This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2bec03f4-24b2-466d-800b-2707d37a3362.roa
File: 2bec03f4-24b2-466d-800b-2707d37a3362.roa (raw, json)
Hash identifier: aCzMwpbMW++O1Qv2h5zqs9w0iZ0TIiil/KIItoHi51I=
Subject key identifier: D7:F3:EC:68:F1:15:C5:6A:42:AC:59:F1:40:45:30:09:AE:AB:B6:7A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0EAD5F2C7253D6F5AD95C9C117F50D15AEB7DA19
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2bec03f4-24b2-466d-800b-2707d37a3362.roa
Signing time: Wed 10 Dec 2025 01:20:53 +0000
ROA not before: Wed 10 Dec 2025 01:20:53 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.220.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ad:5f:2c:72:53:d6:f5:ad:95:c9:c1:17:f5:0d:15:ae:b7:da:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 01:20:53 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=1d560f81c9cd7a85057b3c550ea2beaddcc1b1b07cff76b1415a35d2db359eb5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:d8:8f:48:3d:b6:d8:a1:f7:da:b3:53:ea:
8c:96:6f:25:e5:3f:08:08:f4:05:d3:e1:ce:03:41:
8b:53:ca:24:b4:76:34:94:e6:4b:86:84:b5:e3:b5:
fc:60:44:89:57:d2:b9:76:74:8f:6b:72:b2:11:2a:
06:5a:b1:00:ff:73:f8:49:b3:ba:25:e2:be:ac:1d:
7d:81:cd:53:42:7e:b0:f9:a9:c8:96:40:c8:e3:44:
91:88:fa:c2:26:29:4b:ee:e7:b9:a3:ed:91:49:57:
48:d5:5a:e3:cd:f3:01:d3:43:48:a9:10:a0:71:a0:
1c:04:c9:e5:d8:35:95:16:d0:63:a4:a6:58:24:85:
05:02:9f:2a:a5:53:08:57:54:12:58:05:c8:fc:47:
4f:73:8d:57:96:a7:78:f5:34:d0:f0:8b:5e:8e:ac:
71:02:31:3c:fc:b1:96:07:a8:f7:e7:6f:5c:f0:90:
ce:73:19:ec:a6:63:12:df:0e:e5:bd:5e:8e:8c:f1:
0b:ad:dd:85:e4:f7:b4:18:16:14:b0:dc:82:82:de:
e2:2c:b4:25:4a:8d:9b:bc:a1:63:93:6b:39:27:e8:
84:8b:72:00:63:a9:6a:5f:c8:4f:d4:38:65:10:67:
3c:bf:ad:60:c8:d8:91:b2:4d:d5:df:57:88:19:a1:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F3:EC:68:F1:15:C5:6A:42:AC:59:F1:40:45:30:09:AE:AB:B6:7A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2bec03f4-24b2-466d-800b-2707d37a3362.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.220.2.0/23
Signature Algorithm: sha256WithRSAEncryption
19:69:0b:60:57:6f:6b:b8:e6:17:b1:05:10:fc:08:03:38:ed:
f0:e8:ec:65:c7:0a:9b:ec:9a:a1:ac:7a:cf:54:fd:3a:09:20:
f7:00:da:b1:d4:2e:de:ba:52:7d:4f:f3:15:4d:e1:13:ba:51:
38:0e:55:94:f3:48:bf:61:7a:fb:40:fa:c7:a9:0a:45:82:98:
fb:93:44:66:b4:dc:d8:37:92:66:53:52:8e:5d:25:f5:ae:4f:
2e:2e:7a:e4:18:1e:6c:53:c4:fc:34:dd:08:66:3e:fe:46:8b:
69:4f:82:8c:a5:68:0a:19:c2:ea:e6:dd:5e:10:67:6a:8e:f2:
ff:b3:24:85:3d:e2:a9:69:48:c6:cb:21:ac:96:ad:84:89:18:
1d:7c:30:f6:5c:4d:34:c6:bc:ad:a1:d8:a9:99:bc:e0:b7:e2:
7e:36:2f:3c:31:08:38:ec:c6:43:8d:5a:e2:96:28:0e:bd:45:
23:de:f8:36:bb:d1:7e:e2:1e:b5:b1:e2:e3:26:2f:69:08:41:
61:81:80:ed:7f:64:34:02:0c:1a:8c:43:ef:48:56:1c:1c:8e:
15:6e:f9:72:92:79:50:f3:02:c0:ba:5c:43:40:bf:7a:36:7a:
ac:45:c5:97:c9:2e:f8:32:2d:ad:9c:db:79:50:9e:9b:87:c0:
dc:29:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:44:58 2025 by rpki-client