This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
File: b59643bf-eb80-414a-aca0-653646d46e07.roa (raw, json)
Hash identifier: HruoKwm2MebBcuxgfxKGjHe8fY/L9B8RX03lWkGBCw8=
Subject key identifier: 69:65:21:7A:34:42:2A:82:6F:C2:A7:6C:8A:06:B0:16:FF:33:80:D2
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 16FEB0D0D699834EAA93715FF9E71919727E0AF4
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
Signing time: Wed 12 Nov 2025 00:00:43 +0000
ROA not before: Wed 12 Nov 2025 00:00:43 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 199.127.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fe:b0:d0:d6:99:83:4e:aa:93:71:5f:f9:e7:19:19:72:7e:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Nov 12 00:00:43 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=9765c3eb792f3404bb77af59a6293a43b0b996c79c42b69a71133dfba1cbf86f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:2c:b7:f6:f3:4f:10:13:51:0b:31:b6:b2:
fa:f8:ac:33:bc:74:90:49:c2:6a:b1:de:90:b6:f4:
b8:db:f2:96:aa:5e:dc:58:f6:14:a5:eb:df:cb:b4:
17:f1:79:f3:99:27:0d:50:2c:d3:f3:f4:70:fa:f8:
f8:78:7c:00:81:e8:67:6f:a1:08:dd:3c:17:90:07:
35:69:49:bb:c7:10:32:b4:fe:50:1c:4e:6d:6e:c4:
3b:55:b5:aa:61:66:05:70:61:af:a1:97:8c:d4:50:
43:76:a5:1c:11:d2:20:76:36:56:7d:93:b2:89:33:
79:ab:61:aa:c7:c0:81:ca:1a:25:7e:cf:60:28:2b:
e2:d9:27:fd:72:6d:b9:32:8c:f4:25:26:19:2b:87:
fd:4a:70:02:c5:6c:3a:fa:63:8c:1a:7b:2c:2a:05:
be:67:da:b6:0a:26:80:bc:cf:46:08:03:1d:3c:f8:
e7:f2:84:cb:31:39:af:b4:b8:f7:f7:f4:4e:1a:dc:
db:ee:5f:cd:b1:c3:af:67:03:d8:c1:58:89:54:52:
89:9f:35:0d:d1:5c:f7:92:aa:4d:5f:88:de:fd:d0:
ce:17:6f:e8:69:d4:10:9d:58:f1:30:aa:7c:94:9d:
26:27:3b:1e:e2:5a:f9:96:81:c8:f6:05:c9:43:14:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:21:7A:34:42:2A:82:6F:C2:A7:6C:8A:06:B0:16:FF:33:80:D2
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.127.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:e5:c2:85:ed:d5:98:0c:25:64:54:3c:b6:46:9a:8f:35:08:
b2:f7:77:84:b2:56:b4:69:9b:e3:8b:1c:04:49:28:27:d3:8d:
c0:46:84:3a:1d:02:1f:9e:42:0c:ac:0b:f3:c2:88:74:60:8d:
5c:73:dd:19:39:2b:79:ee:aa:ec:e4:33:0d:0e:db:4c:78:ec:
f2:0b:59:96:f5:15:80:b3:ae:37:af:a0:59:94:0a:d2:9e:d2:
91:56:db:71:c5:b7:8a:7a:db:7b:15:42:7d:36:9c:c4:17:f4:
8f:b3:4d:de:a6:64:8a:80:db:39:97:e1:ef:1e:8b:27:ba:4e:
84:f2:34:9d:a2:ad:f6:49:ef:65:de:7b:1d:86:1d:83:0d:79:
6b:bb:cc:33:39:d5:92:f8:77:04:d9:a0:a5:2f:46:ae:bb:a8:
5a:e4:9d:34:01:b2:44:21:10:70:80:10:64:c1:dd:41:5d:bb:
7f:41:0c:c7:b1:c7:4e:b1:2f:92:48:ff:78:f6:dd:ca:e1:1e:
c3:fe:fe:e1:82:98:fc:7e:b4:55:2d:f8:fa:d2:72:93:2c:12:
8f:fb:fa:4e:a6:a7:85:96:a1:dd:17:dc:38:df:bd:4d:43:e3:
64:36:a9:d3:7e:f9:8d:d1:a3:7d:57:fa:28:65:c0:c3:be:08:
20:f3:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:31:36 2025 by rpki-client