This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2436557-e77c-47a5-bc46-c7c52f740770.roa
File: d2436557-e77c-47a5-bc46-c7c52f740770.roa (raw, json)
Hash identifier: 9x3r8OWh1xlzCzQyuSPPQpkjMHLC6HfiDemf9OFN4pA=
Subject key identifier: DD:AD:47:D8:98:FC:B7:43:70:B2:E2:7F:D4:A7:43:71:21:91:BF:1E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5DE9C2EE60CFEF5E847F71FC8209065EF1D987EE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2436557-e77c-47a5-bc46-c7c52f740770.roa
Signing time: Thu 13 Nov 2025 01:00:10 +0000
ROA not before: Thu 13 Nov 2025 01:00:10 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.58.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e9:c2:ee:60:cf:ef:5e:84:7f:71:fc:82:09:06:5e:f1:d9:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 13 01:00:10 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=3e49fe29ec435cceca0a52e921e722eb442003e971bc640acdd70685deff3e7c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:c1:7d:d6:ca:5a:2c:a5:f4:26:cb:47:cc:
e2:1d:17:7f:47:46:52:46:8c:95:05:79:bf:43:ca:
ef:26:ec:e3:db:3b:45:5a:65:99:44:d1:b2:e4:ad:
91:1b:71:d0:a8:42:d3:fd:5a:e4:64:b4:01:d7:54:
ff:de:06:be:d9:ee:3b:c3:3f:8d:f3:f2:62:1e:0c:
d5:9c:fc:5f:a8:57:55:30:60:00:af:47:5a:e8:0e:
be:fb:42:96:b4:00:3d:09:16:7c:3a:12:8f:44:d2:
9a:c9:9b:51:8a:af:b2:60:23:ab:d4:24:90:e4:67:
b4:ba:72:d3:e3:31:79:a9:5b:44:40:d0:cf:72:cd:
4f:c0:fd:ec:bc:9c:53:9b:07:ee:79:ed:9f:61:b0:
7b:d2:23:20:a7:28:3f:56:15:03:2f:7b:8e:ea:3a:
51:4f:f0:ec:8f:0b:84:4a:fc:36:d6:f4:8d:02:6a:
8d:5e:af:b2:10:f9:19:88:be:ab:49:06:85:75:f9:
3a:4a:22:47:19:c0:5a:7a:05:7f:8f:f0:f4:47:14:
98:b6:77:e9:f6:0d:4e:16:a8:17:10:ce:79:20:1d:
d5:4f:57:12:0c:47:87:30:26:49:3d:04:13:c1:2b:
11:a6:2f:48:54:61:d1:42:71:3c:b7:cd:bc:1c:51:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AD:47:D8:98:FC:B7:43:70:B2:E2:7F:D4:A7:43:71:21:91:BF:1E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2436557-e77c-47a5-bc46-c7c52f740770.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:a0:fd:80:27:02:97:82:e0:88:a1:93:46:6a:a6:1a:84:34:
ff:a1:a5:25:13:ff:20:df:46:4e:3a:b6:40:10:95:76:e9:c7:
27:7d:11:86:20:b5:aa:19:ad:a1:aa:84:d1:5a:e7:10:ac:e0:
f0:b6:ff:eb:56:de:41:48:eb:fa:4d:46:86:a4:94:68:a0:f0:
82:1f:fa:b5:cd:0b:64:25:a0:c9:ef:f4:54:90:ae:47:e4:63:
36:bd:8e:f0:ea:b9:6a:ab:c6:eb:c8:87:5a:70:cb:27:14:da:
c6:1c:46:a5:7d:f0:fa:0e:25:3e:cf:3e:0b:69:2c:60:5d:3f:
b7:7c:1b:c6:ec:74:14:dc:97:a5:6c:ae:77:0c:d1:b7:ed:33:
e9:86:5a:7a:02:68:6a:fc:de:81:82:d9:70:d6:72:e1:3b:e1:
7e:bd:27:17:0c:47:98:ef:2e:89:b3:6d:b9:63:40:b4:cb:f8:
e2:2e:52:5d:f4:8d:d4:93:f1:2d:e8:dc:fb:d5:58:ac:fe:bf:
62:1c:f1:20:d2:4a:90:9f:c3:04:42:12:52:49:a4:3c:ce:c6:
5c:a0:b7:a9:71:7b:55:e1:3d:bc:84:9c:91:7e:b4:0d:33:02:
e7:14:7c:06:a3:68:b5:d5:6f:68:5d:67:c7:f0:39:9c:cb:c9:
63:86:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:38 2025 by rpki-client