This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f91a965-4d5c-4bab-86cf-96b20618c854.roa
File: 1f91a965-4d5c-4bab-86cf-96b20618c854.roa (raw, json)
Hash identifier: 3wXAdEUud5WyFr5N2CZ5LdguF0eJVUIe2pCkKIMIXFQ=
Subject key identifier: C0:78:4B:00:F7:9F:C2:6E:F1:AA:F1:87:BA:26:C7:A7:8A:DC:15:3D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 113511D93E58970375FE261DA30326BC28D43214
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f91a965-4d5c-4bab-86cf-96b20618c854.roa
Signing time: Mon 08 Dec 2025 01:40:07 +0000
ROA not before: Mon 08 Dec 2025 01:40:07 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 161.188.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:35:11:d9:3e:58:97:03:75:fe:26:1d:a3:03:26:bc:28:d4:32:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 8 01:40:07 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=8ca283f55a860bfd3cd9401113c0f1be58e18f62be284b1325417624ad1820e8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:46:24:b8:e2:a3:af:be:3b:d6:2d:1b:66:
e7:45:0f:43:e4:91:57:a1:14:68:af:90:63:0d:6a:
8f:d9:64:5a:28:11:ef:71:5f:10:d9:b5:45:69:4b:
9a:a4:b6:98:ee:0b:42:d1:44:44:52:4e:4f:f2:c5:
9c:8a:4d:16:bf:73:5c:07:c7:46:4f:e1:00:a1:cf:
56:ec:9d:29:e0:a8:86:f4:9c:1f:f5:af:35:03:1e:
35:bd:21:bc:87:cf:05:0c:b1:9c:3d:46:2d:7c:06:
b8:00:1d:27:7a:c0:46:f2:0a:c8:83:f5:51:9e:38:
87:08:cc:53:63:fc:85:14:c7:48:ac:5c:63:05:5b:
5d:64:4c:89:e0:2c:a8:d6:23:51:9b:89:fa:fe:3f:
41:7c:b1:5a:97:c8:6d:d0:8b:74:e5:a5:50:14:a9:
02:ca:db:a2:64:3e:2b:0d:d7:e1:06:e1:03:d8:0b:
a0:92:31:32:3b:01:0e:94:98:c7:a5:40:83:dc:d3:
8a:7f:41:4a:f1:30:e8:f6:7f:56:65:43:32:19:30:
3f:1d:0a:13:8a:0a:d3:c2:82:f4:34:56:93:dc:8d:
0a:c6:20:2b:6c:93:bd:56:df:21:60:58:a6:2e:de:
ff:1f:92:32:4f:88:64:2d:ed:89:5a:c6:8a:77:69:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:4B:00:F7:9F:C2:6E:F1:AA:F1:87:BA:26:C7:A7:8A:DC:15:3D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f91a965-4d5c-4bab-86cf-96b20618c854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.188.178.0/23
Signature Algorithm: sha256WithRSAEncryption
72:4d:e9:1b:30:62:2e:df:d6:5b:b0:6a:ff:7e:12:76:ca:04:
8d:34:ec:b4:40:2f:bb:14:54:a2:11:d1:f7:d9:46:19:a9:cf:
5d:f0:d6:29:80:f5:cd:c2:28:94:cd:8c:08:0f:b4:3d:32:77:
53:f8:75:11:89:37:a1:9f:4b:fb:cf:e9:0f:a1:60:6b:8a:4c:
30:c6:66:0b:ac:b0:fa:e3:1c:b7:53:4e:23:2c:35:78:09:9a:
5c:29:8a:8a:8e:ef:8e:14:35:80:87:34:64:74:f2:06:b4:55:
72:60:95:a8:c0:4b:fb:f9:2e:8d:6a:38:ec:b2:e8:ea:37:cc:
ef:07:56:ba:62:b5:fe:7c:78:60:72:7c:31:d0:04:c0:fe:0a:
09:60:ce:00:67:bc:89:a3:3f:bc:27:6c:03:57:76:ab:a3:9e:
2c:76:ef:84:db:77:fa:a3:12:4c:2f:a1:41:08:27:4e:f1:bf:
bb:31:e6:b0:22:09:19:45:26:ec:4c:f0:65:f6:8c:2b:d5:59:
f9:b7:95:bc:8e:24:17:a7:b1:86:6d:62:81:d3:05:bd:29:ed:
8a:7a:75:b9:96:b6:0f:d2:6c:bc:1d:bd:c7:36:cf:87:c5:da:
68:85:70:32:b1:47:f3:60:f1:bc:b6:37:bc:b4:31:cc:84:df:
3d:5e:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:06:29 2025 by rpki-client