This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3258fb5-90ca-480b-9923-260e8ad61e8d.roa
File: f3258fb5-90ca-480b-9923-260e8ad61e8d.roa (raw, json)
Hash identifier: 1/Vj9j1S5uoynlIrGO7cy3hTRJZWMIou3CDJCzES/7s=
Subject key identifier: AD:32:45:56:FF:DC:F3:69:A5:99:82:93:2E:A4:57:91:A0:DD:DE:AA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1097769F645030D38DBE7B55825D2B3576CEFEF0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3258fb5-90ca-480b-9923-260e8ad61e8d.roa
Signing time: Wed 26 Nov 2025 00:30:10 +0000
ROA not before: Wed 26 Nov 2025 00:30:10 +0000
ROA not after: Tue 24 Feb 2026 23:59:59 +0000
asID: 14618
IP address blocks: 15.181.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:97:76:9f:64:50:30:d3:8d:be:7b:55:82:5d:2b:35:76:ce:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 26 00:30:10 2025 GMT
Not After : Feb 24 23:59:59 2026 GMT
Subject: serialNumber=ce3f2b1512ae2bbb4b32a9a69a2292242ed10eaf11053ce1a24437d5031291d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:cc:ec:7a:14:c6:c0:ec:67:6f:e2:bd:83:
0f:73:84:06:d1:73:25:2f:50:89:a4:4c:72:c8:df:
ed:b7:4b:48:8d:fe:8e:f7:67:2b:da:d3:ae:0d:e4:
1e:cb:d9:38:b7:f7:26:e9:5b:87:e2:d3:0d:a6:27:
f7:8f:e1:45:27:53:84:2b:e6:97:0b:33:0b:fa:64:
07:ab:d8:6e:be:4e:46:20:fe:bc:fa:3d:ce:81:99:
64:c9:bb:ee:bf:f8:e2:2f:b7:1f:50:e7:f5:68:70:
4a:be:bf:5d:f4:d5:31:6d:c1:42:03:3b:f6:d5:13:
0a:69:f1:3a:90:ff:d8:61:dd:56:e3:74:d0:d8:87:
9b:04:38:b2:82:9a:70:6c:7e:40:89:7c:cd:9e:c5:
13:a3:80:2a:1d:99:98:4b:4a:28:d7:1f:ca:ee:b8:
af:39:ec:db:ab:99:ff:18:ba:26:2d:5e:94:64:42:
ad:b8:02:03:4e:7c:4f:94:61:66:9d:03:c6:37:30:
c3:f9:21:50:17:59:94:ef:20:fe:e7:86:0f:42:3e:
fc:a2:6e:79:45:70:7d:89:e7:03:52:0e:28:4a:35:
0b:08:7f:1e:05:72:2a:25:c4:0c:9c:ff:39:81:ae:
32:0a:ba:1d:c9:06:7c:c7:20:0a:27:4a:d6:4b:47:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:32:45:56:FF:DC:F3:69:A5:99:82:93:2E:A4:57:91:A0:DD:DE:AA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3258fb5-90ca-480b-9923-260e8ad61e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.32.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:52:8c:6d:97:ce:c3:13:69:40:95:13:89:34:e0:eb:3a:4e:
43:8c:c4:79:9c:be:a7:be:06:2c:be:cc:b3:43:18:c2:fc:0d:
d7:01:23:e4:da:4d:85:0d:1d:49:82:17:0a:e5:fd:00:87:a4:
c3:9b:f9:56:55:0c:24:e7:df:39:16:30:bc:1d:f1:53:d1:ff:
ea:6e:09:63:32:51:a7:2a:35:26:77:8b:ef:f9:37:d2:69:9a:
14:8a:76:a9:0c:c4:84:d5:19:48:95:0c:7b:0f:d2:27:69:9a:
1c:ff:19:f8:1f:f0:4a:bf:b6:a2:e2:c0:74:7c:c8:81:85:47:
41:2a:3b:99:2a:be:09:92:74:10:08:28:ed:94:bf:cf:cc:bb:
f4:8e:05:1d:04:6c:3a:7b:85:33:16:ef:d6:9b:a6:74:34:17:
66:ee:72:37:3a:53:b7:37:ab:a9:20:30:81:5c:c5:41:4c:45:
77:6c:c1:95:c9:24:55:a6:cd:1f:29:72:87:d6:90:10:6b:56:
64:5e:8c:2c:7a:16:fb:ea:9b:08:b7:a8:e2:17:5b:64:9a:e0:
db:21:92:22:8d:c7:a7:fc:b9:db:34:72:96:16:3f:df:21:0f:
9f:1d:e3:94:a9:99:1d:b3:dc:34:83:6d:a8:be:18:5a:7e:dd:
97:0f:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:22:21 2025 by rpki-client