This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8bf5cbc-4970-45b0-8a9d-2e191dbb50a9.roa
File: f8bf5cbc-4970-45b0-8a9d-2e191dbb50a9.roa (raw, json)
Hash identifier: MDuQS4tuFiyesE9EOxAxnkHg81NVLkEgL9PjU+gdv5U=
Subject key identifier: 61:B0:49:11:E7:6F:29:CF:59:47:0D:0E:18:6A:E7:FF:FF:EA:5C:E2
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 12647B83BB04FDF7C2B56D1D07B246487773A09F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8bf5cbc-4970-45b0-8a9d-2e191dbb50a9.roa
Signing time: Thu 13 Nov 2025 01:21:36 +0000
ROA not before: Thu 13 Nov 2025 01:21:36 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:64:7b:83:bb:04:fd:f7:c2:b5:6d:1d:07:b2:46:48:77:73:a0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 13 01:21:36 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=985dfe1d555d13be4bac57ece09de5fa69766c1bb17b8220ef52fdd6ffedf2b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:bd:3c:4a:f8:2a:79:b1:6e:0d:64:06:ae:
0c:dc:c2:75:db:a4:06:83:9d:2d:a7:65:68:ee:e5:
a2:8b:e5:09:40:f3:f1:9e:7b:02:89:1f:6b:4f:21:
62:98:28:0a:e1:d2:a5:23:b4:cf:75:49:b9:72:25:
53:55:51:3c:68:52:92:a3:34:1a:3b:b4:fd:f5:2e:
03:84:02:d3:70:78:6a:53:f3:95:8d:d4:b9:83:76:
18:37:9d:38:da:3e:b9:5d:98:3f:bc:a4:bf:b0:13:
9c:c9:9e:e5:c3:c7:b1:19:49:6b:d2:f3:03:67:e0:
72:d7:d3:61:c3:eb:72:e6:d7:db:ae:8a:8f:be:34:
62:5c:c9:7c:93:d7:a4:15:63:62:92:f2:ae:97:79:
20:d6:d3:de:27:f2:b0:ce:49:5b:11:c4:db:07:59:
94:25:61:47:8a:52:3c:90:d9:cd:60:aa:aa:3d:eb:
9a:62:8d:c4:43:40:9e:42:0a:ca:e7:30:b0:d2:32:
63:01:a1:57:2c:f8:34:af:a6:c1:7b:73:36:f2:5b:
59:fc:29:6b:a1:13:a4:0f:bf:fb:5a:58:f1:54:b7:
72:48:d0:9c:6e:5b:ae:ed:18:78:c1:51:9e:67:bd:
36:c6:6f:cb:9c:56:ea:9f:40:4a:00:04:fb:33:10:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:49:11:E7:6F:29:CF:59:47:0D:0E:18:6A:E7:FF:FF:EA:5C:E2
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8bf5cbc-4970-45b0-8a9d-2e191dbb50a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:92:b3:62:63:35:be:d5:b0:05:e0:c8:f6:61:da:51:58:eb:
61:35:e6:4f:b4:a7:dd:83:1f:4e:8d:b5:2d:0d:b8:f5:18:8c:
92:4e:10:f5:8b:ab:bd:d3:b7:10:f8:5f:16:c5:8e:b4:2e:61:
af:3a:32:cb:25:2f:2d:b9:d3:95:38:c4:1e:82:19:8c:27:60:
66:dc:18:33:90:12:7c:40:54:08:19:da:c0:9e:01:78:2d:62:
5f:0a:37:2a:cc:42:02:2e:f6:b0:17:93:28:55:1b:5a:60:25:
38:8f:2c:b8:c4:8c:ae:f3:4a:13:6b:6c:f9:25:98:93:19:d7:
ee:14:ec:04:7c:3a:59:82:bd:5d:bd:7c:cd:ce:02:e5:52:03:
9a:9e:80:1f:a6:39:31:22:66:c2:d1:71:48:d7:d9:8f:e1:ba:
15:ee:cb:e4:95:97:5c:3b:10:5d:a5:99:13:b5:ef:c3:97:3a:
b6:55:44:3b:a6:1d:06:50:d6:c0:4a:22:58:d0:fd:81:58:e1:
94:c3:91:a4:8c:34:32:26:71:8b:9f:8c:aa:f7:71:2d:01:b8:
ae:65:6f:bb:21:d5:c9:c6:74:d5:e0:51:52:b3:e1:5b:cd:90:
84:3d:de:6a:df:ff:b5:3b:4b:93:d8:2f:20:15:c5:94:6f:44:
c5:1b:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:08:07 2025 by rpki-client