This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa
File: c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa (raw, json)
Hash identifier: oNXIk2vF3PivuF7ATwm2cP/9T+C+g01AfDFhvDp0OhI=
Subject key identifier: 85:6A:5D:98:5D:EB:3B:5A:EE:88:3B:FD:37:1A:17:57:A8:66:09:D1
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4449646D4CFF33D983C1405EEA10253C5A9540F9
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa
Signing time: Sun 23 Nov 2025 00:30:21 +0000
ROA not before: Sun 23 Nov 2025 00:30:21 +0000
ROA not after: Sat 21 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:49:64:6d:4c:ff:33:d9:83:c1:40:5e:ea:10:25:3c:5a:95:40:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Nov 23 00:30:21 2025 GMT
Not After : Feb 21 23:59:59 2026 GMT
Subject: serialNumber=550604c0cdab08e8ba893adcd52cc3356c38335190ad10eead215f6d8de4ffcb, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8b:cf:f3:f7:0d:5c:a6:43:5c:27:be:37:68:
52:ed:01:64:08:fb:8c:a6:5c:c1:14:5b:d9:e4:8b:
69:f0:7c:d4:54:a4:58:e9:fe:4e:36:a1:43:2d:05:
0c:3e:3a:dd:6a:aa:98:2f:f7:c6:dc:fe:69:ea:e5:
78:99:3b:50:4c:fa:ec:67:2c:33:60:ef:5e:15:d5:
d9:80:c7:aa:e2:a1:07:0e:29:16:14:81:b0:10:00:
f4:5e:43:10:d5:bf:02:3c:99:fc:31:41:98:c4:ff:
79:85:1a:7d:7d:62:b0:d2:25:07:a6:61:66:0c:5b:
84:69:8d:b3:7f:7e:d0:db:d5:59:11:24:8d:45:43:
d2:78:39:9c:de:63:b2:5e:fd:b3:e4:9a:7b:6c:3d:
38:89:0b:3f:a2:63:4e:23:6d:6c:9f:6b:97:1e:6c:
6f:24:1b:d1:18:82:7f:f0:fa:17:67:58:0f:54:d3:
94:b5:8d:8f:d0:7e:55:ec:4f:4b:d7:5f:b7:3c:8a:
13:33:b5:7a:35:d9:20:1b:5c:0a:7f:7e:09:2b:b3:
24:4c:fe:d2:91:a8:fd:66:c0:e8:18:3d:ee:b4:db:
84:c5:e0:d4:36:40:b0:59:b0:64:ea:f4:5f:a5:e5:
40:4f:d7:c8:38:07:3d:76:bc:08:ed:0b:51:94:e9:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:5D:98:5D:EB:3B:5A:EE:88:3B:FD:37:1A:17:57:A8:66:09:D1
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c09e0f25-1200-46ec-b6a7-aa4a9764d8c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.215.0/24
Signature Algorithm: sha256WithRSAEncryption
36:71:fa:8e:8a:85:ee:ba:a0:5f:bf:78:52:23:21:3c:a5:3f:
26:81:fc:95:66:67:c4:77:d4:63:3a:13:49:aa:54:95:da:2e:
81:01:e2:3e:80:8b:da:11:c4:1a:62:07:0f:77:9f:ee:96:e8:
1e:c0:af:d7:92:0f:0b:eb:d7:ba:59:f2:8d:d2:e5:3c:40:3c:
c4:db:37:d8:35:b8:c3:9f:0e:a3:9a:71:0c:5e:f4:0f:80:6f:
16:a9:c1:8c:1b:77:8d:8e:84:a4:07:3a:95:ac:ad:41:ed:7b:
6b:7a:9d:6e:e5:64:b2:bc:e5:8b:c8:f1:c0:a2:8f:2e:19:2d:
03:4f:61:71:6d:11:d2:68:83:30:55:59:bd:df:91:d9:63:35:
f7:fb:c2:ea:43:67:b2:8b:03:62:9a:f0:c8:71:73:c9:76:33:
85:88:0e:24:04:59:18:db:d5:36:24:7a:e2:29:49:27:b2:6a:
cc:a5:bf:ef:a0:90:1f:e2:4a:8a:ed:da:27:7e:4a:4c:63:ca:
70:05:3f:9a:e2:ab:6d:49:78:3f:d1:0b:e6:85:4f:d4:f4:4c:
ad:27:9d:ec:6b:58:93:dc:55:35:24:07:f8:f3:20:20:62:6a:
82:c5:7d:b3:8d:63:aa:9e:7b:df:f8:8d:50:f5:6d:39:39:a0:
03:0b:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:27:17 2025 by rpki-client