This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a43b3568-9142-43e7-9e40-584516cdb51b.roa
File: a43b3568-9142-43e7-9e40-584516cdb51b.roa (raw, json)
Hash identifier: flP5nmtdcfWXfi6JBMRV3hlPNpnQbYq9PnJQLkhPumE=
Subject key identifier: A6:4F:E3:23:74:EC:65:BA:2D:90:1E:88:21:A8:96:5A:D7:C1:22:81
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 25E2CFBBD85FF024063B7DEE0AEFF7EF7CF3774E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a43b3568-9142-43e7-9e40-584516cdb51b.roa
Signing time: Tue 09 Dec 2025 00:11:21 +0000
ROA not before: Tue 09 Dec 2025 00:11:21 +0000
ROA not after: Mon 09 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.176.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e2:cf:bb:d8:5f:f0:24:06:3b:7d:ee:0a:ef:f7:ef:7c:f3:77:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 9 00:11:21 2025 GMT
Not After : Mar 9 23:59:59 2026 GMT
Subject: serialNumber=2c45c92653028fe5b3c66a6e935445694b0494728c3c1621525b03368048ab5e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:ad:62:06:90:07:96:51:7b:08:03:8b:69:
77:57:c6:eb:0c:da:86:9d:d3:28:06:16:df:b9:f6:
58:c1:a9:14:91:fa:39:88:54:bf:9e:04:3d:82:71:
8d:8c:71:99:34:ec:ea:a2:c2:48:c5:3d:8b:ac:17:
70:49:be:00:87:34:f0:15:da:9f:c4:22:ee:6a:52:
55:5e:f4:eb:66:19:1a:f7:30:8e:70:cb:a0:8f:cf:
f2:4b:fd:de:26:42:e8:ea:57:af:8f:58:d8:cb:31:
1b:83:4d:2b:e2:0e:d1:f6:30:c6:3d:a1:0c:9a:02:
d2:ee:1b:25:78:b3:c8:85:21:a3:e6:81:35:93:f7:
08:fe:27:d0:45:57:f1:b4:39:e4:13:8b:bb:48:47:
54:47:59:5d:b3:a1:4f:15:ca:1d:77:e6:9c:27:df:
05:af:87:e0:cd:35:10:5c:0e:8c:b8:39:be:93:96:
68:ba:30:69:4e:7c:b8:97:87:0e:15:02:95:ca:e6:
4d:9e:f4:20:fb:ce:25:fb:6b:97:a4:a9:4f:ec:c7:
62:39:09:c5:c7:2d:94:2d:da:db:8a:21:bb:06:4f:
ff:a1:38:60:3d:5b:cd:63:dd:23:e2:41:1e:82:f4:
1b:42:2a:73:77:f2:7c:b3:1a:7d:eb:58:fc:2c:40:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4F:E3:23:74:EC:65:BA:2D:90:1E:88:21:A8:96:5A:D7:C1:22:81
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a43b3568-9142-43e7-9e40-584516cdb51b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.176.0.0/12
Signature Algorithm: sha256WithRSAEncryption
ab:b6:d5:27:8c:e1:6b:68:95:91:81:e9:57:19:7c:ab:d3:87:
34:18:8f:2b:58:9c:e5:93:02:c3:00:97:b0:ad:ee:24:aa:44:
b8:9a:6f:77:d7:bd:2a:ea:36:cc:8c:ea:b7:09:71:f9:02:de:
43:1c:ed:05:7e:65:49:9e:10:6e:0a:b2:17:da:88:52:b7:7c:
22:5b:17:72:94:37:46:ad:ef:8a:be:ab:55:68:3e:2f:05:e9:
30:a2:80:62:50:e1:d6:a4:80:51:21:e2:ed:fd:8e:76:e3:5f:
48:dc:09:a1:99:93:4f:12:14:e6:f3:58:a8:df:d8:3a:9c:cb:
c0:b0:37:ce:3c:a7:0e:79:ba:b4:12:ec:77:a3:d4:19:27:fb:
e3:c7:be:a4:9f:4c:e7:6b:62:30:25:fc:8b:c8:36:fc:d3:69:
9f:d2:35:8c:f1:eb:d5:9c:11:4e:7d:85:23:a2:3f:7d:76:a0:
85:fd:3b:b2:1d:76:64:ba:69:6d:cd:20:1f:6b:e6:40:da:e9:
2d:8d:39:be:41:fa:ad:fd:3f:77:a5:f1:25:92:49:f7:49:d0:
42:df:55:90:1c:a4:02:97:9c:10:43:e0:7b:5e:d1:ed:3d:9b:
e8:cf:18:ea:51:2b:e4:90:da:85:b0:17:da:6e:e9:c8:3f:ca:
44:cd:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:39:27 2025 by rpki-client