This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0063a4f-b1b8-48b1-bf7a-a1fd2e7f474b.roa
File: a0063a4f-b1b8-48b1-bf7a-a1fd2e7f474b.roa (raw, json)
Hash identifier: 79jVM1HUjk79wOA0WS+xc2/VZeajW1A9kDqgKcvg9r8=
Subject key identifier: B0:39:0C:DA:03:D0:AC:0D:66:CE:1C:CA:CD:01:76:AF:0F:49:F6:08
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3E3810C64A661E2A33D5C30F7177CFD273269AAD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0063a4f-b1b8-48b1-bf7a-a1fd2e7f474b.roa
Signing time: Fri 05 Dec 2025 02:11:34 +0000
ROA not before: Fri 05 Dec 2025 02:11:34 +0000
ROA not after: Thu 05 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:38:10:c6:4a:66:1e:2a:33:d5:c3:0f:71:77:cf:d2:73:26:9a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 5 02:11:34 2025 GMT
Not After : Mar 5 23:59:59 2026 GMT
Subject: serialNumber=dee6edbb4ec086043856a3f42e945370dd4276e17901d2c0376cb8f896df8791, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:16:52:49:b5:a2:4b:5c:b8:4e:96:b1:a8:
35:59:be:dc:74:a1:03:a8:96:f5:69:cf:a3:05:f9:
cf:ed:14:5c:1e:d1:cc:1d:f4:0a:f2:38:83:4d:0b:
5a:71:4b:b1:ad:45:4d:bb:28:92:71:6c:71:56:c9:
2b:40:7c:b5:5f:c1:c1:e7:63:73:9e:76:b0:31:ee:
23:58:e8:ed:cb:ca:bb:7f:50:a7:07:b4:4b:ba:8e:
fd:67:f0:dc:96:1c:15:60:c3:38:15:46:23:e8:a8:
5a:d7:08:12:55:8f:86:6c:22:2b:85:54:a7:3c:ae:
d3:16:5d:1a:ca:0f:62:91:59:2f:06:84:e7:e9:1d:
96:ca:80:03:70:ce:35:05:1c:27:03:cc:dc:95:ce:
8e:02:37:bf:21:79:b2:d3:85:7c:dc:d7:ba:53:ed:
47:dd:72:34:e8:73:53:55:df:7d:58:df:20:e9:08:
f6:57:78:3a:50:c3:65:6f:c0:19:40:42:0e:86:ba:
b8:d2:45:b8:a5:e3:38:ab:1d:a1:fb:40:fb:4d:4a:
40:88:c3:9b:a6:62:36:6f:61:78:0e:97:8d:65:f6:
e3:52:59:77:36:e3:76:a3:e9:24:19:ee:92:09:76:
b0:f2:26:02:75:0b:f1:4f:c5:7c:20:85:ec:13:a9:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:0C:DA:03:D0:AC:0D:66:CE:1C:CA:CD:01:76:AF:0F:49:F6:08
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0063a4f-b1b8-48b1-bf7a-a1fd2e7f474b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3e:bd:97:31:b1:d0:70:5b:5e:8b:55:d1:bc:87:8f:b5:ac:
af:c5:f3:c7:b6:91:b8:1a:f5:bb:ee:de:ff:65:f3:f5:0b:a1:
63:56:ea:7f:7d:20:77:3e:0d:51:6e:88:7a:5e:bf:26:76:4d:
e0:62:b6:29:15:b7:e6:d4:6e:78:67:19:10:29:12:04:77:73:
a8:34:8b:87:91:9a:01:b3:58:cd:51:08:e7:25:ba:14:58:d8:
99:5e:0a:79:9d:b5:f1:9d:17:e6:bb:9f:59:12:fa:d5:b9:47:
ce:69:43:11:17:61:0d:40:03:00:b2:fe:da:3d:f2:92:b3:6b:
d7:75:0d:7f:fa:ac:b1:64:75:1e:87:39:8e:58:96:c1:65:76:
d3:7a:4f:c1:0e:92:1c:18:31:14:28:49:25:10:36:4a:c5:b8:
2e:ca:12:bb:ad:51:3a:ec:dd:30:0b:29:96:82:38:1f:fc:9b:
07:f6:77:a9:72:e9:74:9c:21:04:97:77:5a:11:50:64:69:90:
96:cf:81:15:e5:91:37:43:b2:62:eb:11:d7:d5:1f:76:3c:7c:
8c:8a:35:f1:05:c4:f8:b5:58:bd:95:93:be:4f:ec:34:c4:26:
4f:2c:7a:42:ad:ba:65:e8:9b:fd:48:fd:c4:fa:12:a3:a1:13:
eb:bb:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:31:28 2025 by rpki-client