This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d06889d7-b6b3-4cf1-8d8c-d28252ffb824.roa
File: d06889d7-b6b3-4cf1-8d8c-d28252ffb824.roa (raw, json)
Hash identifier: UgWPpislxxaAZYbPVyptIJe427ixFWUKNB7dd7N6/yo=
Subject key identifier: F0:CC:D6:A4:60:3F:16:84:CE:84:DB:05:AA:A1:37:37:FD:E9:03:7E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2354587E4B4867E7169CFD02266097928CB2C5CE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d06889d7-b6b3-4cf1-8d8c-d28252ffb824.roa
Signing time: Fri 05 Dec 2025 00:40:06 +0000
ROA not before: Fri 05 Dec 2025 00:40:06 +0000
ROA not after: Thu 05 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:54:58:7e:4b:48:67:e7:16:9c:fd:02:26:60:97:92:8c:b2:c5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 5 00:40:06 2025 GMT
Not After : Mar 5 23:59:59 2026 GMT
Subject: serialNumber=589c8f04b53a14600358d41f561d984139d3b1fc5720c2133c212b19f8b99311, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:80:6e:43:ff:b8:df:00:43:a5:a8:a7:52:
d7:a9:60:ce:13:e8:50:b6:eb:d7:a5:15:50:60:c1:
74:ed:83:9c:3a:04:75:08:7c:fe:45:ee:1c:97:16:
b1:04:1a:17:b6:77:fa:85:46:b0:5e:27:cf:a0:ff:
72:20:18:8f:ac:09:af:9f:12:bb:85:d9:44:14:54:
26:67:1d:76:6b:7e:e5:39:ab:4d:7c:be:8d:98:91:
12:36:9a:dc:8f:ca:09:75:2f:6a:b1:c6:9a:33:6e:
76:55:83:25:e0:f2:7e:2a:cc:1e:56:52:6a:4f:ea:
53:d8:5d:13:9f:ce:fa:53:37:a5:5b:07:6a:ff:3d:
57:ae:47:95:f7:c9:d7:9b:e1:7b:b8:2e:dc:71:14:
f1:6b:33:76:68:64:2a:0c:e3:5e:df:fd:e4:75:99:
7c:92:e2:6f:bc:32:d3:cf:61:be:a5:da:d6:d5:f8:
4b:16:89:70:90:16:94:23:ab:07:26:b1:22:94:3e:
e6:a7:63:ee:34:bd:a3:9b:b3:f6:fb:99:26:eb:3f:
20:0a:71:5b:08:aa:45:97:3a:71:38:0c:0b:fd:ba:
34:93:00:6c:b0:f7:68:84:f9:56:22:93:ba:4d:f6:
81:af:17:19:0c:38:28:57:2f:ac:87:27:c3:e1:99:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CC:D6:A4:60:3F:16:84:CE:84:DB:05:AA:A1:37:37:FD:E9:03:7E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d06889d7-b6b3-4cf1-8d8c-d28252ffb824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.139.0/24
Signature Algorithm: sha256WithRSAEncryption
17:71:ed:55:88:1e:10:b4:8f:be:19:44:ec:33:30:f6:2e:04:
e1:61:7e:1b:92:46:4a:63:17:f9:22:f8:96:36:c8:ec:a8:76:
dc:67:6e:76:d5:fb:a3:d8:65:1e:e1:79:8b:12:5e:c5:9b:e9:
ce:73:73:a5:53:51:95:32:82:8c:0f:6d:d8:e6:db:5f:2b:ba:
c4:a7:a5:b6:22:4d:f0:92:14:e1:ca:dc:01:ec:1d:97:a9:00:
6e:88:36:68:51:ca:38:21:64:e0:00:af:2b:08:db:04:98:79:
37:ef:3c:e5:61:63:6c:ab:f9:c9:bf:a3:d2:9f:73:ba:1f:7b:
08:a3:d8:5e:f6:93:80:64:d1:a5:f9:d1:c4:fa:fb:84:9d:98:
a4:aa:8f:41:eb:e1:4d:84:aa:aa:b9:0a:45:3f:bb:26:5d:b3:
b2:e2:a9:ab:48:5d:c4:93:d0:c4:18:8a:bd:fb:6b:e1:f9:83:
1b:8f:90:ab:8b:de:24:fc:6d:68:2e:f1:75:20:76:8f:42:2d:
ce:e3:0c:fa:b5:76:02:b5:3e:3c:da:83:af:69:67:75:1a:94:
75:b2:0b:bd:f0:0d:2c:63:f4:e9:a4:fa:49:bc:17:38:a6:f3:
f2:7a:f1:bf:56:3b:0f:b2:17:bc:4b:b9:73:cc:15:81:24:33:
3e:f2:29:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:56:26 2025 by rpki-client