This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a721e853-0369-4d32-b3f4-ef9c261b1f58.roa
File: a721e853-0369-4d32-b3f4-ef9c261b1f58.roa (raw, json)
Hash identifier: w/oJ8pRtTu8ruB7UXJCK7vvURa8binh2DDqHT/4GAA4=
Subject key identifier: 3B:3F:7B:BA:C9:FD:4C:B0:66:CE:D7:E1:09:C3:EB:DE:5E:B0:20:86
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4E3C9B8CEA89294ED9E9300E2CCFB4D678380C8E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a721e853-0369-4d32-b3f4-ef9c261b1f58.roa
Signing time: Sat 29 Nov 2025 00:40:36 +0000
ROA not before: Sat 29 Nov 2025 00:40:36 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 34.217.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3c:9b:8c:ea:89:29:4e:d9:e9:30:0e:2c:cf:b4:d6:78:38:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 00:40:36 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=cdf06dc1bfd13bca2c22ee026ba3688bd0846ebcb52838f65797f4416e54d431, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:cd:43:2e:c6:b6:23:dc:e3:a6:6b:36:fd:
1e:04:bb:72:24:4f:8a:d2:36:d0:e1:08:a8:ce:ef:
2d:1c:9a:6f:8c:bc:f6:1b:30:46:7e:52:6a:62:71:
62:23:6c:e1:dd:24:e3:97:60:3e:f1:8a:f6:58:37:
cd:f5:3b:3b:b3:a2:34:d6:8b:f5:6e:af:06:09:ea:
fd:90:eb:fa:c8:37:14:b8:88:47:67:a0:fa:05:91:
ef:fe:6c:21:5f:25:10:12:a9:86:1d:af:c7:34:9b:
51:cf:7c:76:ca:a2:97:05:53:d8:81:90:e4:8e:99:
e0:a8:90:af:79:7e:9a:0a:45:30:eb:50:20:2a:97:
d7:db:17:3c:7b:46:20:0b:9b:a0:3b:3b:d0:7f:b2:
af:a8:da:5c:98:a6:0a:14:79:e9:28:84:78:43:fb:
2b:a4:09:ff:a9:b6:48:b5:fd:a7:4b:e0:7d:8a:5a:
c1:7a:35:1b:e2:00:6e:4a:11:57:b4:a5:43:55:a1:
10:84:03:23:4a:30:a8:b3:86:96:3d:0b:7a:6a:44:
e7:72:cb:16:5b:28:53:dc:f3:da:dc:dd:ea:df:b0:
c1:f8:2e:41:4d:70:a8:f4:d9:a2:a0:41:f4:40:ca:
36:dc:76:b7:49:5c:22:6d:92:ca:62:e5:1f:1d:8e:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:7B:BA:C9:FD:4C:B0:66:CE:D7:E1:09:C3:EB:DE:5E:B0:20:86
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a721e853-0369-4d32-b3f4-ef9c261b1f58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
34.217.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:80:d5:20:09:67:47:d8:cd:41:f1:52:04:17:59:db:62:7b:
ef:67:14:21:a9:a4:54:f3:bb:59:10:07:ff:cb:3c:d3:cc:08:
9c:62:69:35:74:5c:f8:80:4d:ea:31:45:cd:ee:4d:12:ba:96:
58:a3:23:20:ea:dc:9b:8d:76:81:79:c0:6d:04:d4:8a:8c:54:
d0:1f:ee:64:88:ad:aa:75:ac:27:e9:1f:3a:bf:97:ce:5f:1f:
06:e2:c9:87:08:67:28:7d:cc:50:65:b7:4a:55:ef:13:7e:e5:
60:ac:25:c4:5b:73:ba:bc:1f:92:8c:51:e9:17:14:c3:6f:ea:
67:cd:0d:72:a8:1e:2d:fb:4a:19:e7:19:9a:23:bc:ba:55:31:
88:67:88:07:d0:84:6b:6b:0a:24:c5:24:1d:5b:34:e1:a6:78:
8d:93:8d:9e:57:96:59:28:bc:14:3f:31:7d:94:3c:c9:4d:99:
85:3c:4e:64:5d:11:3c:84:8b:1b:8d:9e:0e:da:70:03:47:d4:
58:f8:bd:ee:83:b2:f0:51:32:79:32:3c:ed:60:5f:3b:b1:8a:
30:76:e4:c0:dc:92:9c:a2:6c:aa:a6:90:74:ec:28:f0:98:9b:
4f:47:94:4e:74:b2:3b:3e:9e:cc:98:8d:e6:f7:f6:8c:20:b7:
06:67:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:39:12 2025 by rpki-client