This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddc049da-e0f8-4179-abc7-cda7f0c809a4.roa
File: ddc049da-e0f8-4179-abc7-cda7f0c809a4.roa (raw, json)
Hash identifier: WU+W4ChOcUczXThwSnlXYX3mSljAN6gOQvMsT9jSj0E=
Subject key identifier: C5:87:03:AF:EA:A1:63:CE:2D:29:AB:2B:94:92:43:DB:05:83:9E:B3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 52CB6F96EC6F6853BE7BB2C54D987080BC861D5E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddc049da-e0f8-4179-abc7-cda7f0c809a4.roa
Signing time: Sat 06 Dec 2025 03:40:52 +0000
ROA not before: Sat 06 Dec 2025 03:40:52 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.255.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cb:6f:96:ec:6f:68:53:be:7b:b2:c5:4d:98:70:80:bc:86:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 6 03:40:52 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=dd342c6ff2806edc6800927a763c48abb4c642397a35eb083f2c5160fa686ddb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:e2:ac:41:e4:6e:22:ab:68:af:ab:f6:49:
07:cc:66:ba:44:af:da:2b:58:5f:ed:3b:a0:a6:7b:
1d:4a:81:b1:ca:2a:c8:94:2d:68:a4:7b:51:77:bb:
dd:fe:f2:69:c1:33:40:be:1a:5d:ac:8b:a9:63:8c:
8a:5e:e3:4e:57:ce:7f:18:c6:fa:44:81:fd:b2:a4:
2e:03:fc:00:07:6e:36:16:c1:a9:be:0f:a6:ab:77:
5a:2e:7b:fe:6e:97:64:7c:6b:8d:35:52:b2:e9:2d:
cb:4a:c6:28:49:1d:08:dd:bb:90:84:62:4d:87:6e:
d5:0d:9f:3c:8f:6d:a0:72:4a:1a:6b:e5:a2:de:dc:
58:de:ab:be:1e:bd:97:04:94:d5:d9:cb:d4:79:dc:
bd:50:56:3e:de:5e:33:40:2d:6a:54:0c:16:20:34:
bd:bc:2f:f3:df:95:50:55:7d:a5:6c:2f:7d:cd:a2:
9a:e3:dc:ae:30:bd:71:2d:24:e7:cc:62:7d:d0:2e:
e9:e9:27:0e:81:e5:09:0a:8b:e7:cc:1d:11:a2:04:
74:a9:9b:93:f8:70:e9:c5:f4:e1:9c:f4:91:12:91:
bb:46:dc:df:cf:fe:25:6c:fc:01:e0:b4:64:79:14:
4d:13:9d:fa:4e:f0:af:e0:61:61:56:63:60:7b:64:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:87:03:AF:EA:A1:63:CE:2D:29:AB:2B:94:92:43:DB:05:83:9E:B3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddc049da-e0f8-4179-abc7-cda7f0c809a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.255.96.0/20
Signature Algorithm: sha256WithRSAEncryption
04:00:8a:34:62:72:dd:57:ba:e4:95:ba:4d:e7:0b:2d:53:de:
b4:4e:5b:3c:81:b2:6e:c8:d2:c9:12:f4:7f:91:8e:18:68:30:
f8:ad:53:4a:50:a5:2e:4d:0d:7f:e4:02:6c:f6:49:ab:ec:11:
e0:60:ce:6a:a1:0b:bf:c8:29:b8:67:08:26:c5:9a:5f:ab:28:
6a:93:10:cb:88:2a:e8:77:e2:25:6f:64:35:ed:a0:8d:0f:79:
ea:d7:69:b3:e4:9c:ff:8b:c1:42:72:60:f1:8f:86:e1:6a:25:
41:a8:b9:d5:d8:7d:be:20:5e:2b:15:ae:8a:0f:80:33:c1:0e:
91:40:95:d4:cc:32:96:2c:cf:1e:7b:8a:47:4a:2c:c8:34:bd:
2a:6c:0f:f8:09:90:31:37:fb:e5:77:f6:9d:0c:80:fd:5d:fa:
d9:ac:92:fe:41:95:aa:4f:6a:f3:55:ab:54:6e:56:d9:52:95:
2c:35:e6:6f:45:19:91:e2:49:7f:88:15:13:f9:39:2a:bb:35:
ed:21:64:f6:c0:71:0c:35:ef:cc:df:31:ed:37:62:bd:81:e5:
ae:ef:49:bd:8f:2f:61:9b:ff:2e:bb:97:ca:fa:b9:4f:c0:34:
9b:1d:57:14:db:46:06:bb:33:06:e2:59:bf:26:b7:e4:ed:ed:
32:3b:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:52:17 2025 by rpki-client