This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/003286f2-c9bd-43a7-b5be-9753eb9aab82.roa
File: 003286f2-c9bd-43a7-b5be-9753eb9aab82.roa (raw, json)
Hash identifier: S3K0BWs3JsMzJp0M59yURjzJizZj+8Z0P3vd3JuiIBw=
Subject key identifier: A0:D0:DD:9F:A8:16:D9:AE:4B:E7:A3:33:F3:52:AC:67:CD:37:EC:19
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3BC23276FA42B1C6DC1C2298D6DE0C5A5DE88506
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/003286f2-c9bd-43a7-b5be-9753eb9aab82.roa
Signing time: Wed 10 Dec 2025 02:11:16 +0000
ROA not before: Wed 10 Dec 2025 02:11:16 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.70.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c2:32:76:fa:42:b1:c6:dc:1c:22:98:d6:de:0c:5a:5d:e8:85:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 02:11:16 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=7a2bf2b0cf1dd631d8954b1c60d99ed77ac533feb57017a422e4a90e656918a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:f3:e3:d4:27:25:19:7a:c4:d6:b4:4d:52:
2a:c7:36:06:fd:c3:e1:91:e2:b5:9a:06:44:67:c5:
11:06:95:ea:62:37:be:d1:62:16:56:ea:f8:ce:e5:
04:5a:f5:7f:31:b3:e6:f9:de:88:8d:d7:1a:9d:91:
8d:cc:fe:a7:41:1b:69:43:c0:8d:d8:ab:83:c9:ca:
e5:40:e3:5e:69:00:88:61:f0:7c:8d:6b:f2:fe:bd:
89:77:eb:05:72:e9:0e:95:3e:7a:3b:6c:f0:ad:b7:
90:c9:27:2d:ec:40:4d:0c:4f:b2:60:34:a1:f7:99:
d0:30:20:76:84:d4:a2:c0:1b:7e:58:68:b4:e0:7d:
67:c9:70:2f:0b:16:db:31:3f:b0:8c:9c:f6:cc:c2:
c6:c2:06:ed:ef:4c:c6:6f:73:c0:99:e7:df:3e:c5:
99:c3:14:4d:bb:b9:a7:21:5b:07:33:22:a5:f9:c4:
d2:32:16:1b:3f:b5:67:97:b3:ea:7d:16:0b:db:b7:
e3:d7:e2:ad:ed:c6:99:08:02:c9:7b:e6:73:06:fb:
17:65:6a:32:92:8c:ff:7d:4d:76:f2:30:50:08:10:
18:3e:ca:93:fa:7b:61:d4:27:75:1f:f7:75:d7:9d:
27:54:33:41:19:15:37:64:5f:56:85:a8:8c:2a:e0:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:DD:9F:A8:16:D9:AE:4B:E7:A3:33:F3:52:AC:67:CD:37:EC:19
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/003286f2-c9bd-43a7-b5be-9753eb9aab82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.70.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ab:3e:b8:a9:e4:b3:9b:e0:e3:ca:dc:56:19:21:f1:69:96:8b:
5c:3e:a2:92:54:2e:72:d9:ec:40:f6:63:ef:88:df:b0:2f:7c:
22:85:28:1c:25:9a:b6:a2:88:bf:e2:1a:99:30:9f:18:30:21:
6e:b5:9e:27:7e:c4:18:cf:0f:5f:e0:3d:24:23:c7:af:01:29:
94:37:1d:23:c4:20:4c:bb:f9:2b:e3:26:61:90:a4:a8:42:c9:
c6:d0:26:fd:7c:35:c7:94:13:96:78:fd:4b:ab:f2:fd:df:e7:
d6:8c:f0:4a:97:35:07:1f:f8:b6:54:0a:b0:84:03:89:44:7f:
8d:3a:26:9f:94:dd:3e:c6:ca:08:5e:4f:2c:b2:05:cb:ba:36:
fa:b0:b3:45:04:cc:c3:81:24:79:c7:00:c0:02:e7:7e:b1:5b:
60:f9:71:df:6c:92:bf:5a:df:64:e6:cb:51:4c:26:36:2c:ee:
60:91:ba:61:17:19:6e:58:f4:e6:4d:bf:3a:b8:89:18:58:37:
0e:dc:f4:3d:88:b8:52:a5:f8:ec:f0:52:d9:79:c0:15:5f:4b:
70:fb:64:e3:43:4b:3e:fc:c1:6c:66:46:c8:d7:31:06:e5:7c:
91:45:d5:a6:9f:56:56:db:dc:24:51:bb:41:8e:12:85:be:4f:
69:cd:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:49:30 2025 by rpki-client