This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa
File: b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa (raw, json)
Hash identifier: i7kggd6koLSGp1R8IU/WQV8Z9peEMt2+OqL8tZXexDw=
Subject key identifier: 35:07:FF:2D:E9:32:1D:28:48:B5:6A:22:1E:35:F2:60:19:F5:16:68
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 63D3ADD0F88C5679A45631E86A59D8F3BAAFE38C
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa
Signing time: Sun 23 Nov 2025 00:20:09 +0000
ROA not before: Sun 23 Nov 2025 00:20:09 +0000
ROA not after: Sat 21 Feb 2026 23:59:59 +0000
asID: 14618
IP address blocks: 23.251.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d3:ad:d0:f8:8c:56:79:a4:56:31:e8:6a:59:d8:f3:ba:af:e3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Nov 23 00:20:09 2025 GMT
Not After : Feb 21 23:59:59 2026 GMT
Subject: serialNumber=2acaf01ca2aeb33610f408ef916666bf6a76a1b3edd9204c30040325db9f22ec, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:28:ea:7f:1e:ef:60:d3:b4:b4:24:60:6b:
3c:9d:54:a6:f3:f6:f0:e8:25:72:8e:91:58:fa:4b:
94:a2:ed:3d:75:ef:31:dc:f1:ff:4e:72:3c:02:a2:
db:b7:0d:76:96:ae:12:01:aa:af:7c:d6:6e:4c:ec:
a9:72:09:6f:57:bd:26:69:d8:e5:6d:32:00:d2:a3:
22:e9:64:65:cb:14:95:8d:64:68:f7:4d:92:cc:bb:
6a:a6:47:a3:9d:a4:dc:dc:3f:05:c8:4e:0c:9f:0e:
da:62:27:f9:ab:85:3f:4a:f1:1a:7b:71:2a:2b:11:
ee:c5:67:45:a4:c3:3b:a9:ba:f7:1a:69:d6:6f:04:
5a:a8:73:8a:8b:25:a3:42:46:f0:a0:0b:17:ba:7e:
40:86:7f:43:04:85:43:79:98:50:34:13:a9:e3:b0:
b4:6f:91:ac:1c:cf:31:0f:6e:63:c3:ea:43:59:e9:
10:79:5b:f1:a6:ed:f9:8a:93:5a:32:9c:3b:3e:4e:
ea:0f:18:7c:60:63:80:ed:57:72:ea:f8:2b:4e:67:
c6:4b:7f:e6:49:ad:78:0c:05:03:69:a5:a4:f7:d7:
88:c4:61:e1:fa:b8:2e:82:17:56:43:2a:d3:72:4c:
bb:ea:ae:03:20:de:3c:28:a0:cb:09:78:5d:c7:b0:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:07:FF:2D:E9:32:1D:28:48:B5:6A:22:1E:35:F2:60:19:F5:16:68
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.228.0/22
Signature Algorithm: sha256WithRSAEncryption
85:8e:1e:60:70:bf:92:66:00:b7:e4:02:0d:5a:82:24:fb:2e:
58:c8:d6:c8:14:44:af:e7:94:cb:5d:7b:ff:46:0b:6a:8a:2f:
cb:ad:4d:f5:a2:a7:25:c0:a1:55:a5:b4:a1:ac:56:52:5b:c7:
ad:18:64:3f:85:16:67:5f:af:e6:8a:d5:cf:f1:70:3a:4a:5b:
b4:8f:0b:b2:a7:91:46:44:38:c1:13:ab:d0:9a:b4:87:68:06:
a5:5a:08:50:73:c1:8f:6e:ec:8a:a8:91:5a:17:c6:1d:98:28:
b3:d1:b5:78:6a:a4:51:fc:39:9f:d0:2c:fd:1b:e2:3c:56:e7:
08:94:72:61:9b:b9:0a:ce:4e:76:d8:ce:0e:46:a7:d2:86:17:
01:84:79:2e:72:b9:e7:55:7b:1d:d8:39:2b:2f:62:92:29:f4:
e2:1a:91:db:23:c9:d4:94:28:89:ed:5b:10:e2:71:7a:ee:d8:
5e:bc:cd:6d:8a:f3:c0:50:63:f7:a0:49:26:83:bf:dc:58:ea:
e6:01:5d:10:ce:fa:38:50:58:09:d1:10:c5:e8:45:4a:38:26:
b6:42:68:9e:72:52:2f:6c:ef:ad:40:41:8d:7f:63:34:e4:c2:
74:f0:38:a4:bb:52:2c:44:40:2a:f0:41:ba:80:5a:6b:ef:eb:
5a:55:d4:a9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUY9Ot0PiMVnmkVjHoalnY87qv44wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTIzMDAyMDA5WhcNMjYwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYWNhZjAxY2EyYWViMzM2MTBmNDA4ZWY5MTY2NjZiZjZh
NzZhMWIzZWRkOTIwNGMzMDA0MDMyNWRiOWYyMmVjMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw0yjqfx7vYNO0tCRgazydVKbz9vDoJXKOkVj6S5Si7T11
7zHc8f9OcjwCotu3DXaWrhIBqq981m5M7KlyCW9XvSZp2OVtMgDSoyLpZGXLFJWN
ZGj3TZLMu2qmR6OdpNzcPwXITgyfDtpiJ/mrhT9K8Rp7cSorEe7FZ0Wkwzupuvca
adZvBFqoc4qLJaNCRvCgCxe6fkCGf0MEhUN5mFA0E6njsLRvkawczzEPbmPD6kNZ
6RB5W/Gm7fmKk1oynDs+TuoPGHxgY4DtV3Lq+CtOZ8ZLf+ZJrXgMBQNppaT314jE
YeH6uC6CF1ZDKtNyTLvqrgMg3jwooMsJeF3HsAOXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNQf/LekyHShItWoiHjXyYBn1FmgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2I2ZWU5M2Q4LWQ3YTctNDFhZC04ZGUxLTkwYTA1NWJjMTk3Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBAIWOHmBwv5JmALfkAg1agiT7LljI
1sgURK/nlMtde/9GC2qKL8utTfWipyXAoVWltKGsVlJbx60YZD+FFmdfr+aK1c/x
cDpKW7SPC7KnkUZEOMETq9CatIdoBqVaCFBzwY9u7IqokVoXxh2YKLPRtXhqpFH8
OZ/QLP0b4jxW5wiUcmGbuQrOTnbYzg5Gp9KGFwGEeS5yuedVex3YOSsvYpIp9OIa
kdsjydSUKIntWxDicXru2F68zW2K88BQY/egSSaDv9xY6uYBXRDO+jhQWAnREMXo
RUo4JrZCaJ5yUi9s761AQY1/YzTkwnTwOKS7UixEQCrwQbqAWmvv61pV1Kk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:02:34 2025 by rpki-client