This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa
File: ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa (raw, json)
Hash identifier: CdyyvKpUdmrQBeAwNmFYbiy91qV18a6ivroxgy4vBVI=
Subject key identifier: FC:89:21:47:94:E2:AB:77:97:DB:00:EE:67:38:0B:FE:5F:1C:F4:6B
Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial: 281DA31D868A9ED055013467A5C1008AD3D89A46
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa
Signing time: Sat 15 Nov 2025 00:50:09 +0000
ROA not before: Sat 15 Nov 2025 00:50:09 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.127.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1d:a3:1d:86:8a:9e:d0:55:01:34:67:a5:c1:00:8a:d3:d8:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Validity
Not Before: Nov 15 00:50:09 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=2b275630373a2b836aa40bf1bc2225fd06c858e482a101fe5f918a98f26763d9, CN=0099a7ea-794a-4a28-b164-49547626eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:26:6a:9b:20:4a:e6:4e:44:95:73:cf:43:
94:68:41:7d:ef:b4:e4:a2:38:e7:4b:5c:d1:0f:6d:
48:0d:1f:b0:c5:2f:4b:4a:13:17:bf:ed:51:b4:0a:
24:26:a3:16:9e:1a:1b:82:ba:56:fe:de:f6:4a:64:
52:a3:33:f1:5d:a8:60:20:eb:29:33:c0:29:a6:19:
0b:6f:11:26:31:ba:f1:c5:1f:85:e5:4a:7b:7c:3c:
6f:94:9a:32:05:b8:69:68:28:7b:bb:e1:d5:10:55:
4d:97:de:fa:59:ba:19:67:cb:b7:11:5c:c3:56:4e:
02:51:3a:73:ce:df:7c:bc:f1:33:76:7a:be:e3:80:
a7:b0:94:c5:5d:7e:01:b3:9b:b4:78:3e:c6:ac:48:
2e:4f:1d:5b:89:1d:0d:ad:a0:9a:4b:71:ef:24:9a:
18:c2:eb:57:6e:43:ba:63:e1:4f:9f:1b:07:c2:4d:
e0:b5:33:88:a2:8e:63:5b:a5:ec:85:a3:80:5c:d2:
64:82:a7:30:fb:78:0c:27:0c:cd:1a:6e:b9:42:c7:
ac:ee:ec:05:c3:1e:fd:2c:6d:2d:6c:53:02:c6:9a:
51:46:4e:94:b3:79:f7:2c:c2:90:ef:b8:57:54:0c:
f1:60:69:24:82:2c:6f:74:1c:ad:b8:9c:d8:92:b6:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:21:47:94:E2:AB:77:97:DB:00:EE:67:38:0B:FE:5F:1C:F4:6B
X509v3 Authority Key Identifier:
keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.127.64.0/18
Signature Algorithm: sha256WithRSAEncryption
16:0b:a4:80:3d:a5:3e:4b:3d:7d:d6:6e:60:c3:ee:4d:3e:8b:
3c:21:ba:57:84:68:db:89:32:e1:6b:6e:d1:87:22:8e:28:2b:
35:f4:26:44:cb:6f:c7:5e:3f:8f:17:de:6e:7c:7a:1a:65:2c:
7a:a5:ed:85:dd:15:d9:92:7b:a1:6c:bc:7a:7d:3b:4d:1f:6c:
62:f0:84:6f:1e:f8:03:2c:22:1b:94:74:64:cc:e1:8f:bd:c2:
5e:0c:be:04:de:92:c7:02:19:ee:d1:50:11:96:fa:2e:f8:eb:
5d:a2:4e:d3:be:30:00:9d:4a:f1:fd:4e:a4:85:06:ea:cf:0c:
96:e0:66:2b:8c:89:dc:b8:1f:cf:b5:bd:38:44:b6:2b:5d:19:
84:cf:62:e7:92:b8:7c:fb:ca:3f:67:89:49:d3:5e:8a:7f:84:
b5:a9:d1:4a:58:b8:6f:3c:4b:3c:27:85:6c:be:9d:c7:72:cd:
b9:9f:20:c7:7f:35:16:e8:e3:39:de:82:d6:7c:6b:f2:a9:ae:
62:aa:d1:8a:be:32:83:f5:96:dd:71:b9:b7:8d:a2:ae:4a:b0:
b1:d7:66:1e:b8:4b:22:c4:47:63:51:62:f5:97:c2:f9:0b:fe:
7a:70:dc:c4:b5:9e:aa:da:6a:6c:70:7f:ce:6e:c4:64:d2:45:
11:f2:fe:80
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKB2jHYaKntBVATRnpcEAitPYmkYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3
YTViNzRlNjk0NDljMWViMDQwHhcNMjUxMTE1MDA1MDA5WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYjI3NTYzMDM3M2EyYjgzNmFhNDBiZjFiYzIyMjVmZDA2
Yzg1OGU0ODJhMTAxZmU1ZjkxOGE5OGYyNjc2M2Q5MS0wKwYDVQQDEyQwMDk5YTdl
YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxsCZqmyBK5k5ElXPPQ5RoQX3vtOSiOOdLXNEPbUgNH7DF
L0tKExe/7VG0CiQmoxaeGhuCulb+3vZKZFKjM/FdqGAg6ykzwCmmGQtvESYxuvHF
H4XlSnt8PG+UmjIFuGloKHu74dUQVU2X3vpZuhlny7cRXMNWTgJROnPO33y88TN2
er7jgKewlMVdfgGzm7R4PsasSC5PHVuJHQ2toJpLce8kmhjC61duQ7pj4U+fGwfC
TeC1M4iijmNbpeyFo4Bc0mSCpzD7eAwnDM0abrlCx6zu7AXDHv0sbS1sUwLGmlFG
TpSzefcswpDvuFdUDPFgaSSCLG90HK24nNiStlmhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/IkhR5Tiq3eX2wDuZzgL/l8c9GswHwYDVR0jBBgwFoAUmcNUTAjJlFS4
eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05
YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2
M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3
ZTU1MmM2ZTM1L2NjYWE4OGM3LTA1NGItNGNlMS05MmU4LTYyZGQ5NDE3MThlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw
LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZgf0AwDQYJKoZIhvcNAQELBQADggEBABYLpIA9pT5LPX3WbmDD7k0+izwh
uleEaNuJMuFrbtGHIo4oKzX0JkTLb8deP48X3m58ehplLHql7YXdFdmSe6FsvHp9
O00fbGLwhG8e+AMsIhuUdGTM4Y+9wl4MvgTekscCGe7RUBGW+i74612iTtO+MACd
SvH9TqSFBurPDJbgZiuMidy4H8+1vThEtitdGYTPYueSuHz7yj9niUnTXop/hLWp
0UpYuG88SzwnhWy+ncdyzbmfIMd/NRbo4znegtZ8a/KprmKq0Yq+MoP1lt1xubeN
oq5KsLHXZh64SyLER2NRYvWXwvkL/npw3MS1nqraamxwf85uxGTSRRHy/oA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:51:40 2025 by rpki-client