This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95082d38-fbd3-4ec1-be01-efba8f21d944.roa
File: 95082d38-fbd3-4ec1-be01-efba8f21d944.roa (raw, json)
Hash identifier: lsTFhhsCGNsCMhEzwc18LeBKbC0E7EtJh6czv3hNadk=
Subject key identifier: EA:C5:62:C7:15:9B:99:4C:1A:20:F6:CA:F9:F7:1D:D4:60:8A:FB:87
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 44901B423913C1F8FBABE70D88C695D54C24BA86
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95082d38-fbd3-4ec1-be01-efba8f21d944.roa
Signing time: Tue 02 Dec 2025 01:30:14 +0000
ROA not before: Tue 02 Dec 2025 01:30:14 +0000
ROA not after: Mon 02 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:90:1b:42:39:13:c1:f8:fb:ab:e7:0d:88:c6:95:d5:4c:24:ba:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 2 01:30:14 2025 GMT
Not After : Mar 2 23:59:59 2026 GMT
Subject: serialNumber=0fbe69c9a63c23ad0383e5a543315eb93a5298c8a78faaf97c3f6b3a6931090c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:06:6c:c2:f0:25:d3:2e:a5:56:f2:47:a8:
2e:42:5c:c3:f2:be:a3:76:9c:f2:24:21:e0:eb:6d:
69:11:c3:46:d6:a3:b4:9f:0b:3b:88:81:40:2f:df:
82:46:98:b8:7b:8b:c3:3d:96:7e:8d:ab:c3:9c:17:
b9:9e:4d:71:a0:0b:da:9c:b6:6b:d5:3a:33:47:ab:
70:7c:14:81:9d:d4:4d:31:62:35:ed:1c:b5:92:20:
57:9b:13:90:06:ae:5e:44:48:03:65:0b:73:16:e1:
7e:6c:22:d1:bf:ab:36:eb:7d:f7:ef:c4:14:6e:4a:
5b:6c:a8:f2:20:89:46:6b:ae:15:43:67:48:49:1a:
63:3a:93:16:6c:b0:10:0e:82:c1:d0:6c:33:67:08:
53:a0:0e:31:b8:9f:29:31:4c:70:d6:d6:01:f3:3a:
db:bd:fa:00:db:87:5c:cb:68:32:e5:99:67:51:5f:
0f:8f:f6:d8:4c:a9:25:37:9a:45:07:4b:33:9f:bb:
f8:2f:4b:d8:32:b0:43:15:eb:60:0d:4a:96:7a:da:
c8:a4:26:f6:d8:72:10:4d:e8:b9:bd:ca:24:bc:ea:
0e:47:7e:e0:b7:54:b7:7c:7d:9e:b4:42:ab:d4:04:
f2:c6:55:84:27:57:a7:39:b3:1e:6a:94:47:03:bb:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C5:62:C7:15:9B:99:4C:1A:20:F6:CA:F9:F7:1D:D4:60:8A:FB:87
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95082d38-fbd3-4ec1-be01-efba8f21d944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.214.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c0:10:a2:a4:97:24:81:e0:36:4d:b2:67:a0:7c:07:52:62:
5d:e5:e9:3d:bc:72:93:60:98:a0:f6:50:cf:3b:5f:4d:f9:0b:
c1:c9:ee:cd:3d:84:a8:63:2a:7b:db:fa:32:f2:d3:8f:87:87:
0b:ec:29:c0:fb:68:12:ad:01:c8:5a:93:3f:a5:a3:ae:4f:c7:
5d:f6:dd:09:68:db:e8:48:ee:ef:0e:d3:aa:d7:d8:c5:7d:20:
8d:ba:de:ad:26:48:b0:0d:c0:f0:a7:47:5e:58:57:c3:50:28:
06:e5:74:b7:6b:e0:30:2f:9b:19:f1:b8:3e:a7:e1:6d:03:8a:
40:e8:b7:b1:50:ce:21:8e:36:d2:68:56:39:27:da:0c:35:a7:
c9:43:90:e8:49:8b:2b:5f:a2:e6:2f:ed:7d:fc:bd:cd:45:af:
8c:44:4e:51:f8:02:5a:0d:d5:ea:8e:f2:bb:7b:01:2a:ec:d9:
6c:50:0e:dc:56:52:61:90:7d:89:2c:bf:aa:19:26:87:45:02:
02:a7:5a:0c:69:cf:8d:ee:c7:84:af:3e:65:dd:91:e8:ac:bc:
2a:ec:89:a5:e2:66:47:e1:39:ca:61:1d:23:7c:10:7c:c3:f5:
5b:be:12:be:26:15:51:35:1f:c6:05:75:ae:56:49:37:5c:c6:
a9:c2:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:50:40 2025 by rpki-client