This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7103788d-660f-45af-bb1a-9f73a3d9bd83.roa
File: 7103788d-660f-45af-bb1a-9f73a3d9bd83.roa (raw, json)
Hash identifier: I95tXuqRLDRfeNReCDrtlA6vEBsbO9Dpt3X2Jd3bHBY=
Subject key identifier: 4C:F0:27:99:DE:9B:90:1E:CF:C5:F9:C1:32:16:8C:F8:05:B5:DA:2E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4BE32A2D6781537EE823E3B4CA5475E2396E5E0D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7103788d-660f-45af-bb1a-9f73a3d9bd83.roa
Signing time: Mon 10 Nov 2025 01:50:57 +0000
ROA not before: Mon 10 Nov 2025 01:50:57 +0000
ROA not after: Mon 15 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.33.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e3:2a:2d:67:81:53:7e:e8:23:e3:b4:ca:54:75:e2:39:6e:5e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 10 01:50:57 2025 GMT
Not After : Dec 15 23:59:59 2025 GMT
Subject: serialNumber=905e25bb0475d3c7245184fdaa2cc79a3d8fec15736fdf53c26a82419464e7b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:34:21:b6:03:80:62:94:ca:73:3f:76:a7:
c3:a4:c1:f2:52:4d:c1:64:e5:f8:70:4f:78:16:b9:
12:7b:28:58:88:06:88:bd:90:35:6c:16:b7:1a:83:
af:8f:8a:42:7a:c4:0f:a4:4a:9c:18:87:67:82:e5:
3a:07:f6:67:c4:30:97:2b:62:8d:12:c5:70:e1:55:
56:f9:70:7f:9d:1c:2a:9e:b5:aa:33:3f:5e:13:28:
bb:c3:1a:99:41:32:ae:a3:8f:3c:0b:50:0c:72:b0:
dd:b0:1c:90:a8:6f:4e:59:b9:07:79:4d:6a:5a:1c:
1e:05:c7:b5:7d:0d:c7:6b:35:5b:14:dc:ce:c0:03:
a2:3d:29:82:1d:03:e3:12:0b:ff:20:e3:95:ae:c7:
e9:4d:98:63:c3:63:57:da:e3:11:06:9d:8f:d2:47:
8e:25:cf:37:fb:e9:88:37:41:18:45:b7:5d:67:8c:
0e:4c:37:2a:49:64:e2:18:81:d9:d8:ab:28:f9:ab:
ff:52:e7:34:3a:e8:ba:95:2e:29:1b:7b:0e:8c:99:
82:7b:b9:fa:f9:ae:13:c0:88:f0:82:2b:4b:a4:0b:
c3:25:39:0d:82:96:05:e1:66:6d:fd:68:b1:29:75:
97:c2:4b:90:f2:81:1d:9e:a2:a2:86:2a:56:e4:37:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F0:27:99:DE:9B:90:1E:CF:C5:F9:C1:32:16:8C:F8:05:B5:DA:2E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7103788d-660f-45af-bb1a-9f73a3d9bd83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.33.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c4:f5:18:2c:ff:ea:c9:c6:f0:1e:5d:12:62:7a:d6:ec:0a:
44:3b:7b:08:51:a8:67:38:fe:77:3d:ea:51:78:a0:4e:34:f4:
6d:56:2e:1f:f8:fe:e1:e2:51:77:de:f2:c6:f7:69:28:07:ae:
2d:f4:9d:73:b8:a3:41:90:5f:a4:93:1c:cf:20:02:b2:49:58:
38:17:70:c3:f3:2a:d5:f3:01:92:87:85:45:e0:fc:bd:c5:4f:
37:d5:04:5d:17:01:70:e1:7d:18:5c:70:3a:d9:72:f1:c7:99:
52:e9:b3:f3:2a:10:71:2e:72:61:81:06:57:ed:cd:5b:e1:5f:
af:82:db:4f:f1:8b:0a:42:58:54:72:da:08:81:76:43:34:e7:
89:24:3f:14:5e:75:64:49:85:6d:d2:c1:84:a3:36:80:c0:cc:
8c:c3:1c:b1:7b:a2:ba:98:83:4d:5f:17:a2:b7:29:ad:af:61:
fa:4e:d3:8f:5f:0e:db:79:fd:0d:43:a3:17:fb:b4:fa:c4:60:
0f:73:6a:51:af:29:c3:6b:9d:10:5d:a1:71:50:02:56:40:cc:
e6:fd:8d:f8:fb:e7:82:8d:30:1b:fc:aa:39:93:95:b6:84:2f:
86:06:6a:2c:bb:58:5b:df:3a:07:e4:05:a4:81:87:12:6e:9f:
dc:3b:1d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:26 2025 by rpki-client