This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4949eeb8-7d20-46c5-8118-d8506fef2259.roa
File: 4949eeb8-7d20-46c5-8118-d8506fef2259.roa (raw, json)
Hash identifier: SnQWKbvTfTh6rYlX3yASQoCFh2SSdIBLT5N/3iWL/oc=
Subject key identifier: B4:AB:D2:44:B7:00:5D:61:90:50:5C:31:88:60:D2:56:0E:56:3C:FE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3A4A5F2629AEE0997C7512044C7BEC96FADA94AF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4949eeb8-7d20-46c5-8118-d8506fef2259.roa
Signing time: Wed 10 Dec 2025 02:50:08 +0000
ROA not before: Wed 10 Dec 2025 02:50:08 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.239.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:4a:5f:26:29:ae:e0:99:7c:75:12:04:4c:7b:ec:96:fa:da:94:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 02:50:08 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=c008d64e62ff1b598e280276deb03005b1f6a019d27065dcc195b5269dbd3d1f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:b3:6a:c9:34:27:b0:a0:ab:dc:86:47:1a:
60:dc:e9:b8:4e:82:e3:51:42:61:4d:c3:99:7a:c3:
e8:7a:d6:fd:5b:a2:94:4c:e9:b0:c6:db:7f:89:fa:
d8:bd:12:ec:60:f2:b4:93:95:26:a6:98:f6:60:0a:
f9:45:8d:4a:66:2d:0f:f4:7f:09:74:04:e8:a2:5e:
ea:e7:d8:16:cf:1f:2a:00:66:c7:a5:e6:07:90:fa:
9f:98:84:7b:3a:87:e5:f6:05:bc:43:3d:ce:8c:c9:
7e:8c:94:fc:3d:9a:cc:27:a1:d4:be:36:3c:a9:b3:
e3:b7:b8:62:ad:a5:bb:92:6d:87:d3:d4:e6:c9:07:
8f:73:18:1b:f3:ac:fb:a6:ab:e4:f7:ca:ad:fb:2d:
22:31:be:65:5c:2d:b6:26:66:3f:e0:b3:6a:ea:d9:
9c:85:e2:d0:8f:3a:e0:0c:00:2b:0c:f0:3b:b0:8b:
0b:76:28:fa:2a:8f:02:9a:4a:0f:28:94:86:98:19:
98:3d:6c:71:3c:e9:c4:ec:d0:bd:7e:e1:e2:09:d8:
ff:39:76:7a:47:27:ac:ff:f4:d3:64:63:77:ad:1b:
de:23:88:d9:31:69:c2:64:27:b5:fe:66:36:7b:b0:
6a:88:76:b4:df:f4:0b:a7:88:91:d8:ac:f2:af:2f:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AB:D2:44:B7:00:5D:61:90:50:5C:31:88:60:D2:56:0E:56:3C:FE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4949eeb8-7d20-46c5-8118-d8506fef2259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.239.184.0/23
Signature Algorithm: sha256WithRSAEncryption
79:ab:b2:8b:95:c7:03:6e:14:6f:c1:91:b5:a6:cf:36:28:54:
a4:f1:9d:9f:d1:cf:e7:c1:40:db:74:41:09:0e:34:f4:20:a6:
89:52:1c:bb:13:ff:39:ec:8e:17:98:24:b7:c3:56:72:43:3c:
8e:93:d5:41:61:54:e5:7a:d1:14:c3:60:78:18:17:b8:2d:a0:
cc:84:76:f7:5d:fd:9a:e7:13:6d:51:a4:42:a7:b6:cf:66:19:
65:cc:33:c7:99:70:a6:0d:42:82:07:7e:d5:56:7a:34:69:6a:
51:03:e2:92:7f:c3:bd:aa:b4:33:b3:f7:74:95:51:cf:4b:77:
72:ae:1a:53:26:fd:9c:26:ae:66:2d:a0:b3:ff:cd:e6:07:2e:
fa:bb:56:7f:5b:6d:f1:bd:3b:6b:93:4c:8c:fc:29:b0:7c:79:
eb:17:20:cf:8b:c8:4b:b6:40:7a:81:de:b3:25:40:f1:4a:96:
3d:91:d6:69:b4:88:86:17:0e:d8:5f:c9:29:00:64:83:f7:5a:
8d:21:5a:85:b6:e3:5f:03:f0:c3:2c:08:00:c0:39:ad:92:fd:
d7:78:77:ef:97:62:90:b3:06:c5:91:1c:20:e7:3c:6b:e5:41:
4e:0a:86:88:e8:11:ad:4a:fc:7e:e2:47:37:a4:e4:f2:35:fd:
ce:3b:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:50:24 2025 by rpki-client