This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8698932d-7846-410f-9aa5-a71a9f14ac72.roa
File: 8698932d-7846-410f-9aa5-a71a9f14ac72.roa (raw, json)
Hash identifier: X6kPxNS1Hf7xVQ5ocnn+gRgjeD+aGks1SdKK20HTupw=
Subject key identifier: 52:FD:59:11:8E:4C:50:A4:B7:B1:12:4D:34:54:E0:AD:0A:FF:05:53
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 15A2DBF3657CF58A6FCC70543ED0D5639C425FB3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8698932d-7846-410f-9aa5-a71a9f14ac72.roa
Signing time: Sat 29 Nov 2025 00:50:04 +0000
ROA not before: Sat 29 Nov 2025 00:50:04 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 14618
IP address blocks: 18.35.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a2:db:f3:65:7c:f5:8a:6f:cc:70:54:3e:d0:d5:63:9c:42:5f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 00:50:04 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=1477f1bafba5b0b4ae2169c7a492c26c58716e0c07c022ef88b78003abd90833, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:f9:b4:8b:8a:cc:82:74:6b:5a:9d:30:74:
b7:42:01:ef:86:1a:e9:b8:d8:0d:6b:aa:90:83:77:
ef:94:8d:89:d6:5f:be:ea:ea:41:0c:01:ff:24:da:
77:c0:00:ea:dc:1e:5b:be:67:54:b8:f0:0c:f0:e4:
cb:6e:df:ca:01:5b:51:80:70:cb:7c:4f:5b:d5:bf:
ff:6e:42:5d:42:4d:4d:6d:fa:aa:8e:4b:fe:68:41:
5e:52:19:3f:db:6a:30:2f:48:48:b6:35:c9:0d:2e:
4a:6a:26:75:1f:8c:f1:f2:a1:ab:b4:4f:cd:80:80:
28:38:cc:ca:04:3c:a6:a3:58:08:ae:9d:d4:b6:94:
51:96:04:68:0f:0b:0f:b6:44:60:7e:06:91:91:db:
2d:5e:a0:52:4e:7c:5a:1b:34:e4:56:9f:5d:56:aa:
8e:ea:63:7f:28:d6:9e:71:75:50:70:0a:29:6b:46:
cb:29:e9:9f:32:86:1c:e3:92:90:16:20:b9:7a:8b:
7b:69:a7:99:f1:8c:7e:86:ba:ae:2b:7f:2d:06:2c:
e8:5b:8b:e8:02:4b:dd:62:47:33:aa:90:00:ce:2b:
96:a3:88:9d:0b:f7:2d:c8:96:fd:97:6f:4b:cf:b4:
2a:e8:30:53:2e:ed:91:52:9a:75:bb:34:45:c5:63:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:59:11:8E:4C:50:A4:B7:B1:12:4D:34:54:E0:AD:0A:FF:05:53
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8698932d-7846-410f-9aa5-a71a9f14ac72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:e9:36:ca:12:07:51:1e:5c:a0:73:10:32:fb:21:c0:de:53:
35:e5:b4:0a:49:c6:42:db:9e:d5:9f:60:c3:5f:cd:80:e0:fd:
fe:e7:2d:5e:29:14:07:d7:43:7a:a5:18:4a:36:dc:b6:98:a4:
44:3c:5a:1c:88:90:29:ea:0d:df:04:64:00:53:b0:a6:a4:bb:
09:68:56:a7:de:62:7a:e2:26:68:a9:12:2f:0f:45:14:8e:e9:
16:09:46:06:d6:3b:6a:e9:1a:37:bf:74:66:ea:67:80:b9:24:
4e:8b:1a:09:2f:7a:0a:fd:67:9d:f5:8a:5d:f4:c3:aa:d8:4a:
3b:c0:c7:a0:60:d6:90:c2:46:8f:19:c7:02:88:c2:8c:55:36:
a5:f8:fb:d5:f4:3d:ad:09:37:92:c7:0b:5c:0d:e9:42:9b:88:
e3:77:5a:6b:64:05:97:4f:72:c9:81:f0:9a:78:f8:c2:ed:47:
b8:63:81:26:a8:7f:9d:14:0c:44:b7:04:60:50:ab:68:31:88:
3b:2b:15:c1:55:9b:be:6b:ed:6f:a5:29:24:3f:bb:5b:3c:f5:
3d:fc:8d:bc:34:cf:e7:21:45:1a:d5:ae:2e:97:e4:16:16:db:
75:55:01:e9:12:32:dc:a8:49:e9:4c:a5:8b:59:80:92:c4:af:
6e:54:b5:0e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUFaLb82V89YpvzHBUPtDVY5xCX7MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTI5MDA1MDA0WhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNDc3ZjFiYWZiYTViMGI0YWUyMTY5YzdhNDkyYzI2YzU4
NzE2ZTBjMDdjMDIyZWY4OGI3ODAwM2FiZDkwODMzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhM/m0i4rMgnRrWp0wdLdCAe+GGum42A1rqpCDd++UjYnW
X77q6kEMAf8k2nfAAOrcHlu+Z1S48Azw5Mtu38oBW1GAcMt8T1vVv/9uQl1CTU1t
+qqOS/5oQV5SGT/bajAvSEi2NckNLkpqJnUfjPHyoau0T82AgCg4zMoEPKajWAiu
ndS2lFGWBGgPCw+2RGB+BpGR2y1eoFJOfFobNORWn11Wqo7qY38o1p5xdVBwCilr
Rssp6Z8yhhzjkpAWILl6i3tpp5nxjH6Guq4rfy0GLOhbi+gCS91iRzOqkADOK5aj
iJ0L9y3Ilv2Xb0vPtCroMFMu7ZFSmnW7NEXFY1wBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUUv1ZEY5MUKS3sRJNNFTgrQr/BVMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzg2OTg5MzJkLTc4NDYtNDEwZi05YWE1LWE3MWE5ZjE0YWM3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASIzANBgkqhkiG9w0BAQsFAAOCAQEAqek2yhIHUR5coHMQMvshwN5TNeW0
CknGQtue1Z9gw1/NgOD9/uctXikUB9dDeqUYSjbctpikRDxaHIiQKeoN3wRkAFOw
pqS7CWhWp95ieuImaKkSLw9FFI7pFglGBtY7aukaN790ZupngLkkTosaCS96Cv1n
nfWKXfTDqthKO8DHoGDWkMJGjxnHAojCjFU2pfj71fQ9rQk3kscLXA3pQpuI43da
a2QFl09yyYHwmnj4wu1HuGOBJqh/nRQMRLcEYFCraDGIOysVwVWbvmvtb6UpJD+7
Wzz1PfyNvDTP5yFFGtWuLpfkFhbbdVUB6RIy3KhJ6Uyli1mAksSvblS1Dg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:35:25 2025 by rpki-client