This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249123d0-09f2-4884-9c7d-31b33b073069.roa
File: 249123d0-09f2-4884-9c7d-31b33b073069.roa (raw, json)
Hash identifier: 5Xj6shNDY2Q8y0sk6Hazi6sBbaZni3UbZZBI6rzWVMU=
Subject key identifier: 5C:3F:D4:77:CB:36:65:F7:49:59:59:48:A3:B0:A1:47:EC:86:A9:4B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7FBFCA931C65903AE855396AF3B1530FFC21F6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249123d0-09f2-4884-9c7d-31b33b073069.roa
Signing time: Sun 07 Dec 2025 02:41:18 +0000
ROA not before: Sun 07 Dec 2025 02:41:18 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.252.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bf:ca:93:1c:65:90:3a:e8:55:39:6a:f3:b1:53:0f:fc:21:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 7 02:41:18 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=c5338036f8a0a0328c0dc8665c328aa418676550f866d41b539b30286d935dda, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7d:34:44:25:95:05:b3:07:59:76:3f:04:a6:
d2:d2:c7:8f:25:90:17:eb:ff:a2:8b:e6:63:e0:a2:
57:d5:76:69:cc:52:ed:cd:f2:f2:45:b2:23:5c:ea:
07:72:be:1e:bc:52:6f:bd:c4:fc:69:a1:ed:fc:3e:
af:12:c7:af:5b:dc:50:f2:ce:f5:17:a0:98:a2:9f:
3d:80:67:f1:38:d6:f6:bd:de:53:d0:32:89:76:d0:
bc:a8:e8:e9:c6:9a:ec:35:34:af:c4:3f:a6:2c:b4:
a3:c8:59:db:ca:ba:b5:b6:9a:cd:af:6d:c2:65:32:
44:5e:e3:bd:e7:f6:ad:25:62:aa:52:99:43:21:99:
45:22:54:44:a7:8f:56:84:85:ba:b6:d8:83:47:8c:
06:28:3a:fd:ff:41:b9:6a:2b:44:3d:43:d1:57:55:
f6:77:45:83:c4:4e:7c:9b:ab:2f:68:ed:1b:af:aa:
cb:20:20:a0:91:36:ef:89:fb:19:85:70:43:5a:1e:
fa:a1:da:99:f8:4f:ca:00:38:fa:15:c6:7f:e1:11:
a2:eb:b9:ee:75:54:0e:f5:0c:99:03:24:2c:92:97:
12:f7:cf:9b:f3:30:53:c2:b5:4e:32:b7:94:48:ea:
27:6e:d7:16:7c:06:1d:96:bc:a9:27:df:6d:a4:67:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3F:D4:77:CB:36:65:F7:49:59:59:48:A3:B0:A1:47:EC:86:A9:4B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249123d0-09f2-4884-9c7d-31b33b073069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.252.88.0/21
Signature Algorithm: sha256WithRSAEncryption
82:6e:a0:3c:dd:e4:66:73:8c:59:35:0a:8b:d5:60:85:30:c5:
d5:44:77:e5:fb:01:34:da:3f:5e:6a:c9:63:f4:cb:62:52:61:
e3:50:b7:ca:71:28:76:39:fa:b6:6a:b8:21:84:47:20:8b:da:
84:c8:9b:ee:46:83:71:63:44:72:2f:28:ff:52:46:22:e3:7c:
7e:89:f9:99:bb:69:d1:21:fa:e1:fa:0f:8b:c3:4b:11:4b:db:
ad:a8:1d:7a:73:e8:8e:e3:99:f9:55:af:51:a8:91:28:d8:cb:
3d:4d:cb:06:3d:06:43:be:d5:8d:2b:71:15:cb:d7:99:e7:e2:
3e:b0:f8:89:f2:c9:fe:27:91:bb:e5:e4:cb:0f:ed:ab:49:37:
25:35:e0:57:04:b3:a8:d0:9f:9e:57:83:8f:e8:90:57:0a:7a:
3c:c6:ed:c0:24:17:e9:66:ab:de:69:d1:18:e7:77:3d:43:9d:
b0:05:eb:d4:2b:a8:3f:98:04:b3:26:06:bd:38:a2:8a:62:d2:
c6:fa:e1:89:1e:28:b0:e1:f0:a4:bf:fe:43:23:3b:5c:44:62:
92:d9:4c:06:6f:cc:ae:35:30:0f:a5:f3:c2:fd:8c:b5:76:3c:
0e:46:58:6f:bf:c3:bf:4e:cc:3a:52:b1:79:b0:a4:46:05:00:
da:00:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 22:23:58 2025 by rpki-client