This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/678da23d-fa69-4f4a-9566-8e7c71a6c347.roa
File: 678da23d-fa69-4f4a-9566-8e7c71a6c347.roa (raw, json)
Hash identifier: ojl9mb3VIFsoDNCZ04l8/NioWN1rh+c8SXdkCIDRUtU=
Subject key identifier: 74:A2:D5:E6:1E:AA:52:D4:70:CE:6F:04:F2:AD:3B:62:F3:A0:B6:76
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5D4B15D316F873419DA50FAE5646DA24E3439A7F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/678da23d-fa69-4f4a-9566-8e7c71a6c347.roa
Signing time: Sat 29 Nov 2025 02:10:10 +0000
ROA not before: Sat 29 Nov 2025 02:10:10 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 34.251.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:4b:15:d3:16:f8:73:41:9d:a5:0f:ae:56:46:da:24:e3:43:9a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 02:10:10 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=5f4830a893aa7576f9ea476a769fb1327c8eedbb858fac97a334adcd984c734f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:ef:55:60:8c:b5:60:ad:18:c7:61:a2:f9:
59:da:00:33:36:36:c7:a8:bb:94:eb:9f:98:a2:88:
05:f4:fc:00:01:c1:6b:83:4a:6a:6b:b3:35:0e:ae:
af:a9:ac:79:cf:38:6a:99:47:40:34:bd:0f:88:16:
93:4f:48:a9:31:fb:36:5a:e0:45:5c:38:aa:f3:c5:
ae:07:68:0d:ba:37:f3:79:7a:ed:b9:57:b8:b5:ef:
e8:0e:95:e4:da:02:59:fb:cf:55:a7:b1:52:f5:bf:
28:14:72:d5:7e:3a:eb:5e:72:de:9b:dd:c1:65:f6:
51:ac:bf:35:5d:91:dc:b6:69:ad:2d:65:8e:6e:b5:
47:c9:87:f0:1e:40:43:27:b8:66:10:a6:c7:c8:df:
2b:e6:37:0b:13:45:84:40:d0:00:93:5e:da:db:a8:
3c:e0:b6:a6:be:76:01:81:85:a8:ac:6e:5f:6d:f3:
07:6b:76:9c:ab:51:b6:67:97:1d:c2:34:5d:fb:c5:
bc:1a:fb:8e:2b:fb:14:2c:2b:f0:7c:d6:ff:4f:53:
f4:48:4e:26:fe:dc:ea:d0:e9:f8:05:90:b7:85:7e:
7e:b1:c4:38:5e:88:e5:d9:00:c3:ce:5c:31:0c:19:
03:a7:70:87:48:ca:8e:dd:30:7c:a2:53:0b:c4:b2:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A2:D5:E6:1E:AA:52:D4:70:CE:6F:04:F2:AD:3B:62:F3:A0:B6:76
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/678da23d-fa69-4f4a-9566-8e7c71a6c347.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
34.251.0.0/18
Signature Algorithm: sha256WithRSAEncryption
a3:6c:51:59:1d:f5:d7:9d:89:88:c2:6f:ff:6f:2a:30:1d:dc:
f9:f4:1f:ae:d2:ec:e8:3f:c0:6d:21:6c:1b:3a:ee:b2:44:19:
fb:38:e5:f9:fb:0f:c9:dd:bd:cc:c4:60:1c:ea:34:62:26:6b:
a5:5c:dc:45:e4:35:f2:b6:fa:4d:74:fc:51:95:62:22:ea:c9:
05:4a:46:bc:c3:16:e6:e3:27:08:69:2b:d7:07:07:6c:4e:c1:
58:cc:cf:6d:53:ef:f5:c8:5d:fe:fc:c6:55:72:8b:3b:ae:41:
0c:a2:03:de:c6:9e:b0:20:87:07:94:e9:fb:0e:af:5a:ee:b1:
5b:8b:de:64:8e:ec:4a:f7:4a:f6:cc:ae:35:37:c0:d3:fc:bd:
72:4e:49:11:7b:ef:a3:0d:7c:b3:8c:8e:13:3d:ce:79:91:cf:
f5:eb:8e:ad:d3:31:10:91:75:75:f5:9e:8c:36:cf:e9:68:aa:
52:0c:4b:65:df:2f:23:d2:3f:bc:3a:f6:97:27:b8:89:ad:b7:
0f:bc:e0:1d:77:d8:92:70:a6:27:ad:31:17:5c:27:b0:6f:e5:
a3:f6:6f:ff:b8:ae:b2:56:63:8b:9f:6b:0b:1c:a0:aa:e3:54:
46:3d:13:ee:ef:96:c0:cb:8d:28:b9:75:ae:16:00:eb:33:30:
c0:63:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:37:28 2025 by rpki-client