This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf2de487-acb9-46c7-a1ce-54fbd12b3709.roa
File: cf2de487-acb9-46c7-a1ce-54fbd12b3709.roa (raw, json)
Hash identifier: ajC/8+k3XCHKuGJf+H0Fzu5+7qnZj41z3OGbBDeNKL4=
Subject key identifier: EE:3C:51:B7:0D:49:C9:8C:A6:F6:D0:B7:C9:79:66:FD:BB:65:9F:B0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 01EA7FDCCAE63D2C22C45E825FD7AB6D736668D6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf2de487-acb9-46c7-a1ce-54fbd12b3709.roa
Signing time: Sat 15 Nov 2025 01:11:01 +0000
ROA not before: Sat 15 Nov 2025 01:11:01 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.80.0.0/12 maxlen: 12
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ea:7f:dc:ca:e6:3d:2c:22:c4:5e:82:5f:d7:ab:6d:73:66:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 15 01:11:01 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=67693760a77fce8e167a4626ce8acc7131cc2a2e43dc02de0c3a3fa31e5afe4f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:99:57:a4:6e:fc:b1:1f:8b:d4:ea:80:e0:
94:fb:a2:06:8e:ae:39:8c:87:6c:d8:43:be:43:cd:
37:57:cb:b4:ba:6a:9f:51:ac:1e:06:b4:58:81:bc:
d4:59:9f:c0:2f:00:65:61:b5:2e:24:df:b1:45:87:
2b:92:ff:f6:cc:fc:29:58:88:da:61:6c:2a:ca:a3:
71:ef:00:b7:fd:9b:85:bf:4e:e6:f8:15:fe:c3:bd:
27:5e:95:ae:56:b6:a6:07:97:57:d4:23:72:2e:93:
c8:1b:2a:64:53:5c:95:1d:7b:67:8b:9e:5f:61:5a:
76:9c:c0:23:e4:26:90:b9:cf:5c:ac:61:12:61:13:
60:b8:f4:fa:37:40:e9:e8:a2:e5:4e:f5:9e:f4:85:
60:b3:5c:b7:8e:e3:c4:16:be:f8:d1:5a:f6:63:f2:
25:98:c3:e1:cb:cf:54:3d:0a:b0:00:19:6b:9c:9a:
6b:81:a0:52:dc:0b:16:78:c4:fe:4e:ae:bf:b7:e7:
df:e3:9b:a0:8c:10:bb:34:d7:cb:c3:45:c9:5e:0c:
3f:24:8d:5b:ce:28:43:4d:58:16:75:8e:2e:12:e1:
be:4c:49:78:2e:0b:fd:92:6d:a9:5f:bc:9e:b9:68:
be:89:1b:d0:58:c6:70:49:af:52:20:34:d7:d3:07:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:51:B7:0D:49:C9:8C:A6:F6:D0:B7:C9:79:66:FD:BB:65:9F:B0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf2de487-acb9-46c7-a1ce-54fbd12b3709.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.80.0.0/12
Signature Algorithm: sha256WithRSAEncryption
2e:65:e4:74:9a:db:d2:cc:fe:f9:02:98:3b:55:94:c6:54:9b:
8d:29:84:61:dd:7a:a0:76:41:ae:1d:95:8d:27:6d:c8:9b:4b:
d3:ea:7b:f0:e4:10:38:5d:ae:bb:27:35:aa:b4:98:ac:83:74:
8e:ed:4b:2d:e5:85:2c:00:29:03:1e:8d:cf:0b:57:3e:2a:92:
e5:12:be:e0:29:81:fa:54:43:a4:7e:88:0f:82:bc:82:30:d4:
56:99:b8:e6:38:70:56:71:2a:bb:a0:3a:f0:1c:e6:ad:5f:fd:
b0:6d:20:40:ac:ab:1e:13:93:5a:04:cc:64:bf:aa:0a:c4:c7:
f6:82:14:02:a2:c7:39:00:f9:34:8d:b9:70:6a:1e:22:ad:fe:
d8:2b:f1:23:82:87:0e:43:82:9b:bb:7b:c5:ae:89:17:b2:32:
d7:93:11:65:a9:8f:03:48:fc:fc:31:c0:63:a3:0c:75:c9:3d:
8f:92:41:13:9d:ba:81:07:a5:d2:fe:7e:1f:bf:6f:bc:fa:b7:
52:49:84:bf:8e:91:b1:3a:86:44:27:f2:df:b3:fe:02:b5:04:
a9:a6:a4:ed:f4:d5:72:61:0b:d1:0d:47:55:d8:36:0a:2e:75:
78:b6:63:2e:68:b8:7a:00:cc:dd:c5:1e:7c:a0:13:f1:08:f9:
76:8b:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:52:20 2025 by rpki-client