This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/edc392e6-e8f7-4a7b-a331-e7128b6d35ce.roa
File: edc392e6-e8f7-4a7b-a331-e7128b6d35ce.roa (raw, json)
Hash identifier: JmEjXASVi8PjDqfmJ4lYWuGlRiXbx4ANEsw8Tdcmp8o=
Subject key identifier: 71:95:20:66:02:19:0C:FA:B4:EE:2F:07:98:13:C4:55:D7:80:93:A9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0C03145BE71AD4520CA7F937C45F459929C3BDB3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/edc392e6-e8f7-4a7b-a331-e7128b6d35ce.roa
Signing time: Tue 09 Dec 2025 00:11:47 +0000
ROA not before: Tue 09 Dec 2025 00:11:47 +0000
ROA not after: Mon 09 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.170.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:03:14:5b:e7:1a:d4:52:0c:a7:f9:37:c4:5f:45:99:29:c3:bd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 9 00:11:47 2025 GMT
Not After : Mar 9 23:59:59 2026 GMT
Subject: serialNumber=042fc8521be9e5869efe3dadd1fded1b1130c01a87564e4db620bdbbff4c9d0a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:da:eb:7c:cf:48:ab:ab:e4:85:e4:ff:51:
b7:89:17:46:d5:b3:dd:02:70:6e:a4:08:eb:c3:1c:
51:24:9b:3e:27:5d:07:0b:2f:42:a3:e4:2e:26:c0:
ca:ce:24:d3:12:7c:d7:c8:32:4e:65:a7:ae:99:d4:
0c:35:e1:de:54:72:0c:59:2e:d4:ea:82:fc:f7:bb:
55:dd:de:0f:fc:e0:85:fe:70:b8:bd:69:51:d1:df:
87:4c:b5:be:b1:b7:94:35:b2:a0:ed:51:06:a5:17:
82:00:ba:72:76:f5:50:9e:7d:c2:28:ac:00:5d:83:
b9:47:55:18:bd:2d:bc:08:8a:02:29:a5:07:c6:da:
57:c0:d8:00:b1:91:74:b8:34:02:85:69:fd:ba:62:
a2:80:38:0c:33:b8:01:9e:7f:0a:4e:59:4b:59:36:
c1:f6:2e:11:05:02:90:47:fd:0a:da:25:59:43:4b:
a4:25:b5:84:a9:df:48:ae:c5:01:40:65:75:47:39:
5d:2f:2d:2f:1b:65:2b:64:b5:41:33:60:c3:b6:0c:
3d:28:47:fe:fc:71:c1:b5:28:e0:e5:29:ca:ff:3c:
aa:bf:27:f6:cf:2b:91:8d:9a:70:0c:a5:35:3e:0a:
0e:0e:df:76:1e:62:bd:5b:67:9c:9a:67:85:6d:5c:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:20:66:02:19:0C:FA:B4:EE:2F:07:98:13:C4:55:D7:80:93:A9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/edc392e6-e8f7-4a7b-a331-e7128b6d35ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.170.200.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:45:f0:71:46:74:fd:83:cf:c5:c7:d1:9c:1b:4a:b0:ee:9e:
af:7f:64:c8:b6:7d:a2:8a:18:2b:cf:3d:e8:ca:fe:3b:40:48:
55:fa:4f:be:b9:fe:33:f4:9c:dc:e8:64:aa:ce:b0:c5:a8:de:
c6:70:b5:71:f4:ec:81:55:c8:ff:67:ef:6d:dc:55:49:ac:9f:
95:8b:1d:c8:6f:7a:64:61:7b:9e:df:e4:2d:fd:c8:36:ef:53:
96:fc:1a:bc:40:f4:98:78:8a:49:73:1e:39:c0:77:c7:64:5c:
0f:0f:ec:79:66:ba:e6:52:d1:7a:a0:7a:cd:ab:9c:e3:eb:9b:
b1:6a:88:7d:4c:da:65:70:fc:b6:05:b7:d1:cb:02:bc:36:c8:
99:ad:a7:8e:3f:a4:19:5b:ed:98:10:7e:18:5b:51:d3:1d:00:
07:7b:ee:0d:cd:a4:e1:62:b7:fd:19:32:9c:2b:24:d9:3b:aa:
dd:2e:15:1d:9b:dd:d4:02:d6:50:0b:09:7a:30:51:7b:b0:be:
39:26:3a:21:a4:ce:91:9c:4f:e4:23:26:55:7b:db:41:c2:b6:
93:76:7c:b4:84:c5:b6:70:50:48:1a:4d:36:8c:8f:47:cb:09:
7c:53:1f:07:1b:f7:9b:e5:c2:cf:c3:e3:04:91:27:c5:4e:fa:
c8:67:a2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:27:48 2026 by rpki-client