This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8f3f7ad-8ff7-45fc-9e12-7ade3d63d9ec.roa
File: c8f3f7ad-8ff7-45fc-9e12-7ade3d63d9ec.roa (raw, json)
Hash identifier: JlFWokrtl4wtM3vIPLhvWtY8EsuOpAqV6mnMWlmVWew=
Subject key identifier: 68:9B:AD:87:9F:74:BA:34:C6:CD:DC:24:63:1C:82:6F:36:EA:3D:02
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 39BC3E06F232735D8D8D847C11BD3CAB0348DCA3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8f3f7ad-8ff7-45fc-9e12-7ade3d63d9ec.roa
Signing time: Tue 02 Dec 2025 01:00:09 +0000
ROA not before: Tue 02 Dec 2025 01:00:09 +0000
ROA not after: Mon 02 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bc:3e:06:f2:32:73:5d:8d:8d:84:7c:11:bd:3c:ab:03:48:dc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 2 01:00:09 2025 GMT
Not After : Mar 2 23:59:59 2026 GMT
Subject: serialNumber=564de8feef0381b691454b633f4863e1c60f7c1dfe0c19dfb2d5c1abfcf8ab8c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:8f:ec:16:9e:b7:c1:6c:4c:c6:b9:fd:b3:
e9:0f:77:62:7e:e0:bf:70:95:3b:97:f0:1f:4c:41:
1a:5e:d7:b1:14:7f:9d:69:9a:01:b2:cb:47:b0:86:
1c:c4:2d:22:86:7f:32:35:a0:36:42:b8:2c:fb:8b:
cc:a2:44:e3:39:27:05:94:a4:cc:4e:b0:51:ed:d1:
3e:a2:76:1b:4b:02:3d:0c:0e:d6:74:76:6d:8e:fa:
7d:a6:25:0f:9c:36:ce:c8:21:59:c4:aa:c7:89:40:
43:af:de:c7:7e:79:9c:40:e7:7d:ba:7a:81:c3:b1:
c1:f1:33:81:bf:33:5a:0f:4b:0d:84:1a:57:5a:15:
12:00:dd:d6:70:61:da:da:95:b0:0d:76:23:ae:96:
3a:a7:97:b0:00:9a:27:fc:09:52:88:93:d9:1c:20:
49:39:58:9a:d7:0a:52:d8:98:0a:4a:a5:0a:94:30:
15:d3:d5:4b:43:28:fe:ff:27:38:9c:e3:a5:b0:d3:
6b:e1:db:6d:7f:ab:4c:4b:08:ea:23:87:c6:60:8a:
e8:ce:48:33:bd:8c:f6:6b:db:94:46:1f:cf:79:d3:
89:83:0d:40:24:f1:ff:4b:ce:38:52:aa:9c:58:c5:
e9:a1:34:5a:ae:4e:d7:fa:bf:a4:33:c0:2b:b6:56:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:AD:87:9F:74:BA:34:C6:CD:DC:24:63:1C:82:6F:36:EA:3D:02
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8f3f7ad-8ff7-45fc-9e12-7ade3d63d9ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.114.0/24
Signature Algorithm: sha256WithRSAEncryption
65:32:f8:b8:dc:a1:6e:bc:22:2d:9a:9e:7e:37:7a:90:32:d5:
9a:d9:0c:df:a1:5c:1b:1e:9c:af:a7:9d:97:1e:fe:94:b6:88:
39:3f:95:5b:be:84:e5:32:c6:20:07:fa:ba:d4:e4:63:ac:27:
3c:97:b3:e7:c8:98:bf:76:5d:91:cd:4c:9f:ce:c7:66:b9:2d:
2a:d0:53:2e:f7:b8:ee:47:ff:cd:49:8a:b9:04:31:46:f3:87:
19:ca:40:9b:3d:9f:0f:30:52:b9:ed:90:b4:af:12:e5:b1:6f:
a7:ba:58:89:f2:ea:e9:3d:4c:e0:48:5b:0e:24:41:aa:aa:2c:
c8:11:0f:ea:0a:1f:d7:af:6b:03:01:24:13:1f:de:37:3d:43:
2f:62:9d:f1:f8:c7:af:da:d1:f6:9d:5e:42:9a:02:ea:a3:0b:
47:5e:16:82:b5:04:d9:09:67:fe:55:e3:02:e8:54:8a:f9:06:
a4:28:1b:3b:e4:53:52:52:54:c1:de:20:04:ef:6a:b3:d2:25:
53:5d:31:11:40:2e:d8:69:d2:ca:38:d6:03:02:3a:8a:13:61:
2b:ae:7f:b8:68:b1:e5:5d:ab:5f:26:ba:66:a5:85:fd:8d:b3:
d6:69:e3:d5:ff:bb:90:34:b0:e0:c7:dc:26:18:8a:92:71:44:
23:8e:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:49:31 2025 by rpki-client