This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c60bdb57-d28a-4984-a4bb-13649a31615c.roa
File: c60bdb57-d28a-4984-a4bb-13649a31615c.roa (raw, json)
Hash identifier: fsmmbBwLVK4+2sDS3E9sIs2crKb2k8V6Mp21iBwfBj8=
Subject key identifier: 58:7B:0B:91:35:C9:D6:54:76:D4:50:D6:DF:12:B4:2B:52:D7:4F:B1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 459D2A748894A12025E8CDFA934BE21E35583AEB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c60bdb57-d28a-4984-a4bb-13649a31615c.roa
Signing time: Sun 07 Dec 2025 00:40:10 +0000
ROA not before: Sun 07 Dec 2025 00:40:10 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.245.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9d:2a:74:88:94:a1:20:25:e8:cd:fa:93:4b:e2:1e:35:58:3a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 7 00:40:10 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=0a72c2063d41e6d47aaedb6959a2c14f4552b48491d5d407806f7904c2e11e54, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:94:08:ab:52:13:09:84:87:2c:ae:c2:b8:
81:1d:7e:7a:e6:ac:2f:a3:89:02:4c:19:7e:1c:03:
d5:ef:a7:40:ea:92:5e:7b:73:ee:57:7e:f5:2a:14:
59:3b:e0:0f:50:1a:98:0b:a9:7c:02:61:57:86:f3:
31:52:04:87:65:4e:53:73:f5:96:b7:01:3a:a7:48:
52:10:ec:4a:a5:a9:7e:c2:48:05:ff:76:a3:a8:9c:
1f:ae:27:24:a7:23:6a:b2:4f:33:5e:2b:35:3d:28:
fa:ae:cb:97:bb:2b:a0:46:a0:bf:8a:13:8a:4a:c6:
11:d6:e9:b5:21:ab:df:d7:29:ad:82:0a:b7:80:4b:
2e:dd:0f:3f:11:95:45:f7:12:a4:25:07:a5:40:f6:
25:b7:c5:f3:a8:97:27:3b:1a:aa:15:09:9c:72:66:
d9:1d:81:d5:72:63:9f:22:b0:85:30:a8:4c:f6:4d:
0c:5a:09:ba:4f:7b:15:49:fe:26:92:94:12:00:51:
91:70:86:3a:04:6b:1c:79:41:0a:e2:82:0f:ef:4d:
89:6a:7f:db:99:de:a4:b4:75:8f:90:3b:aa:ea:96:
d5:d3:4d:3c:f1:46:21:b8:b6:d6:b3:4f:d1:f0:7b:
62:1d:b7:ba:1e:2b:6e:21:f7:42:16:5c:8b:69:e5:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:0B:91:35:C9:D6:54:76:D4:50:D6:DF:12:B4:2B:52:D7:4F:B1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c60bdb57-d28a-4984-a4bb-13649a31615c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.245.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:61:cb:dc:c6:76:63:92:be:87:ab:27:e5:31:25:cf:d9:1c:
d2:36:b4:8b:67:77:69:2e:d3:bc:a0:7d:d1:d9:65:a3:60:98:
58:d8:89:bc:33:e8:aa:e1:3f:ee:7d:1a:d6:7e:09:28:b2:18:
01:ab:dc:30:6b:56:cb:97:b8:f3:a2:17:20:c5:97:4e:72:7d:
cf:d2:42:6b:51:a0:0e:7e:16:13:b4:b0:95:e8:a4:f6:1d:ed:
5a:0c:c3:3b:1d:79:5b:72:77:55:70:89:c2:08:31:86:c3:0c:
a8:ba:18:e8:ea:91:d9:33:9a:ff:ea:16:ee:fa:3a:4e:67:d8:
ba:e7:4b:6f:65:cf:41:0d:38:05:f9:39:1e:d6:cf:32:18:9c:
19:00:2d:e8:b9:19:8c:8e:c2:3e:e3:f5:12:ed:8b:7a:02:4e:
fb:4e:78:81:0c:9a:b6:8c:b7:ce:5c:8d:cc:58:ed:63:1b:64:
f0:69:fa:9b:3e:3d:c2:42:83:df:d8:a3:cc:b5:58:72:0b:26:
df:2d:d1:81:c6:6c:5b:ad:31:6d:52:9a:48:09:98:67:57:e1:
0f:ed:0e:e7:c0:51:0d:c2:84:a1:69:15:88:03:3f:97:75:04:
26:27:f2:dd:0a:64:57:80:00:15:a4:30:a5:7c:a0:54:d0:91:
97:66:fb:52
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURZ0qdIiUoSAl6M36k0viHjVYOuswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA3MDA0MDEwWhcNMjYwMzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYTcyYzIwNjNkNDFlNmQ0N2FhZWRiNjk1OWEyYzE0ZjQ1
NTJiNDg0OTFkNWQ0MDc4MDZmNzkwNGMyZTExZTU0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/VZQIq1ITCYSHLK7CuIEdfnrmrC+jiQJMGX4cA9Xvp0Dq
kl57c+5XfvUqFFk74A9QGpgLqXwCYVeG8zFSBIdlTlNz9Za3ATqnSFIQ7EqlqX7C
SAX/dqOonB+uJySnI2qyTzNeKzU9KPquy5e7K6BGoL+KE4pKxhHW6bUhq9/XKa2C
CreASy7dDz8RlUX3EqQlB6VA9iW3xfOolyc7GqoVCZxyZtkdgdVyY58isIUwqEz2
TQxaCbpPexVJ/iaSlBIAUZFwhjoEaxx5QQrigg/vTYlqf9uZ3qS0dY+QO6rqltXT
TTzxRiG4ttazT9Hwe2Idt7oeK24h90IWXItp5WWHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWHsLkTXJ1lR21FDW3xK0K1LXT7EwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2M2MGJkYjU3LWQyOGEtNDk4NC1hNGJiLTEzNjQ5YTMxNjE1Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMS9egwDQYJKoZIhvcNAQELBQADggEBAB5hy9zGdmOSvoerJ+UxJc/ZHNI2
tItnd2ku07ygfdHZZaNgmFjYibwz6KrhP+59GtZ+CSiyGAGr3DBrVsuXuPOiFyDF
l05yfc/SQmtRoA5+FhO0sJXopPYd7VoMwzsdeVtyd1VwicIIMYbDDKi6GOjqkdkz
mv/qFu76Ok5n2LrnS29lz0ENOAX5OR7WzzIYnBkALei5GYyOwj7j9RLti3oCTvtO
eIEMmraMt85cjcxY7WMbZPBp+ps+PcJCg9/Yo8y1WHILJt8t0YHGbFutMW1SmkgJ
mGdX4Q/tDufAUQ3ChKFpFYgDP5d1BCYn8t0KZFeAABWkMKV8oFTQkZdm+1I=
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:49:34 2025 by rpki-client