This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cfdc562-f037-4d9f-bfe5-c7d2546c48e9.roa
File: 4cfdc562-f037-4d9f-bfe5-c7d2546c48e9.roa (raw, json)
Hash identifier: BOk3K783448xUXgZuBmlmSM8Jtl3j8/bHt+YTtydrGw=
Subject key identifier: 18:F5:95:95:A6:50:9D:C9:BE:57:19:DE:3A:22:87:0A:C6:A0:C5:74
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7B4F55C9C2C83838F3C7D873754C13815923C716
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cfdc562-f037-4d9f-bfe5-c7d2546c48e9.roa
Signing time: Mon 24 Nov 2025 08:20:50 +0000
ROA not before: Mon 24 Nov 2025 08:20:50 +0000
ROA not after: Sun 22 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.46.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4f:55:c9:c2:c8:38:38:f3:c7:d8:73:75:4c:13:81:59:23:c7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 24 08:20:50 2025 GMT
Not After : Feb 22 23:59:59 2026 GMT
Subject: serialNumber=fdd5ae62c1526306d5ae51fb5dff510348ad934bd516d9d28bbf05157be0623f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:0f:1d:09:2d:b5:1a:f1:c7:1e:bb:1a:e0:
a0:44:cf:18:a1:21:73:4d:cb:d5:e7:df:43:77:56:
d4:fd:39:07:d3:5b:70:c7:59:97:a2:64:41:0a:28:
45:67:5c:0b:45:a8:28:b7:3f:1b:6e:cc:e5:83:a7:
71:0d:87:1c:8e:f9:79:1c:cb:da:c9:6d:d7:8f:55:
82:db:04:a9:3e:a9:40:46:ca:39:cd:77:cb:01:95:
f3:17:25:61:2d:1e:27:26:12:50:7f:9f:b1:bb:b9:
60:0d:19:02:03:0e:6c:24:72:fe:38:39:e3:49:e9:
58:02:fc:23:f6:6f:15:4f:65:49:3c:54:1d:99:7f:
49:12:46:9c:f9:a4:f9:d7:96:9d:f8:8d:9f:60:e6:
87:73:c2:80:68:31:6e:2f:20:95:b0:29:65:b8:b0:
29:f3:21:3b:8b:7b:88:ec:3f:a9:33:c2:5d:75:a2:
c7:f3:b9:d3:cf:c1:dd:f1:83:20:3d:03:f8:e9:2e:
85:94:d4:5a:97:4b:26:7f:ab:87:4b:07:d8:8f:cf:
c4:86:30:d8:27:3e:8b:1a:83:5d:1f:49:0a:ab:88:
59:6a:af:51:12:c8:40:1f:29:ce:2f:d2:90:7a:bb:
9f:a4:a7:40:4f:3f:50:69:1c:fa:2a:6f:14:1d:79:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F5:95:95:A6:50:9D:C9:BE:57:19:DE:3A:22:87:0A:C6:A0:C5:74
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cfdc562-f037-4d9f-bfe5-c7d2546c48e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.46.24.0/21
Signature Algorithm: sha256WithRSAEncryption
98:0d:1f:11:61:88:38:a4:bf:29:de:e9:6c:ed:6c:4b:69:9d:
f6:b0:b9:99:a1:48:52:89:71:82:82:d3:a3:13:b4:fd:4c:10:
42:55:35:24:40:9f:0a:c1:8d:6c:c4:e0:76:15:cf:bf:41:df:
50:54:f1:33:2e:89:77:48:bc:b1:11:87:57:57:c6:62:2a:e3:
fa:55:d1:10:17:12:1b:05:9b:47:99:c6:6a:e4:c8:c5:37:d5:
09:f0:2a:ee:d0:6f:a6:d0:c1:24:44:d8:8d:b1:02:03:74:3d:
60:94:15:63:83:eb:35:42:d3:f2:ae:6c:06:c8:68:f8:1d:11:
a6:9d:96:11:cb:f4:42:6d:d6:4e:7e:6e:12:fd:d0:26:d4:53:
66:3e:e4:a8:a3:a0:08:89:00:8b:28:21:2e:ec:41:22:3e:c4:
e3:ba:99:1b:84:ae:a3:65:70:6e:e6:82:2c:25:43:67:c0:d2:
a5:45:37:5e:cb:29:0a:51:d8:86:14:45:dd:4d:c8:5a:aa:e3:
22:8a:d8:48:f5:80:fb:de:79:1b:59:47:0f:55:8c:5a:ef:c3:
d2:8c:b8:db:74:32:55:e7:b6:39:26:ff:5b:9e:07:67:0d:e1:
5d:4f:90:71:c4:01:2a:c3:25:75:34:cd:1a:66:8c:12:48:55:
c8:15:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:41:16 2025 by rpki-client