This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/854367ff-45b7-4925-99a1-97b01f4fabe8.roa
File: 854367ff-45b7-4925-99a1-97b01f4fabe8.roa (raw, json)
Hash identifier: xvi70eb3P3HgJBN3hZc3zdXCQxadV44imo9eFk+9hpw=
Subject key identifier: C9:A9:0C:22:8A:D9:27:7F:47:A6:8D:6C:FC:BF:28:6B:10:B2:19:CD
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 066A5BA316A78DA6E6571C1F8442C45EB3DC8C34
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/854367ff-45b7-4925-99a1-97b01f4fabe8.roa
Signing time: Sat 22 Nov 2025 00:00:06 +0000
ROA not before: Sat 22 Nov 2025 00:00:06 +0000
ROA not after: Fri 20 Feb 2026 23:59:59 +0000
asID: 8987
IP address blocks: 216.221.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:6a:5b:a3:16:a7:8d:a6:e6:57:1c:1f:84:42:c4:5e:b3:dc:8c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Nov 22 00:00:06 2025 GMT
Not After : Feb 20 23:59:59 2026 GMT
Subject: serialNumber=c3ebe73862663209cb4a2c50552c1dc35cc613e380cd339e2a06cb8255ff142d, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:ef:6e:bb:ce:ec:22:a7:ad:cc:b5:12:b9:
b7:b1:12:e9:30:76:f2:7c:f9:1c:b3:fa:5c:3e:a3:
c3:d1:e4:44:60:51:1f:6a:7d:da:22:ca:91:01:94:
4f:cc:b2:63:3a:99:fb:2a:cd:32:d3:e2:4d:2f:94:
33:ac:32:7d:11:ef:30:12:ea:ee:d4:92:f3:1c:78:
eb:0c:c1:95:a6:a9:bc:ca:90:a7:8b:7d:e8:b0:b0:
8c:72:cc:f3:e3:83:80:a6:4c:a7:f4:b1:05:a2:a0:
f2:e1:00:2e:23:cc:46:14:c6:a8:4a:94:eb:f1:16:
ee:5b:74:1b:cc:b1:d5:9a:b7:bb:a9:81:2e:b4:04:
56:40:bc:55:cb:ad:8a:53:8f:a0:a8:97:19:51:72:
40:71:1c:cf:ea:1f:d1:df:0c:37:3a:42:0a:f2:c9:
70:84:56:e6:e6:71:92:62:fb:7e:65:78:2c:f9:f1:
5f:0c:2f:b0:79:64:88:e4:8a:f7:a7:6f:3d:3c:37:
b7:98:cb:25:c4:f2:19:cc:ba:56:f4:f5:6a:5c:7b:
8b:e0:2d:1a:d6:4e:96:2b:aa:6f:aa:8e:97:75:f8:
cd:39:20:17:d8:a0:20:ba:cf:12:2a:8b:7c:c8:00:
d9:ff:3b:b6:42:f1:c4:d8:30:ab:87:f5:e0:bf:b5:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:0C:22:8A:D9:27:7F:47:A6:8D:6C:FC:BF:28:6B:10:B2:19:CD
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/854367ff-45b7-4925-99a1-97b01f4fabe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.166.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:da:24:d1:a0:01:cd:df:7d:63:2d:46:08:3f:78:2d:72:c0:
8b:5b:26:1c:d7:e0:73:3f:5c:df:e3:0c:6e:44:9a:5a:92:02:
c4:43:9a:6a:f8:8d:37:d0:8a:30:45:80:40:75:c4:d8:ef:bb:
69:66:65:d4:fa:c4:91:e1:b8:7d:fa:35:03:65:4a:eb:4d:03:
a8:b7:0e:84:9c:78:be:b3:e1:76:1e:a1:ab:bc:47:d0:ac:9b:
db:8e:30:ab:af:98:bc:ea:a0:d0:42:6b:13:e0:76:12:26:73:
17:f0:78:52:44:4e:0e:f4:b3:c9:7b:4f:75:96:d7:c5:91:09:
9f:d5:1e:ad:8d:60:19:b7:16:35:c6:78:9d:86:69:48:19:63:
50:b2:d6:36:da:4c:1d:c1:24:e4:23:08:68:f2:b1:95:84:82:
ac:68:dd:ce:0b:87:4c:c9:cb:31:d3:c9:cd:6f:d3:52:65:7a:
ac:fe:6d:c7:60:f6:62:9e:35:3c:de:1e:1d:31:40:51:9d:56:
f9:ed:03:6e:67:fc:3b:34:d7:6f:d8:59:9c:ce:78:d2:16:09:
05:d4:e2:35:d2:56:46:82:80:69:00:dd:27:c4:50:77:38:84:
26:f4:ec:9f:5d:e8:09:96:6f:9c:71:38:87:d7:a5:eb:76:97:
b5:be:02:0c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBmpboxanjabmVxwfhELEXrPcjDQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTIyMDAwMDA2WhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjM2ViZTczODYyNjYzMjA5Y2I0YTJjNTA1NTJjMWRjMzVj
YzYxM2UzODBjZDMzOWUyYTA2Y2I4MjU1ZmYxNDJkMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCr2+9uu87sIqetzLUSubexEukwdvJ8+Ryz+lw+o8PR5ERg
UR9qfdoiypEBlE/MsmM6mfsqzTLT4k0vlDOsMn0R7zAS6u7UkvMceOsMwZWmqbzK
kKeLfeiwsIxyzPPjg4CmTKf0sQWioPLhAC4jzEYUxqhKlOvxFu5bdBvMsdWat7up
gS60BFZAvFXLrYpTj6ColxlRckBxHM/qH9HfDDc6QgryyXCEVubmcZJi+35leCz5
8V8ML7B5ZIjkivenbz08N7eYyyXE8hnMulb09Wpce4vgLRrWTpYrqm+qjpd1+M05
IBfYoCC6zxIqi3zIANn/O7ZC8cTYMKuH9eC/tYjBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUyakMIorZJ39Hpo1s/L8oaxCyGc0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzg1NDM2N2ZmLTQ1YjctNDkyNS05OWExLTk3YjAxZjRmYWJlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHY3aYwDQYJKoZIhvcNAQELBQADggEBAH7aJNGgAc3ffWMtRgg/eC1ywItb
JhzX4HM/XN/jDG5EmlqSAsRDmmr4jTfQijBFgEB1xNjvu2lmZdT6xJHhuH36NQNl
SutNA6i3DoSceL6z4XYeoau8R9Csm9uOMKuvmLzqoNBCaxPgdhImcxfweFJETg70
s8l7T3WW18WRCZ/VHq2NYBm3FjXGeJ2GaUgZY1Cy1jbaTB3BJOQjCGjysZWEgqxo
3c4Lh0zJyzHTyc1v01Jleqz+bcdg9mKeNTzeHh0xQFGdVvntA25n/Ds012/YWZzO
eNIWCQXU4jXSVkaCgGkA3SfEUHc4hCb07J9d6AmWb5xxOIfXpet2l7W+Agw=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:17:33 2025 by rpki-client