This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e212c78a-5c2e-491e-b992-eba248f15fc2.roa
File: e212c78a-5c2e-491e-b992-eba248f15fc2.roa (raw, json)
Hash identifier: 87fkkWIpjKjBCRHCEkS1KFc4OBatOBMzr9Mw35pK8BA=
Subject key identifier: CD:7A:FB:2A:2A:88:60:4F:15:16:FF:76:AE:74:E5:F6:A8:90:F4:2E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4F3E1D202D19992E3CD8F4A73EAF64112440ED12
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e212c78a-5c2e-491e-b992-eba248f15fc2.roa
Signing time: Thu 04 Dec 2025 01:00:57 +0000
ROA not before: Thu 04 Dec 2025 01:00:57 +0000
ROA not after: Wed 04 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 144.220.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3e:1d:20:2d:19:99:2e:3c:d8:f4:a7:3e:af:64:11:24:40:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 4 01:00:57 2025 GMT
Not After : Mar 4 23:59:59 2026 GMT
Subject: serialNumber=ec9b03e9cefa5761b584af752bbbae33f8548229a8ed25edb31975deb9ab431b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:6b:b7:81:d9:33:6f:4f:a5:bc:cb:48:24:
79:ca:06:32:6f:93:c4:e9:7e:96:eb:d4:fe:06:80:
05:af:56:87:c8:40:36:fc:85:39:6f:09:ec:e0:87:
e8:65:d1:7c:da:8b:2e:ab:88:4f:f8:bc:a9:e9:64:
57:b2:f3:51:32:9d:42:85:04:af:37:93:a2:54:40:
2e:6c:64:55:01:3d:16:61:b4:42:b1:84:01:31:97:
20:a6:04:02:07:ea:24:94:e4:af:ea:f6:24:71:0f:
a9:78:20:4b:8d:f8:05:69:76:d2:b1:bd:c1:30:af:
5a:96:e8:c1:a6:92:40:f5:02:c8:b2:3a:11:48:9e:
d7:63:04:4d:0e:54:6a:51:61:40:db:f8:e8:3a:aa:
87:cd:6b:e2:9b:e0:77:92:65:8b:56:fb:54:06:63:
7a:53:0a:b4:cc:08:e8:1b:d5:7d:d0:8b:84:e5:e6:
9b:02:56:7a:27:ed:8c:9e:72:4d:3c:05:da:b1:41:
9b:82:69:70:44:37:8d:10:f5:60:81:d9:ce:53:88:
f5:ce:da:9a:dd:28:4d:77:7d:51:1f:1c:7e:74:53:
a9:6f:59:a1:fb:01:1e:08:22:24:1f:e1:3d:3d:85:
2a:e3:31:4d:5e:7d:7b:6d:fe:7f:fd:53:41:93:c6:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:FB:2A:2A:88:60:4F:15:16:FF:76:AE:74:E5:F6:A8:90:F4:2E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e212c78a-5c2e-491e-b992-eba248f15fc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.220.16.0/24
Signature Algorithm: sha256WithRSAEncryption
19:9d:9e:9c:e1:1b:37:af:54:57:ac:c8:79:e3:1b:14:bd:f2:
77:49:e7:1a:6e:de:03:05:e4:9d:41:25:46:32:5d:75:35:0f:
63:6e:ec:5c:c1:91:a3:7e:bc:d1:50:c3:ee:b1:eb:af:ba:eb:
d6:3e:81:e8:ab:97:a7:ca:f0:af:f1:fe:10:18:af:61:ce:0d:
14:98:4a:12:17:39:33:ad:ed:67:f5:33:bb:6c:b9:b9:df:7b:
60:00:84:70:eb:7f:be:83:27:b2:06:ad:d6:3c:b3:ca:a4:be:
04:84:99:3c:39:63:bb:31:77:42:04:ae:f0:86:a1:e4:a6:6f:
7c:c1:c2:c8:69:17:b0:88:1a:da:d4:7b:3c:b9:70:41:25:ad:
b4:b2:0e:0a:46:df:56:44:ea:c4:15:ce:d6:c0:ae:ea:ab:94:
74:92:a9:3f:56:df:a4:89:b1:9b:68:ac:dd:63:b9:a7:51:46:
a6:75:6f:03:22:7f:72:97:84:69:90:f7:c5:54:b8:5e:19:6f:
92:1f:7b:a4:5b:df:3f:38:b2:65:0f:56:aa:c8:3e:c8:92:d3:
5b:5d:21:53:86:b5:70:ff:5a:6f:bb:6c:ea:80:74:87:1f:b8:
4a:1a:da:d1:06:56:3c:ae:c3:5b:4b:f2:46:fc:78:07:4b:02:
bc:40:fd:9a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTz4dIC0ZmS482PSnPq9kESRA7RIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA0MDEwMDU3WhcNMjYwMzA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzliMDNlOWNlZmE1NzYxYjU4NGFmNzUyYmJiYWUzM2Y4
NTQ4MjI5YThlZDI1ZWRiMzE5NzVkZWI5YWI0MzFiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1SWu3gdkzb0+lvMtIJHnKBjJvk8Tpfpbr1P4GgAWvVofI
QDb8hTlvCezgh+hl0Xzaiy6riE/4vKnpZFey81EynUKFBK83k6JUQC5sZFUBPRZh
tEKxhAExlyCmBAIH6iSU5K/q9iRxD6l4IEuN+AVpdtKxvcEwr1qW6MGmkkD1Asiy
OhFIntdjBE0OVGpRYUDb+Og6qofNa+Kb4HeSZYtW+1QGY3pTCrTMCOgb1X3Qi4Tl
5psCVnon7Yyeck08BdqxQZuCaXBEN40Q9WCB2c5TiPXO2prdKE13fVEfHH50U6lv
WaH7AR4IIiQf4T09hSrjMU1efXtt/n/9U0GTxjMBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzXr7KiqIYE8VFv92rnTl9qiQ9C4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2UyMTJjNzhhLTVjMmUtNDkxZS1iOTkyLWViYTI0OGYxNWZjMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACQ3BAwDQYJKoZIhvcNAQELBQADggEBABmdnpzhGzevVFesyHnjGxS98ndJ
5xpu3gMF5J1BJUYyXXU1D2Nu7FzBkaN+vNFQw+6x66+669Y+geirl6fK8K/x/hAY
r2HODRSYShIXOTOt7Wf1M7tsubnfe2AAhHDrf76DJ7IGrdY8s8qkvgSEmTw5Y7sx
d0IErvCGoeSmb3zBwshpF7CIGtrUezy5cEElrbSyDgpG31ZE6sQVztbAruqrlHSS
qT9W36SJsZtorN1juadRRqZ1bwMif3KXhGmQ98VUuF4Zb5Ife6Rb3z84smUPVqrI
PsiS01tdIVOGtXD/Wm+7bOqAdIcfuEoa2tEGVjyuw1tL8kb8eAdLArxA/Zo=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:55:34 2025 by rpki-client