This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/228ab9f8-1c5c-43b6-8779-89a9009f3b47.roa
File: 228ab9f8-1c5c-43b6-8779-89a9009f3b47.roa (raw, json)
Hash identifier: GxHeokIB6OB9jIb1ZbozLsms0vbQ/JKJzc3XUA4KmrY=
Subject key identifier: 3A:89:4E:C3:CB:1E:57:D5:6F:0E:DF:4C:5F:DC:C1:A0:8B:5C:DB:7D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 32DF5E1A10129CCA086391F952FB22B317162395
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/228ab9f8-1c5c-43b6-8779-89a9009f3b47.roa
Signing time: Thu 04 Dec 2025 00:50:44 +0000
ROA not before: Thu 04 Dec 2025 00:50:44 +0000
ROA not after: Wed 04 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 144.220.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:df:5e:1a:10:12:9c:ca:08:63:91:f9:52:fb:22:b3:17:16:23:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 4 00:50:44 2025 GMT
Not After : Mar 4 23:59:59 2026 GMT
Subject: serialNumber=99d9619ea26a9d89d912d19b8aef991be8c32559653fb35c68f3c80c31158a90, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:08:6b:9c:54:c4:8d:71:c4:85:0b:d4:cc:
fc:c8:39:d0:03:b4:c0:4f:3b:94:dd:c0:a9:f4:58:
61:42:cb:d9:f3:3e:f8:c6:2b:a9:3b:c5:88:71:67:
fb:77:8e:36:12:6d:c1:27:a5:79:d8:36:f8:33:57:
e2:8d:6e:7b:5f:11:55:2b:3f:65:84:d6:6f:91:fa:
18:75:e2:34:70:14:d7:33:15:48:08:32:19:57:b7:
f2:dc:0f:c5:95:69:22:35:2f:dd:f0:99:04:e3:d6:
4b:34:9c:7d:06:d8:cf:5b:ab:8c:c7:ef:7c:0e:58:
77:24:cd:d3:34:29:c5:41:bb:5d:80:c5:b6:76:1c:
72:d1:c0:e8:d4:b4:17:f9:7f:92:6b:4b:1b:9e:5c:
8e:9c:ff:ea:f3:b5:41:46:d3:83:5e:60:8f:73:fc:
83:97:e5:48:ea:bb:9b:4f:f4:39:14:7f:9a:72:32:
ae:43:ba:11:17:a7:6c:03:b4:bb:23:89:38:6b:1e:
04:39:97:4e:80:01:31:db:7f:91:6d:ee:16:36:52:
1f:75:ab:a0:b1:db:61:75:bc:2c:43:38:4c:c9:18:
f9:c4:92:5c:81:d5:74:b6:c3:a8:7f:c5:03:d6:bb:
df:e5:84:14:e2:a0:e4:d9:dc:61:75:54:18:87:3a:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:89:4E:C3:CB:1E:57:D5:6F:0E:DF:4C:5F:DC:C1:A0:8B:5C:DB:7D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/228ab9f8-1c5c-43b6-8779-89a9009f3b47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.220.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:69:c2:2b:08:88:a0:9d:3c:3c:f7:b4:95:ff:f5:1e:04:b9:
13:6b:4a:03:c3:5f:61:98:54:c3:ed:81:dc:4b:1f:b9:d6:84:
34:83:74:a6:ba:8f:48:53:25:9e:c1:f1:69:40:65:58:cc:68:
fb:82:bd:1c:c4:f5:63:e9:9c:06:77:a4:95:1c:8a:0f:c1:b1:
61:ff:1d:3e:2b:00:12:01:95:2a:4d:03:f7:d6:74:8d:4d:3c:
38:39:36:ca:54:1e:1f:bb:1d:d8:e9:0a:4f:dd:ef:c3:87:42:
11:e7:8d:ba:a7:1a:26:7c:94:a0:4d:1c:62:0a:da:5e:f2:35:
96:54:80:38:b5:0b:83:d8:87:d9:00:9d:10:ac:1a:2c:8a:ae:
53:0b:32:86:92:7d:3c:4b:b4:00:5a:43:c2:9f:a1:b1:94:5e:
39:3e:8b:aa:40:02:93:46:44:09:40:40:00:f2:77:7a:b1:6e:
30:ef:d0:9f:1d:bf:b3:d9:8b:b1:a7:9b:80:ce:56:16:77:62:
fc:b1:14:8b:98:c2:1d:39:4d:06:f1:ff:38:a6:ef:df:fb:76:
88:c8:cb:0a:f5:e8:f9:2f:31:65:a7:fb:25:54:9f:cb:62:ab:
08:1d:49:bf:e2:30:87:23:35:b8:16:b0:b6:60:b4:03:c9:fd:
ab:26:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:41:39 2025 by rpki-client