This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fb5e281-d545-4001-97fa-007bbac7fd98.roa
File: 0fb5e281-d545-4001-97fa-007bbac7fd98.roa (raw, json)
Hash identifier: f8ck4b8ZLNQQ7JXP8sfMx73kwVfCacS11yBPTLKnDQE=
Subject key identifier: 42:71:B5:70:BE:F3:24:0A:F1:F0:CC:62:A0:EC:6C:AA:19:9B:CF:09
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 246D1B3F2544F6B7E8427D130B342F33B6E0F7D0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fb5e281-d545-4001-97fa-007bbac7fd98.roa
Signing time: Wed 10 Dec 2025 04:21:15 +0000
ROA not before: Wed 10 Dec 2025 04:21:15 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 152.25.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6d:1b:3f:25:44:f6:b7:e8:42:7d:13:0b:34:2f:33:b6:e0:f7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 04:21:15 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=792ec58ccc9e43cd34de4e9d69e91a16ccc291f1c332064a10aea3b94800b640, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:69:1d:f9:09:13:9b:a2:74:6f:3c:6d:22:c8:
74:6e:17:16:c2:89:55:3b:25:8e:59:99:91:37:6e:
0c:82:3b:49:ca:b1:d7:cf:44:3d:c5:1b:a2:92:b7:
3d:0a:9e:ae:88:e6:6e:4c:0c:af:d6:43:39:4a:a1:
d6:b7:9f:21:36:4c:31:7f:56:e3:9c:d4:43:19:bb:
aa:4c:07:af:e9:ca:63:2a:a2:4b:18:b2:0b:77:bd:
7d:08:81:1e:e1:4b:88:f1:77:82:91:06:9d:3d:1b:
2f:b3:96:56:96:51:84:e2:67:2f:0f:37:b2:37:bb:
d9:0b:58:61:4e:2b:ca:80:b5:b5:98:b7:c9:9b:94:
1c:c6:e9:09:d7:8c:67:e1:51:ac:70:0c:15:ee:67:
46:15:6d:2e:88:37:bf:ab:e5:de:44:6f:ca:f8:6b:
a1:7a:ff:30:59:7c:e9:d6:e6:da:7a:55:97:6c:4f:
68:97:9c:69:c8:84:6e:20:be:4a:31:7f:b2:10:e9:
54:2a:1a:78:11:4c:8b:93:19:cf:dc:b6:42:48:e9:
7c:de:52:06:7e:47:07:ad:cf:3b:a9:aa:1f:a4:6b:
38:62:7a:3a:08:9e:20:ab:f1:7e:8e:af:be:1e:ad:
21:73:53:40:e0:68:af:e9:45:3c:59:70:38:2f:19:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:71:B5:70:BE:F3:24:0A:F1:F0:CC:62:A0:EC:6C:AA:19:9B:CF:09
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fb5e281-d545-4001-97fa-007bbac7fd98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.25.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:a7:1c:dc:8b:04:03:9c:3a:f8:0e:0b:17:d0:78:73:c5:30:
56:b8:72:c0:52:fd:ce:e8:ef:97:05:14:32:f9:bd:8e:d3:b5:
e1:2f:84:58:94:3d:d5:cc:ef:9e:db:e0:e5:a7:ba:92:04:7f:
39:84:eb:09:57:23:e0:46:84:f5:2a:dd:1c:e6:5c:bf:cb:1f:
61:05:ed:01:21:14:74:73:8d:17:e3:d9:68:c6:f1:e2:36:49:
19:8b:1e:30:89:08:66:3b:cb:64:54:8d:51:c5:f7:99:d6:f5:
91:6a:2d:06:9b:c4:fc:fa:2d:f7:fd:1a:c5:ca:2c:6c:72:c4:
31:be:e7:c7:f3:d5:9b:7c:46:c1:04:aa:1b:47:31:ca:73:68:
68:43:82:46:9e:9a:aa:b6:ae:47:a6:fd:3f:d7:52:61:98:c8:
73:36:7c:fa:31:ba:72:f3:14:f4:a5:fb:26:ea:80:dd:69:50:
01:53:03:b5:1d:de:3e:03:f7:a6:4b:4f:a1:ec:e9:84:08:b0:
35:5b:a7:73:cd:d6:16:d3:4e:b7:65:61:5b:2b:02:71:5b:d6:
4f:8d:31:6f:57:f0:07:d4:65:ae:28:af:b9:01:75:2b:32:83:
6d:e9:2f:a3:34:40:8f:9a:5b:96:be:96:f5:b3:2c:d1:01:57:
25:01:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:10:07 2025 by rpki-client