This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbacf636-ea8a-4d61-a985-109683cc4a86.roa
File: bbacf636-ea8a-4d61-a985-109683cc4a86.roa (raw, json)
Hash identifier: gEvLBFVc4uWR3oJC29c+wj2W818fCq3B25FcuE2tawM=
Subject key identifier: 24:D3:8B:01:73:84:A2:29:58:9B:CE:F7:AF:4F:4B:0B:F4:BF:E5:D4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 438A90B3247E1D7BE642EA6945DD29BA0CBC559D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbacf636-ea8a-4d61-a985-109683cc4a86.roa
Signing time: Sat 29 Nov 2025 01:30:56 +0000
ROA not before: Sat 29 Nov 2025 01:30:56 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.218.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8a:90:b3:24:7e:1d:7b:e6:42:ea:69:45:dd:29:ba:0c:bc:55:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 01:30:56 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=de87b32921b9f8ca621680ffd29d8c0295ae1f2bc8db039455d2a72a6f436832, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:04:a3:3b:e6:62:fe:c1:f9:aa:22:b8:7a:
8f:7b:50:80:e6:8c:9d:1c:b9:e4:41:a7:48:f2:1c:
7f:85:51:fc:3c:19:eb:c5:7b:dc:0f:85:aa:e1:0a:
92:49:a3:7e:ff:08:8e:07:ea:f8:8f:36:6d:65:27:
9f:55:d9:a6:02:14:25:a0:e8:31:b5:75:61:c0:7d:
7e:d8:7a:2c:76:9c:06:35:ed:5c:63:f4:f2:2a:3b:
95:cc:fb:0c:94:65:62:b8:04:fd:77:e8:29:12:d3:
62:c0:43:12:83:67:6a:49:f5:00:cf:b7:a9:3e:93:
6c:e1:22:e2:ea:72:2e:9f:eb:0c:ae:a4:49:70:d7:
40:29:87:d0:a0:7e:bd:57:6e:4d:f6:b9:d0:dd:5d:
ff:16:81:8c:9f:90:27:d5:82:79:2f:86:31:c7:b7:
41:93:fc:5a:a1:76:7b:e5:53:0f:63:ce:fb:ad:1d:
a9:bd:68:a7:ac:7f:89:e1:26:ac:10:9e:4e:b3:40:
36:40:34:dc:19:43:52:bf:d8:c2:ad:5f:61:ba:9b:
a0:ea:a5:3d:86:e9:06:cf:6e:d2:fa:92:87:85:66:
b6:04:a5:d7:47:55:72:4f:bd:ce:72:e5:97:f4:c4:
d4:1f:44:ef:49:1d:07:91:05:4e:4b:ea:2e:a8:d8:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D3:8B:01:73:84:A2:29:58:9B:CE:F7:AF:4F:4B:0B:F4:BF:E5:D4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbacf636-ea8a-4d61-a985-109683cc4a86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.218.128.0/17
Signature Algorithm: sha256WithRSAEncryption
84:4c:9b:08:53:9d:b9:30:34:49:f0:ac:6a:f9:26:e0:0f:6d:
10:38:94:7b:09:6e:57:1b:62:bd:ee:b4:06:67:e7:25:3d:97:
43:a4:9b:d0:18:59:25:20:af:04:ca:7b:3e:4b:a0:7c:1a:4b:
70:d1:be:06:6d:86:9a:54:e2:7f:77:f8:8c:0a:bd:24:4f:fd:
1c:ac:d1:33:06:0b:a9:85:4a:b3:6a:c2:00:5e:e4:f4:77:c2:
1d:f4:4b:c5:7b:ac:0c:fa:35:00:17:ef:2c:49:b2:8e:f0:0b:
95:8a:c1:49:0b:35:ee:38:d7:d1:0a:8f:cf:8b:a4:44:04:6f:
b8:99:91:66:ca:78:97:89:61:30:b5:bf:3f:f4:a4:6d:30:1f:
04:15:9f:71:a2:60:ff:08:10:d2:0e:6e:a6:71:0e:01:06:07:
96:03:28:4d:70:68:98:93:73:d7:8f:67:f8:39:02:d1:2e:d9:
8f:66:e8:44:e5:fc:c6:73:8b:44:49:84:ef:a1:6c:5a:f4:b6:
11:9f:34:0e:90:a6:48:e5:30:49:d0:a0:14:c3:b5:8b:2d:76:
66:73:94:d8:0b:ec:0c:1d:97:6c:bf:2c:0e:8f:49:9f:87:b8:
54:89:93:2d:7a:f5:41:23:b4:a3:a1:c4:37:0a:23:92:7b:9c:
ae:29:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:54:01 2025 by rpki-client