This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64ab3a5-dbbe-4c43-9685-576cf3706f89.roa
File: d64ab3a5-dbbe-4c43-9685-576cf3706f89.roa (raw, json)
Hash identifier: qh/XRfrypHZjiZYOxLf7jQTCDwjCApNMWxnl3Q5sgAs=
Subject key identifier: 24:CB:66:00:18:3E:B3:C2:DA:04:15:4B:7F:B0:F8:72:F7:A8:0E:4A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2E207AE931F68616074757A9DED1DE8D2B1841D1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64ab3a5-dbbe-4c43-9685-576cf3706f89.roa
Signing time: Mon 24 Nov 2025 08:21:16 +0000
ROA not before: Mon 24 Nov 2025 08:21:16 +0000
ROA not after: Sun 22 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.46.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:20:7a:e9:31:f6:86:16:07:47:57:a9:de:d1:de:8d:2b:18:41:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 24 08:21:16 2025 GMT
Not After : Feb 22 23:59:59 2026 GMT
Subject: serialNumber=13f34201d6564a386982a9003a94fec3c512a7e8400726147095e18e2af67b25, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:99:e6:c7:c4:96:7d:30:80:cc:38:e6:7f:
b5:b1:08:c1:bc:f8:b2:54:d1:2d:6d:bb:12:96:b1:
4e:25:2a:3c:64:fb:9c:27:78:19:c6:ba:6d:2b:4f:
b8:08:2b:f1:23:ae:09:47:b3:84:01:d0:f5:9e:9d:
99:e6:22:9d:9e:86:d9:83:0c:3d:84:0d:25:df:57:
40:fb:dd:b5:e1:be:4a:29:91:27:06:d0:a5:69:1b:
cf:0e:6d:ab:be:71:21:46:d6:08:dc:c2:03:9f:03:
29:73:4e:a8:cb:f9:1e:22:0e:75:50:01:1e:c3:63:
85:91:62:de:a4:ed:e7:6f:51:37:7f:c1:b9:d5:d9:
07:65:44:ad:a6:25:da:81:2a:fb:36:4a:52:a4:c5:
08:14:6d:8d:a5:87:a7:b0:b0:26:20:f1:a6:f2:1c:
b2:e3:ab:f6:de:37:19:4e:d0:58:5c:76:4d:a3:c8:
1c:15:ba:5e:d7:d6:0a:e4:b1:59:3a:56:11:93:ce:
57:4a:20:ed:f2:13:07:8a:77:c1:62:82:b6:42:d4:
fd:fa:9d:b0:e0:3e:2d:77:ac:75:2f:46:b0:5b:74:
bb:ea:b6:b6:61:90:3c:d7:27:23:b9:11:20:a7:87:
98:c2:c5:25:49:9a:80:95:57:76:75:ff:8b:22:6c:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CB:66:00:18:3E:B3:C2:DA:04:15:4B:7F:B0:F8:72:F7:A8:0E:4A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64ab3a5-dbbe-4c43-9685-576cf3706f89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.46.44.0/22
Signature Algorithm: sha256WithRSAEncryption
59:4f:03:be:6d:ed:69:a1:97:a3:9f:d2:84:17:e2:3e:b5:2f:
94:e1:76:b3:67:4a:49:27:95:3f:24:4f:11:51:dc:9a:c4:87:
d9:0b:04:5a:66:2e:ca:4c:86:25:10:3b:d6:fa:3c:c5:27:d6:
44:94:fd:a3:5d:23:1c:82:b1:50:c9:c4:21:2a:2b:98:85:57:
91:d3:62:d4:93:50:43:a8:bd:f6:66:0a:c6:50:ae:cd:0f:59:
c2:53:74:38:84:cb:8b:34:f7:37:ed:5d:c2:f9:72:0b:75:33:
34:4b:88:0f:a0:dc:95:ef:0c:23:fa:cd:77:7d:6d:1b:8e:e4:
29:f4:f5:0a:e0:96:93:bb:66:de:f7:61:fd:8e:ab:b4:99:97:
2e:36:75:82:8d:0a:03:1f:e6:a5:d7:b8:17:2f:d1:35:82:31:
d5:a0:81:8a:f0:56:1c:7f:46:ae:c6:78:2d:ed:1f:2e:5e:7a:
07:3a:0f:24:e7:68:b1:92:14:4d:7a:40:72:73:9a:35:bc:93:
7f:2e:3f:fe:b0:87:f9:03:64:a9:ab:c4:00:73:2e:82:45:3d:
4d:70:9b:94:c7:e2:04:ea:fb:3e:98:3b:5a:c9:ab:fe:5f:73:
d5:36:1f:ff:72:66:30:2d:cc:d5:00:70:62:4f:b5:df:c6:dc:
f0:13:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:44:59 2025 by rpki-client