This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7914a678-9eb4-4e3f-8040-b65bbc16488a.roa
File: 7914a678-9eb4-4e3f-8040-b65bbc16488a.roa (raw, json)
Hash identifier: EWiXuRSG8UHoJhF0jGptEAdeci99awhtQoL+rerH+xI=
Subject key identifier: DC:F0:2E:85:17:21:64:C4:BD:AA:17:02:F4:1A:D5:C5:2E:56:3C:1E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1AA0D32D7ACE2268444356DF6B4301E665ABFD7F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7914a678-9eb4-4e3f-8040-b65bbc16488a.roa
Signing time: Sat 22 Nov 2025 01:21:01 +0000
ROA not before: Sat 22 Nov 2025 01:21:01 +0000
ROA not after: Fri 20 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.174.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a0:d3:2d:7a:ce:22:68:44:43:56:df:6b:43:01:e6:65:ab:fd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 22 01:21:01 2025 GMT
Not After : Feb 20 23:59:59 2026 GMT
Subject: serialNumber=4421b8759d8e0b1adfa7c3af24ea98eff68a0d677e60a3bf3a400b8739358869, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:d3:0b:56:58:e7:6c:b4:d4:72:b6:8e:cc:
17:2a:c8:8d:28:22:ad:46:52:96:4d:cb:85:50:26:
78:bd:af:5b:cf:0c:94:39:34:9f:78:4c:29:af:a7:
9b:2a:8d:f7:c1:74:0a:45:31:dd:a5:cd:dc:29:eb:
f5:dc:c8:c6:f4:2a:9d:fd:1c:ef:71:b4:50:b6:dc:
39:f8:d4:5c:81:9d:e8:bd:86:00:97:1e:08:90:84:
d1:fb:d7:b6:d7:64:5c:bf:6b:3c:2b:9c:25:a0:72:
95:5c:f7:52:be:70:0b:2f:c7:a7:7c:46:f2:7c:b5:
14:10:7c:29:6e:cb:ca:34:70:2e:b7:db:aa:d6:ff:
cf:ca:00:a2:f7:34:6b:eb:e0:e8:f4:d9:ed:63:83:
e5:1f:99:ca:a1:21:dc:54:21:93:64:2f:ee:5b:af:
71:ed:0b:ab:5f:00:43:62:39:f0:27:ff:d8:34:5c:
a1:b0:67:dd:0a:c7:47:bd:a9:16:cb:c4:e9:c3:4b:
42:b8:9a:bc:b7:33:d9:0b:a0:13:dd:a3:b9:6d:3f:
5a:d4:cb:05:ce:fb:8c:3b:0f:f9:3d:bb:ff:5e:df:
33:83:7b:8f:d3:b7:4a:ab:e6:45:9d:7a:98:a3:44:
8a:f3:a5:cd:2b:63:3e:2a:b3:3c:42:84:d6:94:c8:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F0:2E:85:17:21:64:C4:BD:AA:17:02:F4:1A:D5:C5:2E:56:3C:1E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7914a678-9eb4-4e3f-8040-b65bbc16488a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.174.46.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:14:b3:2b:84:31:a7:ad:46:13:c7:0f:7d:57:5a:3d:5e:6a:
98:fc:cf:af:32:03:49:d9:37:f8:13:6c:f2:2d:5d:cd:4c:21:
15:c5:28:09:69:4c:c4:08:4b:19:bd:dc:84:47:8f:08:f1:2e:
dc:65:1d:4c:71:71:4f:4a:28:77:c4:a9:a4:88:8c:f9:50:52:
b0:3b:b9:ab:30:87:ac:f2:85:6f:ae:50:40:9c:4f:2b:bb:71:
37:3c:77:b1:c8:4d:c9:68:95:f3:0d:af:b1:c0:ba:c5:90:c6:
85:9a:a7:42:c8:4b:42:a9:71:2e:82:4a:4f:e4:b7:28:98:d4:
55:31:45:f5:db:5b:77:c5:4c:74:d9:6e:5e:4b:f3:6d:fc:a1:
56:95:f3:95:da:03:71:38:4c:fa:f0:b0:90:a5:80:a3:39:25:
f1:dc:8e:a9:7b:96:c3:2b:a3:dd:92:1e:ae:9b:35:00:7c:a4:
dd:c8:cb:3d:14:78:90:e7:f1:a5:e8:3e:b9:c2:61:fc:ab:cb:
a0:de:15:9a:e8:5c:0a:23:ad:58:e7:83:ea:1a:07:42:23:3f:
29:38:0b:99:21:27:42:e6:dd:22:97:5c:d1:b6:b7:b4:58:d6:
6b:ee:7f:9d:a2:1d:da:3c:33:31:b1:44:03:ce:df:75:aa:ec:
c6:1d:29:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGqDTLXrOImhEQ1bfa0MB5mWr/X8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTIyMDEyMTAxWhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NDIxYjg3NTlkOGUwYjFhZGZhN2MzYWYyNGVhOThlZmY2
OGEwZDY3N2U2MGEzYmYzYTQwMGI4NzM5MzU4ODY5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEOdMLVljnbLTUcraOzBcqyI0oIq1GUpZNy4VQJni9r1vP
DJQ5NJ94TCmvp5sqjffBdApFMd2lzdwp6/XcyMb0Kp39HO9xtFC23Dn41FyBnei9
hgCXHgiQhNH717bXZFy/azwrnCWgcpVc91K+cAsvx6d8RvJ8tRQQfCluy8o0cC63
26rW/8/KAKL3NGvr4Oj02e1jg+UfmcqhIdxUIZNkL+5br3HtC6tfAENiOfAn/9g0
XKGwZ90Kx0e9qRbLxOnDS0K4mry3M9kLoBPdo7ltP1rUywXO+4w7D/k9u/9e3zOD
e4/Tt0qr5kWdepijRIrzpc0rYz4qszxChNaUyC/NAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3PAuhRchZMS9qhcC9BrVxS5WPB4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzc5MTRhNjc4LTllYjQtNGUzZi04MDQwLWI2NWJiYzE2NDg4YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEDri4wDQYJKoZIhvcNAQELBQADggEBAFoUsyuEMaetRhPHD31XWj1eapj8
z68yA0nZN/gTbPItXc1MIRXFKAlpTMQISxm93IRHjwjxLtxlHUxxcU9KKHfEqaSI
jPlQUrA7uaswh6zyhW+uUECcTyu7cTc8d7HITclolfMNr7HAusWQxoWap0LIS0Kp
cS6CSk/ktyiY1FUxRfXbW3fFTHTZbl5L8238oVaV85XaA3E4TPrwsJClgKM5JfHc
jql7lsMro92SHq6bNQB8pN3Iyz0UeJDn8aXoPrnCYfyry6DeFZroXAojrVjng+oa
B0IjPyk4C5khJ0Lm3SKXXNG2t7RY1mvuf52iHdo8MzGxRAPO33Wq7MYdKQc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:15:02 2025 by rpki-client