This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cef8d8e1-26f9-4f5b-a428-0989b643436b.roa
File: cef8d8e1-26f9-4f5b-a428-0989b643436b.roa (raw, json)
Hash identifier: F28iOA0zOD0n7kfLSZIrzbpGtk8LKvjlQLtcdfTu+8w=
Subject key identifier: 25:3E:D8:58:53:28:2A:89:09:6C:86:06:3E:BF:15:2C:48:42:1F:BD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0EF62DEFF6B204C717F42AF2EDAE9A1C38815CE2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cef8d8e1-26f9-4f5b-a428-0989b643436b.roa
Signing time: Wed 10 Dec 2025 01:30:11 +0000
ROA not before: Wed 10 Dec 2025 01:30:11 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.144.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f6:2d:ef:f6:b2:04:c7:17:f4:2a:f2:ed:ae:9a:1c:38:81:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 01:30:11 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=03bbef99ced9d2047b7eac38a8b232f5aa267250d1b5f33d77d595b23974e9e7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:f1:90:97:86:9d:5e:2a:78:cb:a2:3e:33:
ef:fe:5c:21:9a:48:56:bb:49:8e:cb:ad:a1:05:d1:
8c:0a:5d:61:5f:d7:00:66:d4:cd:42:8d:42:6c:55:
e6:6a:bd:63:97:c1:07:dd:a6:b5:f2:96:8d:19:7f:
a7:1a:06:d3:41:e2:cd:03:3d:39:e4:3f:a9:fe:0a:
c8:40:1b:69:ad:eb:10:d7:94:90:85:b5:13:d4:14:
a9:a0:6b:99:b2:4f:39:2e:b8:9d:80:26:8c:56:4a:
ef:b3:59:fb:9d:a4:6e:22:06:c0:c5:ac:9b:53:d9:
2e:00:cd:3c:6e:97:a3:79:b1:f2:2c:88:18:6e:98:
a7:99:3e:48:05:43:48:ab:da:28:05:4e:4c:b9:0c:
59:b0:3f:7f:ad:80:d3:06:34:7a:3f:23:33:3a:d7:
0d:8e:d8:59:0d:cc:98:aa:32:5c:18:71:74:66:78:
37:2d:75:0b:c8:fb:e9:d1:8c:46:a1:a9:37:4a:31:
07:85:ba:f9:56:b7:65:a8:fa:45:39:5b:1d:bc:a6:
df:d7:78:b4:14:e9:cf:e2:ee:f4:a3:02:2f:25:34:
5d:39:43:a9:98:c2:6b:3c:9d:ca:11:b2:73:ac:fc:
b8:8c:8c:9b:60:c9:84:e4:94:d7:32:45:e9:3f:ea:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3E:D8:58:53:28:2A:89:09:6C:86:06:3E:BF:15:2C:48:42:1F:BD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cef8d8e1-26f9-4f5b-a428-0989b643436b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.144.128.0/17
Signature Algorithm: sha256WithRSAEncryption
89:82:09:d2:e1:9d:f1:7f:df:0b:78:f2:e4:37:33:92:da:57:
91:cb:dd:f7:d0:84:bb:56:33:c6:01:47:95:ff:9e:2a:23:ef:
3f:fe:8f:18:13:00:43:09:82:23:26:69:40:ec:29:7c:45:c9:
0a:fe:ea:66:fd:6a:01:15:9c:8c:85:56:f7:8a:29:0e:2f:e8:
01:e5:53:f3:86:cb:51:1a:ed:db:9c:28:f8:cd:92:e2:7b:69:
d8:dc:e0:26:a0:99:40:5e:6c:ed:bc:1c:d7:60:dc:04:de:81:
83:b6:a8:82:64:cf:25:fa:da:4d:a6:5b:61:36:8e:2d:07:b2:
71:96:a3:58:f9:1d:e1:74:32:e3:d4:c6:b0:6b:fd:f9:e7:14:
a2:d0:dc:54:36:29:72:6e:7b:9d:de:2b:d5:8c:f4:62:a0:d5:
ac:0e:bf:ff:27:f5:4d:75:e0:a6:1e:29:48:46:48:47:95:4d:
24:4a:68:9f:72:ce:53:32:a3:00:09:43:c8:85:23:0f:3e:23:
a6:22:e0:e6:b8:ba:c8:4f:04:78:68:bd:78:e9:6d:9f:84:57:
f5:ec:57:d9:8d:53:8f:ed:b0:58:cc:9b:39:2e:05:e5:d6:df:
c3:05:b4:65:79:3c:4b:e1:34:f6:96:38:85:27:95:fa:66:a9:
e3:b1:b3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 20:20:43 2025 by rpki-client