This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa
File: 938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa (raw, json)
Hash identifier: 5ldrlyuoFjk0HziL7/CBRbpcBuymyx1gOg6WYIZXY/Q=
Subject key identifier: 8E:4D:90:0B:F6:98:FB:38:3A:EA:FF:18:CF:E0:F9:D3:81:0A:AE:D7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3C0402EE0EE2AA21B65F4B716CF0E05C7BD9AA50
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa
Signing time: Sat 06 Dec 2025 03:30:12 +0000
ROA not before: Sat 06 Dec 2025 03:30:12 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.194.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:04:02:ee:0e:e2:aa:21:b6:5f:4b:71:6c:f0:e0:5c:7b:d9:aa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 6 03:30:12 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=2a50ccc1713b62010f47d45cdabeca93e2d05d09682bce18cbf2e2eff6c947ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:30:29:f6:92:e4:b5:3f:38:d1:14:32:94:
79:a8:49:78:92:2f:61:43:4a:0e:6d:5c:48:5c:78:
51:55:82:d9:42:d2:e5:0c:00:81:39:db:72:d0:da:
13:16:dc:c1:90:d8:11:83:93:86:43:71:10:2e:d2:
eb:44:fa:18:88:66:ad:b9:9c:71:ae:eb:51:81:48:
6e:7f:12:06:c2:3b:cd:92:77:9e:c7:82:b4:63:f9:
0a:5f:77:59:60:48:e6:a0:4f:f8:09:e4:d0:c2:2e:
16:d0:cd:9e:94:2f:bd:22:d6:14:17:62:24:e4:2e:
05:28:15:7b:ce:31:92:fc:6e:1b:99:4e:cb:82:4d:
46:d6:93:e2:e9:b1:b7:6f:0e:b4:1b:29:fe:21:b0:
4f:c5:b0:4a:c8:50:a3:a7:e4:51:45:e9:1e:c8:c9:
c5:17:d9:54:c6:98:0d:ee:7c:71:09:8d:57:57:32:
2a:31:e6:c1:28:69:a4:4d:12:d5:45:e0:08:ac:44:
f1:e3:ce:4e:fd:b3:63:28:11:a9:a4:41:94:54:64:
9e:6e:b5:86:35:1d:81:c6:bf:11:83:fa:59:59:4b:
9d:61:0c:33:bc:ee:f6:d1:14:27:a4:a4:3e:97:ab:
46:66:df:00:51:15:29:36:41:3c:b5:d0:cb:64:29:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4D:90:0B:F6:98:FB:38:3A:EA:FF:18:CF:E0:F9:D3:81:0A:AE:D7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.194.0.0/15
Signature Algorithm: sha256WithRSAEncryption
48:88:cb:ef:c9:9b:74:19:8d:7a:8b:6c:5b:03:e8:06:76:f2:
1c:4e:f2:5f:b6:65:41:e1:02:a1:08:91:b7:d1:ca:0b:fd:b5:
87:0a:6e:e6:71:77:ca:ed:02:c0:48:97:95:41:e5:76:89:4c:
7f:6a:0d:dc:76:6b:14:9a:1a:1d:0c:18:d7:f3:5b:b0:16:55:
60:38:84:f4:78:aa:5b:c4:27:bb:04:80:5e:63:3f:a9:bf:db:
cf:86:0b:12:c0:89:17:6b:f4:7d:f7:72:cd:24:f4:23:da:ef:
51:f6:b9:e8:ea:65:31:00:01:66:fa:bb:27:53:0c:6e:af:1a:
22:53:1f:bf:7b:37:12:f9:91:2d:fb:88:3a:af:37:0f:01:f3:
d3:6c:af:36:5c:f8:72:43:18:73:64:76:5f:ab:3a:55:be:d1:
19:d5:c2:36:03:a0:e5:11:1d:60:b1:b4:12:9d:7b:a9:97:f8:
6f:fe:d3:33:02:ed:40:0d:a5:d1:22:f6:6e:9e:b7:e6:c4:c2:
a3:ac:59:94:f9:cb:49:86:62:c1:f7:a7:97:dd:ca:de:04:6c:
30:1a:93:7f:fb:c3:11:4d:46:17:85:a0:45:7b:17:dd:02:6f:
1f:0f:62:c1:a3:4a:ce:37:1a:77:b0:c2:fd:d2:05:f0:bc:44:
65:9b:43:77
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUPAQC7g7iqiG2X0txbPDgXHvZqlAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA2MDMzMDEyWhcNMjYwMzA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYTUwY2NjMTcxM2I2MjAxMGY0N2Q0NWNkYWJlY2E5M2Uy
ZDA1ZDA5NjgyYmNlMThjYmYyZTJlZmY2Yzk0N2VmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDA+zAp9pLktT840RQylHmoSXiSL2FDSg5tXEhceFFVgtlC
0uUMAIE523LQ2hMW3MGQ2BGDk4ZDcRAu0utE+hiIZq25nHGu61GBSG5/EgbCO82S
d57HgrRj+Qpfd1lgSOagT/gJ5NDCLhbQzZ6UL70i1hQXYiTkLgUoFXvOMZL8bhuZ
TsuCTUbWk+LpsbdvDrQbKf4hsE/FsErIUKOn5FFF6R7IycUX2VTGmA3ufHEJjVdX
Miox5sEoaaRNEtVF4AisRPHjzk79s2MoEamkQZRUZJ5utYY1HYHGvxGD+llZS51h
DDO87vbRFCekpD6Xq0Zm3wBRFSk2QTy10MtkKdoBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUjk2QC/aY+zg66v8Yz+D504EKrtcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzkzOGY2YzFjLWEzMWEtNGVmNC05NDc5LTk0ZWE0ZjliZjljOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE2wjANBgkqhkiG9w0BAQsFAAOCAQEASIjL78mbdBmNeotsWwPoBnbyHE7y
X7ZlQeECoQiRt9HKC/21hwpu5nF3yu0CwEiXlUHldolMf2oN3HZrFJoaHQwY1/Nb
sBZVYDiE9HiqW8QnuwSAXmM/qb/bz4YLEsCJF2v0ffdyzST0I9rvUfa56OplMQAB
Zvq7J1MMbq8aIlMfv3s3EvmRLfuIOq83DwHz02yvNlz4ckMYc2R2X6s6Vb7RGdXC
NgOg5REdYLG0Ep17qZf4b/7TMwLtQA2l0SL2bp635sTCo6xZlPnLSYZiwfenl93K
3gRsMBqTf/vDEU1GF4WgRXsX3QJvHw9iwaNKzjcad7DC/dIF8LxEZZtDdw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:53:41 2025 by rpki-client