B8:14:7B:2F:EA:C7:4B:61:32:9D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54568daf-56db-418f-b2da-5826999cac49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.66.128.0/17
Signature Algorithm: sha256WithRSAEncryption
01:74:5b:e1:01:8f:64:2c:fe:4d:64:ba:79:23:c1:8f:c8:56:
92:ed:44:fa:f2:87:49:c9:3c:84:2d:fb:81:7e:29:41:b5:51:
70:47:f7:57:e5:e8:f6:08:aa:50:46:03:53:99:1b:3b:5a:35:
c5:f1:81:1d:cb:f4:b0:c2:85:0e:15:fb:17:ea:c2:56:cf:74:
91:ea:c5:59:d0:75:70:68:af:f3:3c:e5:ad:a9:c4:f9:19:13:
03:2d:6f:61:52:44:cc:8a:ec:fa:7e:ad:70:11:df:af:e0:77:
7c:59:de:c0:56:d1:21:46:ce:a3:ec:c0:1e:3d:16:16:ac:d8:
17:e7:4a:a2:64:a4:87:5d:c9:aa:99:5a:d6:77:81:4b:9e:50:
39:52:be:90:a6:75:29:d9:a8:54:d1:b8:d6:8b:5c:1c:06:f4:
8e:94:eb:ad:1d:c2:a2:6e:17:77:30:52:0f:fc:0e:84:50:4d:
8a:9b:ae:26:9b:d9:a9:23:c0:cf:f4:7f:3a:1b:9b:91:b1:6b:
79:93:d3:3a:14:49:a9:cc:a8:1a:eb:83:71:27:40:5f:cf:23:
7b:8c:e4:36:aa:a5:26:78:93:f6:12:db:13:2f:88:10:d9:a3:
18:11:6e:06:ed:8e:ad:4a:ef:a6:d5:1c:00:da:53:70:e0:8f:
8c:a1:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:01:27 2025 by rpki-client