This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43a7d9b3-e3a3-49bb-8f92-114ed3bed732.roa
File: 43a7d9b3-e3a3-49bb-8f92-114ed3bed732.roa (raw, json)
Hash identifier: Tx4nggVQz3/a6EBIDHAnYNBipQN6SGFycR3A6WhE70s=
Subject key identifier: 04:02:1B:FD:01:5B:93:F9:42:AF:05:4D:14:71:4D:B1:3B:43:9D:FF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 47E1EEF9F4A02E30E7236E23455A46CFD876F978
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43a7d9b3-e3a3-49bb-8f92-114ed3bed732.roa
Signing time: Sat 06 Dec 2025 02:40:04 +0000
ROA not before: Sat 06 Dec 2025 02:40:04 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.253.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e1:ee:f9:f4:a0:2e:30:e7:23:6e:23:45:5a:46:cf:d8:76:f9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 6 02:40:04 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=4a71b178697adea41e03e0f1563b367ef695865c7548b36417eebbb3427c84db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:a0:1f:31:a8:d2:56:e8:4a:3e:24:ef:a6:
bc:82:b9:47:aa:f3:71:f4:88:58:97:11:f6:f0:a4:
60:fa:b9:ed:f9:a7:3d:09:78:80:93:d4:95:35:2e:
b3:6d:72:61:fa:ae:ae:8c:a7:04:11:47:8a:6d:69:
2a:96:12:ce:6a:90:9e:d4:3e:e2:97:1f:22:f8:1b:
77:f1:ac:da:8c:48:33:52:06:67:7a:5a:63:5f:0b:
8d:0d:e8:ef:c7:3c:78:27:4c:d7:78:b1:ee:10:8f:
57:e7:09:22:be:b9:9a:09:0b:89:5b:d7:ec:13:d2:
b3:fd:10:d3:79:0f:fd:1b:1b:fe:0e:91:7c:d0:11:
1d:4a:35:c9:79:89:09:76:17:bd:5e:ba:ff:81:62:
e8:ed:6b:1d:02:58:47:dd:20:06:0c:db:fa:9c:2f:
d2:43:62:84:f6:a9:be:03:f7:6d:8b:21:12:d4:03:
af:22:89:53:5f:d0:7b:91:59:77:85:47:ae:b7:9e:
8e:03:8d:49:c1:2b:07:74:89:2b:73:d0:64:ad:21:
39:7c:b6:22:29:5f:8d:93:cc:bb:46:0d:7c:cf:1d:
bd:39:91:10:29:b7:04:b3:a9:33:bd:6d:ee:8f:ef:
47:d0:ad:f7:d4:dc:d3:59:c1:4f:37:22:cb:bb:8c:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:1B:FD:01:5B:93:F9:42:AF:05:4D:14:71:4D:B1:3B:43:9D:FF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43a7d9b3-e3a3-49bb-8f92-114ed3bed732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.253.224.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:3e:4c:ed:c1:b9:e5:a7:20:e2:6c:66:86:25:0b:4c:11:d5:
8d:00:08:e2:ae:ae:16:cd:7b:3e:77:7f:01:dc:0d:21:16:c5:
dd:69:5e:c6:30:fa:f9:e2:8b:f5:62:64:7e:09:8c:d9:70:d4:
17:6d:c4:d3:70:5a:73:ac:22:77:20:94:08:16:ea:3d:9c:b2:
1f:53:02:a9:48:50:81:26:bf:0a:82:cf:d0:f6:e7:f0:4d:b7:
06:d0:7b:f2:b3:50:c3:a7:8e:2e:f2:7e:01:6d:08:df:50:c8:
0f:98:01:1c:61:92:ef:6b:f5:41:7b:a4:d7:4c:6c:b5:2a:70:
f6:d5:6c:63:2c:36:00:8d:c2:23:4d:66:d6:70:e5:56:fa:6b:
87:53:22:a9:b5:a3:ec:30:a7:2a:ee:82:4e:95:51:1d:50:21:
44:4e:5d:3a:be:51:00:89:ce:1a:a2:15:c1:55:f8:99:cf:f0:
28:e5:db:37:dd:99:2f:b4:6c:74:eb:d9:a8:ed:21:0a:15:c4:
5d:2b:14:98:7d:04:9c:60:a6:5a:0d:ae:b6:04:e2:ce:b6:c1:
62:03:ed:67:c9:22:ac:27:a3:5e:d5:5e:14:dd:e7:9f:01:77:
fe:46:19:a5:14:3d:1b:cc:e7:1f:74:04:01:37:b6:fd:89:fd:
84:71:d1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:55:13 2025 by rpki-client