This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f563f2b8-8548-4c07-8e00-8b8a0deac05e.roa
File: f563f2b8-8548-4c07-8e00-8b8a0deac05e.roa (raw, json)
Hash identifier: wE+E7v5gm/18nNDmJpxDgFX1DhORUD0qiLVdwb7yS/M=
Subject key identifier: 2B:2F:E7:06:40:F5:A5:CC:9F:F6:6A:95:CA:1A:7D:F1:AB:55:DB:37
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7C15939883E413938FEB880541883F39A5AED033
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f563f2b8-8548-4c07-8e00-8b8a0deac05e.roa
Signing time: Tue 02 Dec 2025 01:01:47 +0000
ROA not before: Tue 02 Dec 2025 01:01:47 +0000
ROA not after: Mon 02 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:15:93:98:83:e4:13:93:8f:eb:88:05:41:88:3f:39:a5:ae:d0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 2 01:01:47 2025 GMT
Not After : Mar 2 23:59:59 2026 GMT
Subject: serialNumber=ef5d60934ccd733e8fd549cda7f646bab65ae42a8556ff4c05b2ab5453912a84, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:56:90:30:74:f0:4a:b6:ea:60:4a:70:79:
37:01:8e:36:86:42:f3:88:74:14:e9:24:24:81:85:
c6:dd:2e:23:73:d4:99:5c:b1:33:13:f2:88:5c:49:
26:00:3e:6b:b9:f4:56:32:ee:bc:c7:b2:18:e5:a6:
37:c5:99:e9:6f:a3:2c:72:8d:e5:10:43:02:63:5e:
4d:0c:46:70:76:de:db:e1:f2:ef:6b:a5:1b:aa:28:
d0:78:f9:91:88:bd:5d:6e:6a:10:55:34:22:13:a5:
f8:b5:c5:72:89:c1:5b:be:42:2b:5c:d1:a5:d5:c7:
f3:2a:05:b9:f8:2f:43:75:4a:82:93:dc:1d:cc:1f:
6c:39:fa:8f:d7:2a:ce:d8:95:b8:e3:bf:2b:62:b1:
58:fa:ac:7f:6f:73:28:15:41:12:b4:2c:72:c5:42:
70:0d:5e:4e:a2:be:b0:7b:0f:7c:0b:f4:17:9e:47:
b7:fa:74:b7:bc:5d:83:2a:4b:30:36:7d:6d:fb:65:
20:c2:6d:c1:d4:21:a2:a3:a1:29:e2:21:09:c5:80:
c6:49:d4:53:17:14:62:72:c3:77:6b:6e:9c:7f:6f:
1a:c9:c7:28:ee:03:68:44:4c:88:09:56:16:c3:c8:
70:89:90:6e:7f:30:dc:9e:a5:e4:9c:78:bb:24:61:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:E7:06:40:F5:A5:CC:9F:F6:6A:95:CA:1A:7D:F1:AB:55:DB:37
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f563f2b8-8548-4c07-8e00-8b8a0deac05e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.222.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a0:ef:f9:9d:11:05:75:bf:69:e0:84:7b:e7:86:66:f7:04:
20:39:3a:a3:b8:f3:46:cb:9e:49:7e:a7:11:75:97:b3:87:60:
67:3b:92:4a:b4:6a:24:f0:28:b9:cd:1f:49:cc:fd:21:64:46:
97:c6:aa:39:73:5f:a3:6b:f8:59:41:ff:f9:39:d3:51:00:27:
9c:30:2a:82:1d:30:dc:f8:0e:ee:d0:dc:28:80:3c:e0:72:03:
cd:b0:fa:54:e6:31:72:ef:db:e0:67:80:67:13:92:0d:8a:52:
bf:54:4a:e5:7a:7f:2c:a8:8c:7a:ce:53:d0:0f:ce:8c:a2:73:
84:44:4b:ba:e7:a6:1c:be:0b:c4:b2:b3:af:1a:ab:ac:08:51:
bf:07:16:28:80:ce:2e:7e:b7:a3:49:34:b6:25:00:ff:b1:db:
42:f4:67:21:02:b0:34:c0:8c:f2:b6:a4:e0:ae:3a:7f:c7:a6:
d6:e8:a1:55:32:58:32:4d:88:61:09:b4:b9:5a:71:c0:0a:78:
0d:1e:7b:12:72:04:58:67:55:1a:68:e1:09:2a:42:69:a4:1e:
d8:6c:d5:3b:16:23:84:69:55:96:01:28:6b:48:4c:34:fa:ed:
50:d4:54:43:57:c6:41:a4:ab:38:ab:2c:3b:21:be:27:c0:6f:
fa:ce:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:51:40 2025 by rpki-client