This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b5097f8-8740-437f-8ecd-21820985b249.roa
File: 0b5097f8-8740-437f-8ecd-21820985b249.roa (raw, json)
Hash identifier: cbgB5O7Gjn500IzwH5sJIU+OUgsqqY+U6wT5SfpgN8o=
Subject key identifier: 0B:62:DA:94:CA:BA:DD:7D:A1:2E:7D:6A:31:20:14:59:54:5A:92:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0156178CB90046F31C96FDB11909E1F1776AEEDC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b5097f8-8740-437f-8ecd-21820985b249.roa
Signing time: Tue 25 Nov 2025 01:21:20 +0000
ROA not before: Tue 25 Nov 2025 01:21:20 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.152.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:56:17:8c:b9:00:46:f3:1c:96:fd:b1:19:09:e1:f1:77:6a:ee:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 25 01:21:20 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=3c2e305f105c17c197c8687ae2f689d1228627c8556c87d1868594e11d5e9e82, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:59:7f:31:e9:10:d2:d9:71:d8:2a:41:13:
a7:c9:4a:e7:16:50:8b:d3:21:a6:ba:7e:87:1c:d9:
7d:91:ff:78:3f:57:28:06:00:38:2c:d2:82:e4:d7:
12:44:79:47:4d:f4:cd:48:ff:81:c8:c1:07:5a:78:
66:c8:dc:d2:99:55:eb:17:83:43:5e:e5:ca:92:e8:
37:53:3a:42:d6:87:8b:ad:5f:1b:5f:4a:75:ca:61:
fd:72:d6:ae:45:9c:b9:b6:41:83:49:2f:44:e5:0e:
cd:05:76:cd:6f:9c:ea:31:56:58:30:70:61:e4:44:
5e:6f:b4:6e:a1:41:82:41:81:21:b4:a3:f5:28:6d:
a6:4a:81:af:11:3f:8c:84:31:4d:98:ca:b5:82:7f:
68:5f:08:2d:ed:43:28:1d:31:87:f1:97:2e:3e:c4:
db:ce:44:83:da:fb:1e:ca:80:94:26:34:50:97:76:
a2:f6:62:a9:81:7e:ad:2f:ba:12:2d:89:7f:1a:0e:
db:00:78:8e:bb:27:57:d5:d2:94:5e:62:36:bf:aa:
3e:46:ce:69:bc:c4:25:e5:d5:0a:c0:60:a9:e0:54:
4c:a2:98:66:a7:3e:5d:46:de:fc:dd:e0:b9:f1:51:
eb:e5:9d:47:86:02:1b:7e:a2:ce:9a:2b:a8:d1:ad:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:DA:94:CA:BA:DD:7D:A1:2E:7D:6A:31:20:14:59:54:5A:92:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b5097f8-8740-437f-8ecd-21820985b249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.152.16.0/21
Signature Algorithm: sha256WithRSAEncryption
73:1b:20:08:70:0f:e1:54:27:c0:39:9d:c7:7b:31:18:4b:cd:
2e:38:b1:f1:b6:c7:57:70:83:03:fa:3f:bd:7a:f5:d5:5c:bb:
6d:7e:c3:47:bd:f2:92:63:e9:35:8c:87:9f:cb:94:ec:0a:5d:
a8:d0:d9:cc:b9:f9:6b:a0:0b:ca:60:d7:88:72:53:3b:45:49:
b3:8a:3f:fd:89:6b:de:44:09:02:e4:81:b6:02:29:39:aa:29:
99:ed:3f:d2:fa:0e:fd:0e:e8:f6:c1:09:d5:19:ed:4c:ff:c9:
60:3a:bf:8d:11:5d:2c:63:e3:bf:02:49:1c:c3:c5:56:74:cd:
b0:4d:21:53:ce:da:d7:5a:8c:9e:bd:d5:34:fd:30:7d:41:88:
c6:d2:a1:af:f1:19:e2:b3:c2:69:41:d5:db:c1:05:1e:ca:7a:
a3:1b:45:8a:df:23:f2:95:e2:ae:6d:7f:a8:ac:da:6b:0a:db:
72:8b:bf:6e:02:16:c8:6d:8d:25:fe:36:b2:3e:ca:57:e4:91:
27:b5:02:98:8f:00:15:4d:df:00:b1:5c:00:17:76:40:81:c6:
6e:6a:5e:5d:b2:8a:c6:30:f8:88:e4:e7:1a:1b:94:32:02:69:
a3:2a:b1:80:9b:ce:e7:22:6b:ef:fe:1c:66:72:e8:10:72:10:
cf:e3:53:26
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAVYXjLkARvMclv2xGQnh8Xdq7twwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDEyMTIwWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzJlMzA1ZjEwNWMxN2MxOTdjODY4N2FlMmY2ODlkMTIy
ODYyN2M4NTU2Yzg3ZDE4Njg1OTRlMTFkNWU5ZTgyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDah1l/MekQ0tlx2CpBE6fJSucWUIvTIaa6focc2X2R/3g/
VygGADgs0oLk1xJEeUdN9M1I/4HIwQdaeGbI3NKZVesXg0Ne5cqS6DdTOkLWh4ut
XxtfSnXKYf1y1q5FnLm2QYNJL0TlDs0Fds1vnOoxVlgwcGHkRF5vtG6hQYJBgSG0
o/UobaZKga8RP4yEMU2YyrWCf2hfCC3tQygdMYfxly4+xNvORIPa+x7KgJQmNFCX
dqL2YqmBfq0vuhItiX8aDtsAeI67J1fV0pReYja/qj5Gzmm8xCXl1QrAYKngVEyi
mGanPl1G3vzd4LnxUevlnUeGAht+os6aK6jRrZGFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUC2LalMq63X2hLn1qMSAUWVRakqMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBiNTA5N2Y4LTg3NDAtNDM3Zi04ZWNkLTIxODIwOTg1YjI0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMNmBAwDQYJKoZIhvcNAQELBQADggEBAHMbIAhwD+FUJ8A5ncd7MRhLzS44
sfG2x1dwgwP6P7169dVcu21+w0e98pJj6TWMh5/LlOwKXajQ2cy5+WugC8pg14hy
UztFSbOKP/2Ja95ECQLkgbYCKTmqKZntP9L6Dv0O6PbBCdUZ7Uz/yWA6v40RXSxj
478CSRzDxVZ0zbBNIVPO2tdajJ691TT9MH1BiMbSoa/xGeKzwmlB1dvBBR7KeqMb
RYrfI/KV4q5tf6is2msK23KLv24CFshtjSX+NrI+ylfkkSe1ApiPABVN3wCxXAAX
dkCBxm5qXl2yisYw+Ijk5xoblDICaaMqsYCbzucia+/+HGZy6BByEM/jUyY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:42:17 2025 by rpki-client