This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8b6ad04-6bdb-4b05-84a5-878394c41002.roa
File: b8b6ad04-6bdb-4b05-84a5-878394c41002.roa (raw, json)
Hash identifier: yqcIwux8H6LBon4q2fCU3E7BLgm15AEoZkSw+e56HGA=
Subject key identifier: BC:0A:E3:9F:6D:6B:4C:E2:60:55:C9:6B:6A:5E:C6:B2:03:AE:F3:F1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 74AA0C6A97CC4F80F3A4A1867A05C09723740837
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8b6ad04-6bdb-4b05-84a5-878394c41002.roa
Signing time: Thu 04 Dec 2025 00:50:44 +0000
ROA not before: Thu 04 Dec 2025 00:50:44 +0000
ROA not after: Wed 04 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 144.220.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:aa:0c:6a:97:cc:4f:80:f3:a4:a1:86:7a:05:c0:97:23:74:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 4 00:50:44 2025 GMT
Not After : Mar 4 23:59:59 2026 GMT
Subject: serialNumber=2a45016333d4f26e7bd2744a8b66547f92d6d66df24ab6cd04b54d48a8703f51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:97:a5:d7:f1:29:fc:86:17:ae:53:cf:49:
0f:bf:51:2c:18:ac:eb:3b:b6:bf:85:8e:52:b6:90:
66:b2:b7:fc:18:7f:55:df:86:1e:9b:28:39:3a:0c:
57:fe:c9:02:d1:00:d2:98:a2:c3:18:73:86:4d:f3:
01:33:2e:d9:57:40:1d:d9:55:e5:de:7c:4d:76:69:
31:ce:bc:a9:2a:32:00:3f:7d:eb:bf:1e:88:25:76:
8b:1c:e1:fa:61:f7:14:7d:d4:6a:d1:76:56:65:10:
68:81:2f:8a:61:02:1b:a9:15:37:61:06:d7:94:a6:
b1:09:ce:85:cd:43:2b:de:68:75:06:4c:65:7a:bb:
b9:39:0a:0a:d2:37:af:53:23:07:29:10:79:ff:12:
23:d4:41:c1:17:1e:f7:5d:05:5c:c2:fc:02:f9:f3:
8a:ec:04:88:45:f1:ed:54:6c:49:6a:5a:69:c9:06:
3a:79:f1:28:b1:14:43:68:ce:fb:51:13:6b:5a:15:
8d:7a:76:50:69:c8:bd:f8:11:76:ce:54:3f:55:7b:
f2:92:ee:5e:54:40:a1:d3:0f:e8:d2:c8:d3:85:84:
d0:5f:8d:e3:ce:31:60:47:02:ae:ad:e3:6c:7a:df:
f6:41:d6:07:ad:dd:6b:ce:10:f7:30:0c:37:06:b0:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0A:E3:9F:6D:6B:4C:E2:60:55:C9:6B:6A:5E:C6:B2:03:AE:F3:F1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8b6ad04-6bdb-4b05-84a5-878394c41002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.220.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4d:2b:f9:1f:59:f8:74:dd:7a:f6:64:92:60:70:a6:7c:8c:
e9:27:da:ff:83:ed:8f:da:bd:4f:89:eb:56:4e:6c:bd:09:97:
a6:74:bc:4d:eb:32:fa:7f:8f:e0:c2:31:83:19:bb:eb:89:1c:
94:36:90:3e:8c:94:00:9b:a3:55:4d:f1:68:b9:d3:a6:32:a1:
a1:f5:2d:83:ab:18:58:61:11:91:3c:ad:e0:ce:28:c4:3e:f9:
ed:e7:1e:c9:c0:84:24:7f:e8:ce:9d:7b:28:be:f3:d4:10:db:
eb:e1:ac:22:43:74:4b:e0:e2:5b:4c:1d:b0:1d:34:73:b1:6b:
f7:cd:10:c5:22:74:79:6f:75:16:f5:3d:c1:ce:ae:5d:d3:1a:
6b:8b:dd:86:1c:9a:07:1a:b8:0e:22:e6:12:34:58:2c:63:64:
9b:ae:1b:59:ba:89:c4:17:57:0c:84:83:52:e4:60:52:50:e4:
70:5f:8f:01:0b:3e:ce:dd:3a:c7:7c:3d:82:86:32:ba:e0:b0:
10:99:a9:3b:f6:9c:5d:92:bf:15:37:48:5d:d6:b2:67:44:c5:
1a:45:89:57:9d:16:c7:63:40:c8:82:44:76:9a:03:84:d7:dc:
c5:af:5a:5e:c7:a0:51:db:50:05:fc:8f:f2:a1:5c:72:13:96:
00:80:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:12:52 2025 by rpki-client