This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2501765-3375-4a8e-87aa-a58b9537fd86.roa
File: a2501765-3375-4a8e-87aa-a58b9537fd86.roa (raw, json)
Hash identifier: O3Hb7IzFOTBpSstkq8zoh10sun/HPUIE2x8JQ71+St0=
Subject key identifier: BA:96:06:27:AB:F8:FB:43:1A:35:63:30:EC:70:F7:D5:95:98:38:DC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5F2EA2D01682D817EF8C0A0ACBC7AD9A6A3DBC5B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2501765-3375-4a8e-87aa-a58b9537fd86.roa
Signing time: Fri 05 Dec 2025 00:21:12 +0000
ROA not before: Fri 05 Dec 2025 00:21:12 +0000
ROA not after: Thu 05 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.144.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2e:a2:d0:16:82:d8:17:ef:8c:0a:0a:cb:c7:ad:9a:6a:3d:bc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 5 00:21:12 2025 GMT
Not After : Mar 5 23:59:59 2026 GMT
Subject: serialNumber=fe054ecd53ac07110a2951ad94b6e8bdd48e873993c51dd6687957e59388c5ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:9e:38:43:ac:04:1d:1f:34:fb:ca:ae:bf:
bb:7e:35:45:f3:e4:bd:b1:c9:02:4c:0d:b6:3c:6f:
1d:a7:2d:ec:86:0f:ef:b8:26:26:75:ca:fb:1d:b1:
9a:6f:db:eb:58:c1:2e:15:bf:85:27:68:e9:0a:79:
c6:72:8e:41:01:c4:ca:26:ba:70:aa:85:5a:5e:dd:
85:90:72:48:f5:28:ba:63:f8:36:62:a0:23:83:6c:
7c:4d:f1:b3:4e:69:a2:5a:a5:c2:af:e9:fd:2c:ab:
5d:29:52:0c:f0:eb:7a:f0:33:0b:55:05:db:5b:1c:
48:17:08:14:ea:e0:13:55:4e:15:b4:4a:c6:8e:d4:
38:50:e5:cc:0b:a9:59:40:9e:b9:74:56:c9:c7:54:
ee:3c:7b:a4:b2:bc:79:8b:67:82:0b:ff:be:01:f6:
d2:15:89:5e:f4:b8:4d:2b:dd:f2:1f:58:a6:57:42:
80:5d:9e:2d:7d:57:0f:69:82:3c:b1:cf:fc:3a:94:
c5:69:9c:93:59:95:a4:f8:5d:9d:9f:29:2d:73:11:
d6:ae:96:5a:2f:be:b9:28:19:00:3a:f1:d6:01:af:
c3:50:42:8b:42:ca:14:d4:ab:47:18:0b:7e:fa:ff:
8a:04:52:09:e7:9d:f8:c7:b8:c8:3a:09:68:ea:b2:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:96:06:27:AB:F8:FB:43:1A:35:63:30:EC:70:F7:D5:95:98:38:DC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2501765-3375-4a8e-87aa-a58b9537fd86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.144.0.0/18
Signature Algorithm: sha256WithRSAEncryption
20:3f:92:b0:03:57:c6:e2:94:d1:79:91:3f:9c:0c:1e:b9:a7:
3f:c3:33:6b:a3:9a:1b:0a:cd:d7:97:4b:77:9a:47:46:13:ae:
19:b2:50:ae:f2:4f:c9:ca:15:d3:20:34:e5:8d:0b:25:77:3d:
c3:8b:e3:4e:fa:10:1b:1d:f9:f0:54:c6:49:8f:4c:27:57:94:
b8:aa:c9:ff:85:c5:4c:a5:64:0a:b5:16:8e:89:04:54:a4:0b:
89:8f:95:0b:58:8c:aa:80:7d:3d:74:84:9c:9c:99:1d:6e:32:
a5:a0:03:bc:2c:d4:65:74:9a:b1:2a:31:a0:91:f2:78:20:1d:
e1:bb:16:09:9e:25:41:25:22:83:7d:a5:f6:19:63:f7:45:42:
e9:2e:90:fd:0f:95:28:96:e7:22:8f:a3:cd:5f:90:b3:42:12:
70:59:f7:7b:d3:3b:c4:a7:11:a3:27:ec:8b:47:93:0d:f7:1d:
c0:30:a8:78:8a:a7:eb:1b:1e:01:42:70:a1:b2:eb:9f:21:d8:
1d:78:ac:79:45:0a:c5:d4:fe:3a:bc:85:8c:10:b4:46:4c:80:
e2:ba:7c:9e:8a:71:81:f1:72:d0:91:07:39:07:3a:fa:4f:f5:
54:1c:f8:89:b9:64:94:00:ed:64:f9:37:b4:d7:38:13:43:ae:
66:b1:db:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:06:58 2025 by rpki-client