This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2ccedb4-bb26-4bd6-97ac-ba539997ddab.roa
File: b2ccedb4-bb26-4bd6-97ac-ba539997ddab.roa (raw, json)
Hash identifier: 2KuKf65fNDeVtoec9I5vjbYahVKCJymYohpkiS916lU=
Subject key identifier: 28:86:A6:23:C2:A0:7A:40:97:0A:D3:DC:A9:0A:BC:44:AA:28:29:8F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 21F413C8FC44369804EDB06A6A2E570098C06B89
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2ccedb4-bb26-4bd6-97ac-ba539997ddab.roa
Signing time: Sat 15 Nov 2025 04:11:37 +0000
ROA not before: Sat 15 Nov 2025 04:11:37 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.95.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f4:13:c8:fc:44:36:98:04:ed:b0:6a:6a:2e:57:00:98:c0:6b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 15 04:11:37 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=972fd2528686133efc6f329c3d321aeda85ec077b057a7cf29e9de8fbba6f004, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:0f:e0:ee:ed:b7:9f:7a:52:6a:19:b3:45:
b1:2f:d0:15:5b:19:e7:cc:9e:40:63:92:94:52:af:
bb:a9:80:f0:09:6d:ad:5a:65:b0:30:99:4c:b3:2d:
fa:9c:e0:e7:98:35:e2:51:a3:cf:43:d2:03:21:4f:
c9:47:77:c9:b3:c8:cd:c3:16:3a:ca:87:2e:83:10:
94:b2:40:6c:e4:8f:5e:cc:1d:f0:6f:b7:be:2f:2e:
fe:a5:20:07:45:fd:a2:3f:60:8a:9a:61:9b:5e:4c:
32:fc:31:2e:a0:9c:3e:07:93:82:75:08:ee:13:14:
b7:ea:9a:5f:ac:7e:66:a3:f3:f1:08:39:06:c9:1c:
b2:02:cf:85:80:cb:31:2b:ee:ef:50:23:6d:1c:ac:
46:f1:1d:17:f7:26:30:f3:9e:92:50:9e:93:a2:39:
17:96:db:fa:f8:db:7d:ba:d7:3d:c6:11:1d:24:e7:
2d:61:50:42:75:39:93:0a:1b:1d:fb:8a:bb:94:34:
ec:8d:01:09:e8:6a:36:bc:dc:21:57:e1:f1:16:a2:
c2:37:d5:6b:26:59:18:5a:8d:37:35:37:f6:f4:e4:
51:3a:b4:9a:96:40:b4:9d:81:83:f8:18:d6:55:17:
b8:b7:b7:66:0f:56:87:1c:e1:24:68:7f:ef:ef:ac:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:86:A6:23:C2:A0:7A:40:97:0A:D3:DC:A9:0A:BC:44:AA:28:29:8F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2ccedb4-bb26-4bd6-97ac-ba539997ddab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:b2:27:d9:f4:38:a7:ed:24:10:a4:48:0c:07:52:88:d9:6a:
68:23:ef:6a:b4:75:97:53:fe:f3:39:51:29:c7:eb:8c:1f:05:
d9:8f:1e:91:d5:18:36:64:63:03:00:c7:97:2e:01:29:7c:08:
41:71:bf:19:00:f9:0e:40:88:0d:df:26:81:b5:73:8a:ed:bf:
98:7a:b7:1c:71:d9:14:54:dd:4c:f0:41:b5:ed:01:a5:18:4a:
40:86:44:37:74:8b:a6:cd:f5:cf:24:99:c1:e0:51:d0:07:59:
df:00:5d:b8:af:d4:53:27:6a:dc:b8:34:15:87:c6:2c:d4:d1:
d0:6c:18:0b:30:59:d5:04:b9:ee:77:c2:a6:33:57:37:a5:e6:
81:ff:d0:0d:57:07:83:7d:ab:b3:d4:d5:2c:6e:f5:32:ef:64:
70:b7:ca:b1:e0:d8:36:a1:52:21:4c:68:c3:79:b0:fa:e3:9a:
73:d2:12:f5:a1:8f:be:f8:aa:81:ad:1e:fa:83:fe:ae:d6:35:
79:0f:dd:20:ee:f2:b8:6d:4f:92:82:e8:33:2d:4b:bf:51:ce:
3d:58:35:5b:5a:bd:f0:4f:ae:df:14:87:e0:df:e7:2f:1d:ff:
64:8c:cc:8d:44:d4:83:30:02:a3:86:32:eb:6d:dc:ed:9e:20:
4c:3a:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:01:13 2025 by rpki-client