This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fc5c2e4-0537-4cce-a803-486d12842ea7.roa
File: 7fc5c2e4-0537-4cce-a803-486d12842ea7.roa (raw, json)
Hash identifier: NORDaz2b/Tqlx0lu3yoeny5x5+kQTkyIyD1qAVFcxmg=
Subject key identifier: B7:85:F6:9A:AA:19:82:66:6B:77:63:08:F1:65:95:22:A4:0F:66:90
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6D9D1659B65B036BCC56FE869CC38E175664ED
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fc5c2e4-0537-4cce-a803-486d12842ea7.roa
Signing time: Sun 30 Nov 2025 00:40:55 +0000
ROA not before: Sun 30 Nov 2025 00:40:55 +0000
ROA not after: Sat 28 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.41.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9d:16:59:b6:5b:03:6b:cc:56:fe:86:9c:c3:8e:17:56:64:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 30 00:40:55 2025 GMT
Not After : Feb 28 23:59:59 2026 GMT
Subject: serialNumber=63687fe79e051eb724d212a8273cdd22de1d647b21fad07c168fb6932b06e0c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f2:c8:a7:54:89:22:36:f1:54:21:1f:dc:3a:
a0:8f:79:dc:79:b1:b4:4b:ad:7e:07:ba:aa:85:14:
9f:a0:12:86:35:f3:0b:6e:02:90:45:5c:2d:3a:ab:
64:6b:11:85:29:64:f5:75:82:7c:f3:3e:68:a9:54:
da:b5:34:55:9b:6d:a7:a4:79:52:98:fd:d0:d0:34:
85:fd:0a:54:d4:f9:db:3f:c3:67:48:8e:73:c4:c8:
5c:d0:dc:b9:7c:bb:31:2a:84:a4:d3:4a:06:2c:3e:
35:b4:0f:c1:92:98:04:e0:7e:46:36:fc:ed:08:74:
ab:1d:e9:52:4c:fe:b3:94:ef:92:b0:07:77:9e:81:
4e:fd:47:61:39:c9:07:15:04:e1:ed:2c:d5:ca:dd:
73:81:78:51:58:62:c0:6e:c6:af:4b:5c:af:47:8a:
94:69:a3:13:e8:df:b8:89:70:2b:74:6e:6d:f7:fe:
a6:90:2d:9d:62:9f:1b:95:e9:f4:54:8f:97:83:fb:
bf:04:45:19:8e:bb:8e:53:a7:35:4a:a9:78:75:2b:
c3:5a:a0:94:28:28:68:22:10:3f:a2:c0:94:f9:2e:
f6:50:98:b7:d0:c5:8f:b6:b1:ba:18:56:2c:32:15:
ca:d0:4b:d7:80:86:68:12:00:aa:05:94:33:59:ee:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:F6:9A:AA:19:82:66:6B:77:63:08:F1:65:95:22:A4:0F:66:90
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fc5c2e4-0537-4cce-a803-486d12842ea7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.41.128.0/18
Signature Algorithm: sha256WithRSAEncryption
15:04:ca:84:6f:1e:91:44:be:47:7e:b8:ab:13:8b:9b:a8:44:
36:42:b4:93:13:3e:97:75:56:06:10:c8:03:d1:2b:0e:18:12:
ef:ab:5b:fd:84:fc:09:ca:2f:dd:f3:d3:18:16:b8:73:67:f0:
76:e3:83:9d:99:50:b3:11:ce:ca:2b:8b:f1:1a:6f:1a:52:5f:
65:1e:ba:34:97:03:7c:65:c5:8a:14:20:c9:58:c4:38:04:e2:
b5:5e:4d:af:8d:60:9d:ef:72:00:21:48:3f:7e:2d:9f:6d:3e:
bc:90:e9:e7:1c:b3:a9:f0:34:51:db:45:71:6d:f6:bd:30:42:
7a:2b:b3:fd:32:b0:9b:a2:98:77:1e:4b:da:9a:16:73:14:2e:
05:4f:24:d4:84:80:7d:8b:dd:b5:d7:ef:18:59:73:d6:cf:7c:
fc:0e:32:eb:36:9d:5f:4a:e9:78:aa:71:0c:fb:3a:da:aa:c3:
54:cc:61:ed:40:8c:54:0f:ae:a3:ad:99:bc:3a:76:14:05:3f:
78:dc:62:00:af:53:13:19:ae:52:d6:23:d3:eb:3d:e0:94:50:
e9:9e:58:0c:5e:ee:66:b2:c8:1a:2e:44:47:cf:52:a6:ad:6c:
d7:e7:a3:53:6b:f5:1a:47:67:f5:25:16:b7:15:b9:3b:0f:d8:
5e:57:23:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:01:01 2025 by rpki-client