This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa
File: a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa (raw, json)
Hash identifier: pM8nNTTdyCKiAStRdrJNuGWxKhznCLWxsJ6cZ1zkGEA=
Subject key identifier: D5:0A:91:C7:C5:DB:B0:11:09:8C:E3:72:F7:B5:5D:48:42:42:F9:5F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 44241D0E907BB8E8ADD1CB2A283CA7887B76FF76
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa
Signing time: Wed 10 Dec 2025 01:11:01 +0000
ROA not before: Wed 10 Dec 2025 01:11:01 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.172.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:24:1d:0e:90:7b:b8:e8:ad:d1:cb:2a:28:3c:a7:88:7b:76:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 01:11:01 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=1561bbba4a8ca34a56288a89e97b7d75e4626f90ca404e65e13e8039ebdccb30, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:1e:14:4c:a4:8d:af:dc:e7:93:a5:22:7c:
6b:df:99:47:50:2c:3c:45:fe:35:2e:56:70:1b:f2:
60:aa:89:1f:77:0a:ad:4e:af:8e:e2:49:69:db:8c:
45:ad:2c:33:a7:c5:08:e7:cb:f5:10:9c:48:a2:2b:
28:fb:b7:19:ad:fe:58:3a:1d:ab:d3:82:ee:00:72:
30:4b:c9:b8:1b:1c:52:55:ab:4c:81:08:af:90:04:
55:ee:95:e9:ce:d8:aa:75:a5:01:7e:ac:e5:5c:e7:
52:64:4c:e5:ed:60:5c:a4:d0:4f:30:3f:ad:4b:ca:
ee:33:fb:c4:29:78:5d:21:fc:ac:1a:2a:ac:3d:2b:
95:19:ca:5d:b5:1f:3f:54:1b:fc:93:22:ba:67:ae:
06:78:8e:5c:05:ca:3c:d9:85:47:62:83:2a:33:62:
cb:0f:2f:4b:7e:70:26:a6:85:1f:63:8c:6d:8b:10:
6a:c4:8a:73:84:e6:96:fe:d5:31:df:d2:b8:91:3e:
3b:5c:d1:06:d6:9c:75:8c:2c:85:31:fa:c1:76:ed:
9b:d8:89:b8:4b:43:7e:d8:aa:b0:31:6a:bd:35:c2:
ed:c4:c8:8c:f6:f5:74:d4:e7:8b:ad:7f:be:b5:0f:
77:1b:2e:a8:99:c6:09:f5:b9:e6:34:7e:43:b3:14:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:91:C7:C5:DB:B0:11:09:8C:E3:72:F7:B5:5D:48:42:42:F9:5F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3edbd77-ba3a-45fd-8abc-dcd91252f055.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.172.64.0/21
Signature Algorithm: sha256WithRSAEncryption
34:49:c1:9c:65:e1:b7:5f:34:b0:12:b0:aa:0e:4d:83:25:b3:
b9:79:e5:d9:07:85:5d:2b:b7:db:50:b3:fa:81:ce:b5:93:81:
cb:1e:42:e0:9e:08:27:f0:70:65:88:c6:11:f2:9d:37:2c:41:
1c:14:94:4e:ac:47:90:89:b3:4b:b2:6e:6f:92:b4:08:77:20:
46:ca:d7:45:10:95:b1:0e:c4:49:63:9d:c2:33:19:e3:a7:24:
3e:2d:12:53:b4:5f:ae:d0:d4:28:fd:2b:a8:d5:c5:64:24:39:
df:d7:2a:3a:c5:61:fd:c5:ff:b8:bd:8b:85:1f:67:1c:c6:45:
12:72:f9:12:67:c5:09:8b:6b:82:18:8f:ac:1a:25:ca:16:67:
2f:8e:93:fe:49:5c:c2:5a:66:39:4d:9c:ef:22:80:55:28:b8:
63:d9:dc:56:d3:7c:bb:e1:38:50:49:f0:0b:f0:bb:51:b5:ef:
a4:bb:67:ca:2d:c0:3f:c5:2a:db:5c:12:0e:74:f4:b7:ac:fe:
41:81:0d:5f:f0:f8:6e:b3:20:23:87:50:e6:83:b0:74:fd:49:
81:5e:73:2f:59:c9:47:ad:f1:59:66:dd:02:ad:8d:38:e7:95:
9d:e7:74:ac:b9:4d:db:8a:3b:83:0b:2b:75:4f:1f:34:39:2b:
78:e5:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:54:21 2026 by rpki-client