This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa
File: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (raw, json)
Hash identifier: xl32gW7P7q7uVaXbsFsLrrxHecmkrf/V33q/LI6uYUA=
Subject key identifier: 81:41:E1:4F:EC:6F:FF:65:54:B0:B9:D5:16:35:52:9F:EE:70:60:7C
Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial: 382A718AD1952512C48C3A0C192A286EC82ABF93
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa
Signing time: Wed 12 Nov 2025 00:10:08 +0000
ROA not before: Wed 12 Nov 2025 00:10:08 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 198.41.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2a:71:8a:d1:95:25:12:c4:8c:3a:0c:19:2a:28:6e:c8:2a:bf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Validity
Not Before: Nov 12 00:10:08 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=a2e2b3e6b91a42f8fab12c933ae8a955d67e6bedb58853b9debb483696fda19b, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:f0:b7:b0:ef:5e:dc:c9:17:3c:6f:c5:be:
cd:f3:13:89:2e:f8:56:28:09:13:6c:ba:4b:f6:d8:
1e:3b:8e:f3:a3:4e:a4:38:d6:da:42:df:63:a0:4d:
81:2d:66:73:8e:f9:f6:7c:dc:1d:8a:f5:24:43:e5:
f1:23:4e:ac:74:55:71:29:41:29:6d:d2:91:b2:db:
69:86:d0:e7:10:6e:cb:85:9c:fe:55:12:4d:d4:7f:
cb:1a:57:68:de:84:42:86:74:5d:49:95:88:a9:fd:
68:59:d9:42:2f:20:29:33:85:3f:55:0b:44:84:c7:
ee:ce:8c:80:63:a0:39:88:c3:a3:d1:6a:70:7f:5e:
b5:ca:a6:21:bf:0e:20:16:0c:a0:66:a7:97:07:d7:
ca:cd:76:f1:22:79:af:86:73:46:c2:6a:63:ae:e8:
7f:bb:e4:1e:0e:a4:7c:75:5d:8e:5f:f6:55:e8:68:
14:73:5f:94:71:9d:fd:f2:f0:6c:1c:ba:6d:02:d4:
00:d6:85:ea:a3:cc:96:5f:a4:2d:e1:b7:84:ba:b9:
8c:7c:3c:04:2c:74:ac:0d:d5:8e:96:c2:1b:74:53:
fa:78:e5:4b:b9:0e:98:20:a8:c5:d5:46:cc:15:06:
02:a9:29:fb:6b:92:20:8a:3c:72:b0:6e:31:f9:0b:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:E1:4F:EC:6F:FF:65:54:B0:B9:D5:16:35:52:9F:EE:70:60:7C
X509v3 Authority Key Identifier:
keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.41.97.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c6:49:e8:1a:ed:f3:94:82:bb:b6:3f:23:22:8e:16:ad:de:
ba:7c:10:08:43:9f:58:9e:a2:e7:1c:51:93:21:f6:b6:54:60:
71:dd:1f:20:c0:2b:e8:1c:3d:34:c6:83:e8:e3:11:6b:e8:71:
08:5f:e3:1c:09:79:d4:27:76:68:cd:81:39:92:69:be:83:ee:
7b:34:bf:ba:c8:56:37:a5:8f:37:97:13:fb:46:cf:58:ac:9c:
83:6d:03:cf:47:7d:71:69:98:ca:4d:18:be:95:52:5e:a0:27:
b9:bf:4a:ae:dc:1e:fb:63:f8:86:6d:f0:2d:c3:df:76:f2:a4:
19:24:11:28:9a:0f:43:3e:34:a4:25:f5:26:f3:6b:20:dc:a3:
be:57:a2:ef:72:9b:e8:3c:f9:94:f1:2e:11:02:c1:f0:0d:0f:
bb:3d:55:34:90:a3:12:9c:8d:30:b5:c3:10:59:8e:f1:83:12:
5d:79:5b:5b:a1:e0:95:06:3f:8d:57:0f:8a:fd:93:87:2a:dd:
dd:54:9b:38:d5:cf:2a:f2:8d:02:91:9d:57:dc:9b:10:56:c1:
b6:3f:d0:8b:7b:0e:64:4d:f6:0a:de:59:a4:de:a7:21:eb:32:
16:af:65:b8:be:4b:b9:16:a9:e1:79:76:d6:61:b2:d2:63:13:
6d:1b:b7:da
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOCpxitGVJRLEjDoMGSoobsgqv5MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk
MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUxMTEyMDAxMDA4WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMmUyYjNlNmI5MWE0MmY4ZmFiMTJjOTMzYWU4YTk1NWQ2
N2U2YmVkYjU4ODUzYjlkZWJiNDgzNjk2ZmRhMTliMS0wKwYDVQQDEyQ4OGFmN2I5
NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPrPC3sO9e3MkXPG/Fvs3zE4ku+FYoCRNsukv22B47jvOj
TqQ41tpC32OgTYEtZnOO+fZ83B2K9SRD5fEjTqx0VXEpQSlt0pGy22mG0OcQbsuF
nP5VEk3Uf8saV2jehEKGdF1JlYip/WhZ2UIvICkzhT9VC0SEx+7OjIBjoDmIw6PR
anB/XrXKpiG/DiAWDKBmp5cH18rNdvEiea+Gc0bCamOu6H+75B4OpHx1XY5f9lXo
aBRzX5Rxnf3y8Gwcum0C1ADWheqjzJZfpC3ht4S6uYx8PAQsdKwN1Y6Wwht0U/p4
5Uu5DpggqMXVRswVBgKpKftrkiCKPHKwbjH5C5JnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgUHhT+xv/2VUsLnVFjVSn+5wYHwwHwYDVR0jBBgwFoAUzBBhJz//dj92
0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i
ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj
NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy
MWQwMWY3ZDkwLzk4YzNmOWY4LTllZTMtNDkwOS04ZDQxLTdhYzIxODFmNjM3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh
LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADGKWEwDQYJKoZIhvcNAQELBQADggEBAFbGSega7fOUgru2PyMijhat3rp8
EAhDn1ieouccUZMh9rZUYHHdHyDAK+gcPTTGg+jjEWvocQhf4xwJedQndmjNgTmS
ab6D7ns0v7rIVjeljzeXE/tGz1isnINtA89HfXFpmMpNGL6VUl6gJ7m/Sq7cHvtj
+IZt8C3D33bypBkkESiaD0M+NKQl9SbzayDco75Xou9ym+g8+ZTxLhECwfAND7s9
VTSQoxKcjTC1wxBZjvGDEl15W1uh4JUGP41XD4r9k4cq3d1UmzjVzyryjQKRnVfc
mxBWwbY/0It7DmRN9greWaTepyHrMhavZbi+S7kWqeF5dtZhstJjE20bt9o=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:14:11 2025 by rpki-client