This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa
File: b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa (raw, json)
Hash identifier: Kiq9Gw1mYspuhUo39WgnMkzaoqkUWZV8rR0lGcFHmK4=
Subject key identifier: 91:AF:30:8E:7F:69:D4:85:E4:23:C6:3F:AC:6C:CC:73:61:8F:54:29
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 62883EAE40919F97D42F063681023004FF5B2FC7
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa
Signing time: Sun 23 Nov 2025 00:30:25 +0000
ROA not before: Sun 23 Nov 2025 00:30:25 +0000
ROA not after: Sat 21 Feb 2026 23:59:59 +0000
asID: 14618
IP address blocks: 23.251.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:88:3e:ae:40:91:9f:97:d4:2f:06:36:81:02:30:04:ff:5b:2f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Nov 23 00:30:25 2025 GMT
Not After : Feb 21 23:59:59 2026 GMT
Subject: serialNumber=4742f5c4cbffa6846892450fa14151dda96d2b98b4611d03d2c0cd43828f8bea, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:72:f6:51:bf:79:cd:04:b1:22:ea:31:33:
02:20:07:5f:29:96:e1:e2:99:81:3e:03:11:f7:ed:
2d:72:b7:eb:eb:52:5e:96:1d:69:ad:ab:b3:30:e7:
47:3d:0c:ce:38:09:60:06:65:42:0e:7a:cf:bc:0d:
3c:01:dc:74:96:99:26:9a:bf:9d:f2:49:9b:37:d9:
0f:1f:18:cc:4d:2d:24:9e:e3:3f:af:4a:ca:8f:84:
e3:88:5a:3d:d7:51:1d:02:31:46:8f:96:f2:c0:d3:
c0:43:64:e8:ad:ce:98:3b:6d:cb:e6:a5:72:04:48:
3b:d4:dd:e6:b9:f7:7e:2b:16:47:00:bb:ba:38:89:
66:0c:25:79:28:4e:fc:ad:d1:a4:83:65:3d:f8:a2:
9d:26:a0:c6:3c:19:70:c2:a8:97:26:a0:11:69:f8:
54:41:4d:4a:fd:3a:8f:4c:7d:f9:88:a4:58:4c:d6:
d3:ae:16:31:f8:5c:ad:cd:d2:3f:06:78:5c:15:fe:
a6:ce:07:42:fc:c3:85:3f:3b:56:27:36:a6:ff:9a:
6a:e7:ef:8b:b7:6e:7f:f1:2f:53:58:d9:12:08:88:
c0:39:f3:b8:27:d9:5e:99:96:7e:ef:c5:a1:f5:38:
da:5e:b1:70:53:cd:7c:06:89:bd:22:6f:05:f1:d0:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AF:30:8E:7F:69:D4:85:E4:23:C6:3F:AC:6C:CC:73:61:8F:54:29
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:b3:13:0a:29:d5:70:3a:0c:8a:59:46:a3:2c:6a:5d:50:75:
af:59:7f:0c:ec:0f:4d:02:c2:46:8a:52:29:d5:c8:60:1e:a0:
12:0c:aa:0f:da:49:1b:6c:99:4e:fa:12:ae:db:cc:41:a9:66:
0e:72:31:4e:a1:8a:d7:a3:6c:ad:e1:d7:e2:36:d6:72:3a:24:
73:36:d1:ba:f8:da:0c:01:6d:de:09:5d:8a:76:84:fb:f2:97:
b6:a7:f6:c1:bc:e6:bf:b2:38:a1:a5:c2:df:98:7d:b9:bd:c1:
e7:60:52:40:bc:31:4e:28:71:6b:4d:52:59:ca:d1:df:1b:4c:
be:b4:f6:e3:49:e1:df:6c:64:d7:45:ea:75:a2:33:98:42:97:
9c:0b:95:06:ba:6d:38:e9:80:8f:ae:32:91:35:57:e2:ef:64:
8f:55:87:42:34:d7:ef:e0:63:8e:ff:e8:86:09:61:a3:78:92:
cc:ce:05:8d:ee:17:2d:8b:60:48:5c:03:3d:16:7c:37:22:23:
4c:55:6f:c1:f6:a5:92:93:66:4e:ce:f0:bc:8b:07:bd:cf:f0:
d6:e8:c6:e7:58:60:9c:5b:51:33:e0:d1:04:f7:98:a4:c9:de:
a4:39:50:60:c8:39:af:14:75:b8:4d:44:6f:bd:2a:07:d4:d0:
ae:b1:61:3e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYog+rkCRn5fULwY2gQIwBP9bL8cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTIzMDAzMDI1WhcNMjYwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NzQyZjVjNGNiZmZhNjg0Njg5MjQ1MGZhMTQxNTFkZGE5
NmQyYjk4YjQ2MTFkMDNkMmMwY2Q0MzgyOGY4YmVhMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWNHL2Ub95zQSxIuoxMwIgB18pluHimYE+AxH37S1yt+vr
Ul6WHWmtq7Mw50c9DM44CWAGZUIOes+8DTwB3HSWmSaav53ySZs32Q8fGMxNLSSe
4z+vSsqPhOOIWj3XUR0CMUaPlvLA08BDZOitzpg7bcvmpXIESDvU3ea5934rFkcA
u7o4iWYMJXkoTvyt0aSDZT34op0moMY8GXDCqJcmoBFp+FRBTUr9Oo9MffmIpFhM
1tOuFjH4XK3N0j8GeFwV/qbOB0L8w4U/O1YnNqb/mmrn74u3bn/xL1NY2RIIiMA5
87gn2V6Zln7vxaH1ONpesXBTzXwGib0ibwXx0A65AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUka8wjn9p1IXkI8Y/rGzMc2GPVCkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2I1Y2M4NWI2LWZkYzEtNGE4Zi1iMjY2LTYxMWQ3N2NlYmY1YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIX+/wwDQYJKoZIhvcNAQELBQADggEBAGuzEwop1XA6DIpZRqMsal1Qda9Z
fwzsD00CwkaKUinVyGAeoBIMqg/aSRtsmU76Eq7bzEGpZg5yMU6hitejbK3h1+I2
1nI6JHM20br42gwBbd4JXYp2hPvyl7an9sG85r+yOKGlwt+Yfbm9wedgUkC8MU4o
cWtNUlnK0d8bTL609uNJ4d9sZNdF6nWiM5hCl5wLlQa6bTjpgI+uMpE1V+LvZI9V
h0I01+/gY47/6IYJYaN4kszOBY3uFy2LYEhcAz0WfDciI0xVb8H2pZKTZk7O8LyL
B73P8NboxudYYJxbUTPg0QT3mKTJ3qQ5UGDIOa8UdbhNRG+9KgfU0K6xYT4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:48:42 2025 by rpki-client