This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa
File: 1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa (raw, json)
Hash identifier: QurTovR0f+4FydqEJOMw/TVsopa7nhFl6etUDuOdrv0=
Subject key identifier: AF:62:71:57:FA:D0:27:A0:31:CC:EE:67:73:76:1E:50:A9:C0:2B:23
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 55132D6D5F6BBB761F601CD656010C7E6BD24961
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa
Signing time: Sat 06 Dec 2025 00:10:18 +0000
ROA not before: Sat 06 Dec 2025 00:10:18 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:13:2d:6d:5f:6b:bb:76:1f:60:1c:d6:56:01:0c:7e:6b:d2:49:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 6 00:10:18 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=501142f71ceed6ce6ab745ac2a2cdea496b392155f330cb528c68893d1b01065, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:0a:d3:f1:f8:ff:08:e9:0e:e7:13:62:2d:
d6:d6:36:5a:9a:39:21:ce:5c:ce:81:b5:e2:24:ce:
63:67:4b:65:9d:52:cb:89:63:06:2f:ca:77:d4:8b:
dd:45:b3:f4:09:e2:36:a6:7c:c9:47:96:e0:8d:2e:
7f:21:91:31:a0:0d:b1:6b:96:6b:ca:ea:28:e7:4f:
38:09:56:e2:2b:da:4c:c2:54:fc:dd:f3:0f:d6:c9:
03:1c:60:d2:be:89:41:e6:26:cf:9e:df:a7:dd:3a:
9c:1d:86:79:48:4e:55:8f:61:eb:a1:a1:dd:8c:b7:
b9:6c:23:fc:4b:7a:38:92:d6:9d:7f:fe:d6:94:0c:
c5:f7:c2:1d:06:05:21:51:08:19:d6:87:e1:44:6d:
99:f6:9c:17:44:7d:82:a9:b4:4f:5a:4a:8b:3c:35:
12:7e:a4:a9:a4:6c:33:e4:ce:28:f3:dc:b8:c5:8e:
06:40:10:f9:8c:6b:fb:df:04:af:03:54:e9:ff:b2:
9c:8e:77:ac:5b:54:4f:1f:a1:2b:82:1d:fe:8d:3e:
1c:55:73:0b:ff:d4:25:22:60:45:8b:40:59:10:72:
e1:1d:87:39:ef:eb:16:79:e8:57:5e:26:d7:04:2f:
7c:d1:a2:67:ba:9d:d1:27:03:28:33:07:95:9c:85:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:62:71:57:FA:D0:27:A0:31:CC:EE:67:73:76:1E:50:A9:C0:2B:23
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.208.0/20
Signature Algorithm: sha256WithRSAEncryption
69:85:62:78:2b:12:b1:d8:82:f7:e4:b7:4d:46:b7:f5:36:f7:
91:d4:ac:c6:bf:4e:dc:b9:a6:be:19:50:fd:1f:d4:82:ce:7e:
1b:73:38:63:6b:90:83:16:de:f0:d7:cc:07:66:0e:9c:f2:34:
92:75:d7:8f:4c:23:ec:2c:6c:c7:72:e6:14:a4:8b:09:fc:21:
8a:f1:37:93:1e:bb:b8:05:f2:dc:b0:02:02:90:ed:c1:37:60:
8d:39:07:9c:d2:7c:e1:bd:83:5c:a1:b8:37:9d:0e:1c:db:68:
b4:d4:24:ab:b9:07:3e:3a:aa:6d:94:6b:ba:0c:a5:75:f4:23:
78:b9:e0:61:66:65:82:b1:d4:c6:aa:39:1e:b4:9f:44:00:db:
e1:ee:d7:d7:9a:07:ee:fb:1f:4c:bb:fd:08:3b:5a:07:67:53:
6c:09:09:dd:0f:ee:a5:3f:67:4b:29:bd:f5:c4:75:4f:1d:39:
e4:e3:6a:97:84:02:02:c1:05:6f:f3:82:b2:37:5c:26:20:ee:
ac:78:43:65:4e:48:7f:cb:b2:ab:a1:c7:3e:07:65:ad:6e:76:
26:c8:c1:40:b2:5b:54:e5:ff:4c:96:00:be:3e:ba:1d:58:37:
47:6c:b6:50:f8:b0:7b:f3:46:bd:fa:12:18:5f:da:f7:77:e0:
91:2b:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:50:32 2025 by rpki-client