This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa
File: d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa (raw, json)
Hash identifier: wuZ91N1bo2k0IlVnkUF4MNNCtBepMJHSjicpBDtQNnw=
Subject key identifier: DB:4E:A0:85:0D:AF:52:66:70:D0:34:CF:9E:01:98:B2:C7:27:DC:F3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7184D06C4801EDC9AE3129993348C2308784604B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa
Signing time: Tue 02 Dec 2025 01:01:15 +0000
ROA not before: Tue 02 Dec 2025 01:01:15 +0000
ROA not after: Mon 02 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:84:d0:6c:48:01:ed:c9:ae:31:29:99:33:48:c2:30:87:84:60:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 2 01:01:15 2025 GMT
Not After : Mar 2 23:59:59 2026 GMT
Subject: serialNumber=66f51115d4eb73f869d6a76983197c874ac3d3358368e1317a44c8afe92bbcc0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:b0:f2:85:b5:0d:fa:a8:07:04:77:98:51:
d7:6a:e6:8e:bd:fd:c3:fb:07:f2:71:7d:03:b9:1b:
f3:38:6d:60:e5:cc:ea:79:d3:d1:8f:33:32:eb:ab:
94:58:f9:e1:38:e4:63:df:7f:0d:d0:0f:27:92:25:
b3:9f:e1:6b:1a:1b:b8:70:53:5d:f1:15:78:d8:0b:
49:7a:88:f9:99:d1:45:e6:81:64:aa:69:db:a9:45:
d3:7e:44:d1:94:24:07:bf:44:30:a8:dd:c7:98:c4:
22:93:ca:fe:bf:8e:2b:e2:07:8c:d5:6e:b9:9c:25:
4c:23:17:ba:36:e8:45:72:a6:96:c9:4e:2d:43:3f:
70:3c:59:29:41:9e:3a:53:25:d8:3a:54:ef:56:52:
8d:fb:7e:9a:f1:fe:55:be:f0:df:a9:01:2b:78:af:
7f:38:62:41:4a:93:61:4b:09:8e:cf:d7:be:52:eb:
78:7d:a9:0b:10:47:4f:b0:ef:82:62:84:d7:dc:28:
7d:e0:1c:24:cc:ed:a3:83:88:cd:0b:06:ab:4c:b2:
c5:78:6b:89:5b:50:70:94:7e:cb:55:9d:8c:a4:ca:
da:e4:52:75:a4:6d:e3:f8:85:ec:1e:8b:90:e0:d9:
0b:6c:82:05:69:46:91:c1:fc:8f:ee:c9:6c:da:1a:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4E:A0:85:0D:AF:52:66:70:D0:34:CF:9E:01:98:B2:C7:27:DC:F3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8664df6-1a20-41f2-983f-d7acc77a6f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.52.0/22
Signature Algorithm: sha256WithRSAEncryption
94:f6:d2:47:1f:3c:80:7c:9d:99:8d:45:ef:76:d4:8a:93:3d:
46:2a:4f:1f:8c:4e:25:7d:a9:e8:4a:59:91:c5:58:54:a8:10:
f4:a1:2f:f4:21:35:0b:f4:87:dd:d2:64:6b:53:c8:8d:bf:a2:
24:37:8e:fc:64:a6:4b:7b:88:d7:e0:c5:78:3a:91:bf:28:65:
c7:3a:21:89:e7:e8:73:f9:cb:5d:bf:41:a9:6d:c9:cc:d2:c3:
1d:ef:7f:86:03:d1:d1:3f:da:ef:7f:dd:39:c0:91:df:c5:f2:
72:a0:7a:c7:64:d7:78:50:5f:f9:96:79:dc:44:05:94:22:7e:
4e:23:57:a9:bb:54:80:9e:8e:eb:bb:db:5b:49:7c:01:3c:26:
18:56:57:36:d0:5f:cb:5f:1f:09:e0:77:4e:e8:a5:1a:17:8c:
00:49:e8:52:f8:91:1c:dc:f3:17:85:2b:d8:7a:5e:ee:64:8d:
3e:91:a0:59:ed:7f:90:cb:e1:7e:16:6b:ca:ef:2f:dd:e9:b4:
8c:9b:14:42:77:53:02:53:e4:1c:10:3c:d9:74:04:93:cd:41:
58:63:f6:81:48:81:5d:8f:98:e3:52:99:2c:67:de:35:74:17:
d5:6e:4b:87:c1:7d:f3:c4:92:3d:8e:0f:f5:51:f4:7e:24:d4:
4b:a8:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:19:18 2025 by rpki-client