This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa
File: 498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa (raw, json)
Hash identifier: M+gjOYuvWQQ0Acgd8LHz+QqdvSEqkdrh1+0pjMqB5Lc=
Subject key identifier: DD:A5:94:1E:92:21:5D:2C:D4:D8:1A:8E:CC:74:39:95:F0:AA:7C:54
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 69A41EA20E45C11396D178BFB490C7865B2D6060
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa
Signing time: Sun 23 Nov 2025 00:30:07 +0000
ROA not before: Sun 23 Nov 2025 00:30:07 +0000
ROA not after: Sat 21 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a4:1e:a2:0e:45:c1:13:96:d1:78:bf:b4:90:c7:86:5b:2d:60:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Nov 23 00:30:07 2025 GMT
Not After : Feb 21 23:59:59 2026 GMT
Subject: serialNumber=603ca387d2c9b21246c12ed858ed9a5ba8931c97d25b1f08634d3fd7263a2514, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:d8:bc:f9:64:e2:6e:f9:7e:93:9e:8a:ea:
bf:5d:1c:58:89:23:3e:f7:f4:1f:57:12:11:e4:f5:
23:86:b3:3b:62:1f:69:6c:ea:57:4f:be:6d:8b:01:
79:25:f1:69:40:b8:6c:f6:d0:49:3e:e4:4e:5a:c6:
75:1f:a5:e1:8a:cc:c5:9a:f7:ab:87:b0:02:bd:0a:
82:0b:df:bc:64:99:5e:16:1c:b7:40:40:cb:7e:02:
a2:c4:95:7b:cf:09:12:5e:04:d8:b7:9d:7b:a7:b1:
28:b0:a6:e4:78:b4:fb:df:fe:9d:f6:32:59:01:8d:
18:b9:1c:11:45:06:a3:29:4a:da:b2:ce:9a:46:02:
a2:cb:b4:c8:a9:aa:78:ae:09:97:fa:bd:88:af:24:
8a:27:5e:e6:5f:29:ad:ed:b7:75:81:46:17:64:52:
17:26:f7:9d:b2:b4:79:ab:3e:12:58:5f:b5:a7:c8:
7f:4d:1d:49:b3:35:c0:16:4e:63:cc:49:5b:d8:7e:
e4:28:09:a5:6b:e7:35:bd:aa:0b:b2:58:18:d5:e7:
bf:33:07:b1:69:81:d9:56:eb:e8:c0:f7:dd:ef:21:
d4:05:ed:94:24:03:d5:e1:03:3c:65:2a:4d:ff:d2:
a3:93:f5:76:19:9b:84:d9:c0:23:92:8f:96:1a:5d:
50:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:94:1E:92:21:5D:2C:D4:D8:1A:8E:CC:74:39:95:F0:AA:7C:54
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/498f334e-4dc8-4118-b1a1-4c9a15d14b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:93:56:26:95:e1:0b:12:66:06:5e:f6:e8:de:40:01:d4:dd:
e1:43:41:9e:6f:d6:3a:32:e5:99:5c:cd:9b:81:73:81:16:21:
fa:8b:0d:b5:e5:93:24:11:b5:82:9c:de:13:de:e1:6f:0e:da:
b8:cf:ad:85:54:3a:85:e7:3d:e4:b7:84:37:f3:7f:18:72:0d:
4f:63:33:e7:87:41:68:6a:53:04:f7:cc:93:dc:7d:a2:6d:eb:
6a:f6:0c:5e:a6:07:ab:0c:d6:82:b1:dd:6a:2f:19:4c:c2:ad:
1a:98:2e:3a:47:97:73:e7:ba:b6:54:30:bd:bd:87:ca:58:18:
f2:3e:18:c0:86:54:eb:da:db:ef:96:8f:35:33:05:1f:e4:6d:
c8:b8:bf:18:c1:19:02:c0:14:46:74:72:54:e4:a3:f7:2d:dc:
73:d6:81:f2:80:37:2b:80:a0:05:d3:be:90:ac:9d:22:08:3e:
47:f1:43:6f:52:f5:26:6d:24:2a:fb:2b:38:ba:d7:2c:6e:72:
4c:4e:78:cb:60:28:6b:e7:28:a1:4b:8c:f6:02:c5:99:dc:35:
c9:e5:59:a6:eb:26:a7:8c:2f:ed:bd:6f:4e:b0:19:3e:bf:af:
2e:f0:a1:46:99:db:3d:3c:33:da:f2:2e:ae:bf:b7:f7:37:52:
0b:08:4b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:53:37 2025 by rpki-client