This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90ebf1bc-924e-4e44-bcdd-47fe60c0191a.roa
File: 90ebf1bc-924e-4e44-bcdd-47fe60c0191a.roa (raw, json)
Hash identifier: r0kbU+m5q31+DG+Ll7cNo7+SpviPfPAQgSJqICJOTOE=
Subject key identifier: 10:42:EE:AC:96:12:7A:36:1D:E9:18:10:EF:1F:1B:63:23:05:13:CC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 413830B8871FA66F65E54849D319DC27F49324
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90ebf1bc-924e-4e44-bcdd-47fe60c0191a.roa
Signing time: Mon 08 Dec 2025 01:50:44 +0000
ROA not before: Mon 08 Dec 2025 01:50:44 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.38.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:38:30:b8:87:1f:a6:6f:65:e5:48:49:d3:19:dc:27:f4:93:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 8 01:50:44 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=18e03e5c5f707afa9735122f2672d67fe601e799abf1a19a4852a7cb8719186d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:1f:12:c3:ba:d8:00:12:f4:4d:56:3a:64:
60:14:c5:d5:66:3b:51:f6:8b:30:35:99:e0:05:d8:
20:2f:6d:a4:92:03:1d:41:c0:c0:cc:6f:40:af:d1:
86:23:72:b3:0c:dd:0e:cd:ec:2a:cd:3b:5c:54:2f:
15:a3:26:23:95:3c:43:f5:83:28:73:8f:32:44:87:
58:f9:78:b9:64:63:54:c9:52:6d:62:65:6b:5e:92:
47:94:44:49:39:55:a9:08:93:9e:cf:fd:79:25:96:
0a:89:f8:04:90:d8:f3:00:1b:6d:ce:0a:f5:12:53:
98:10:41:9d:5a:d5:86:05:cd:a0:88:8e:b2:83:2e:
6b:3a:1f:e7:bb:64:82:e8:f7:a7:c1:38:50:6b:97:
c1:76:e0:76:e1:b2:71:fe:d8:80:c3:2c:8d:b3:59:
60:cf:48:15:af:92:44:fe:8d:17:ef:dc:a5:cf:55:
83:b4:26:23:fc:0b:b6:0c:e3:a5:2a:14:cb:8c:05:
be:7c:c5:08:8b:94:6b:70:76:bf:93:14:a2:d5:6f:
59:2d:36:18:31:5b:18:a3:18:2a:07:b7:5d:68:7e:
fa:72:03:6c:ac:97:68:ec:83:43:0b:3b:f0:0c:59:
b8:3e:de:39:d6:4b:01:7d:d3:7b:2e:e5:52:8c:48:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:EE:AC:96:12:7A:36:1D:E9:18:10:EF:1F:1B:63:23:05:13:CC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90ebf1bc-924e-4e44-bcdd-47fe60c0191a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:19:25:8e:d1:64:02:ae:08:f0:88:bf:bf:c9:71:c9:eb:c3:
51:d7:16:b3:e4:d7:f1:51:a4:71:1e:d1:c2:73:76:67:41:52:
97:e9:d2:66:8a:ff:f9:60:1e:97:79:d3:18:fc:29:e8:3e:27:
0f:12:86:c8:7e:46:77:d7:17:3b:3d:a1:8c:84:b6:95:35:96:
8e:5a:3f:27:59:76:5a:0a:e5:98:e2:48:29:9a:8b:42:7c:7d:
9c:cc:61:57:87:d6:95:fe:dc:28:3b:72:dd:f2:6a:c2:44:05:
a2:11:4f:6b:0d:cd:0e:da:85:c2:16:43:fc:be:07:d5:49:e1:
e2:d2:3a:61:e8:4b:6b:e7:bf:51:b6:0f:5d:6c:d4:59:72:85:
38:d2:54:83:1c:82:13:c0:31:71:2e:81:c7:31:d1:84:16:e2:
07:de:54:46:24:45:cc:85:68:dd:b9:77:f8:99:a0:78:2d:8f:
d7:08:30:51:85:1d:4b:20:9b:48:a5:2c:04:9d:8c:5d:41:cb:
3a:d1:6f:cf:28:bf:e4:bf:cf:ba:f4:a8:c8:9b:fc:b2:20:0c:
4b:79:ea:4b:6d:17:a8:6b:5a:f8:47:75:5e:09:b5:85:6b:00:
5f:a0:89:ed:d1:fb:b9:63:a6:7f:88:2b:0c:87:e7:60:35:14:
9d:f2:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:02:18 2025 by rpki-client