This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/ef566134-dc37-415a-a1e3-05f23305a92b.roa
File: ef566134-dc37-415a-a1e3-05f23305a92b.roa (raw, json)
Hash identifier: IxkqYumfiJIv0yUMD1huZkZxBm/6EVv5f6vAZAHZ3IQ=
Subject key identifier: B5:C6:7D:63:EB:71:3E:DD:E1:A3:28:7C:C8:CB:C6:19:F8:9B:2E:26
Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial: 2F453148FEB1B71B0261A52E032A4E692C429501
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/ef566134-dc37-415a-a1e3-05f23305a92b.roa
Signing time: Sat 29 Nov 2025 00:10:07 +0000
ROA not before: Sat 29 Nov 2025 00:10:07 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 7224
IP address blocks: 172.96.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:45:31:48:fe:b1:b7:1b:02:61:a5:2e:03:2a:4e:69:2c:42:95:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Validity
Not Before: Nov 29 00:10:07 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=2be28da80dc98ecc2364255ab1234053906f700ca60192d38a8e92af7c166113, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:8c:f8:4a:13:7c:c7:f0:f2:4c:e7:9c:3d:
1d:66:90:52:f2:a1:2d:08:d0:65:9e:d0:a2:e6:b3:
00:c6:13:54:cd:93:6f:25:c1:bd:1f:b1:cd:7a:d7:
c0:2d:a7:f8:e4:2d:86:f9:4c:64:0f:69:03:46:00:
25:e4:df:16:c8:11:cc:33:9f:4a:37:05:ec:f1:9e:
68:ca:ed:00:fb:09:b5:7b:11:a2:c1:27:ef:bd:06:
ea:74:6d:12:ef:7c:0e:ff:3b:74:55:d1:f1:0f:29:
02:7c:69:97:5a:ab:a0:30:d4:bb:6f:8d:9e:da:8c:
37:22:dc:73:5c:79:c3:3b:1f:f4:33:3f:e2:2a:86:
a3:a7:31:41:53:d0:8f:e2:82:46:31:d9:24:5c:30:
7b:28:0a:04:ed:95:37:7d:f6:c1:69:9d:cd:b2:14:
89:4b:d3:d2:39:95:5c:91:6a:18:fc:e2:f3:cc:bb:
17:e5:59:25:5e:61:a4:a9:b7:48:5d:e0:38:7e:33:
e0:d3:a7:47:26:71:cc:57:a0:9d:5f:a9:60:1e:7a:
a8:b5:61:ce:8d:9e:08:d7:2c:eb:64:0f:7d:ec:2a:
5e:96:80:c4:e2:5e:1c:18:b3:bf:82:84:f1:cf:c5:
98:c0:a5:6a:2c:94:a5:d1:99:53:22:e8:cf:35:99:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C6:7D:63:EB:71:3E:DD:E1:A3:28:7C:C8:CB:C6:19:F8:9B:2E:26
X509v3 Authority Key Identifier:
keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/ef566134-dc37-415a-a1e3-05f23305a92b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.96.104.0/21
Signature Algorithm: sha256WithRSAEncryption
62:b5:5f:41:e3:b2:67:7b:48:90:98:2f:49:20:96:db:23:c3:
ee:3b:8e:3a:f1:e8:03:12:a7:fe:ed:81:af:f2:22:08:5c:e9:
bf:41:9f:8c:60:e5:a4:75:3b:34:6b:b8:77:15:01:82:22:03:
6d:0b:bc:7f:60:98:37:08:e8:6d:fd:be:31:cb:89:53:d1:40:
97:1e:13:5f:0f:9c:d2:b0:ed:df:0f:48:c2:f7:bf:b9:5a:0d:
a7:a0:c1:97:ba:cb:b2:fd:de:d1:b4:7b:6a:c3:75:af:9b:fd:
a1:0a:05:24:3a:57:ed:fb:1e:af:15:e6:06:dd:80:97:d1:70:
fd:c0:96:91:16:68:1b:03:77:1f:83:aa:5f:a3:9d:59:72:8c:
24:1b:72:27:da:b5:cb:c2:40:ce:1a:0a:f5:e6:26:28:27:63:
02:7b:15:3d:7e:00:e3:53:8c:48:62:07:7e:01:7b:eb:a6:08:
0d:40:64:12:91:f0:90:80:d1:3f:50:d5:6c:c0:66:99:24:01:
d4:0a:6f:80:0e:70:4a:70:a2:02:b7:0c:6a:64:16:ea:fc:52:
d4:a3:db:6f:a4:f1:93:08:c3:e3:a2:c8:c3:ee:70:35:44:ae:
04:e1:28:ac:5c:49:75:ce:66:40:36:fc:af:88:e2:74:5e:7a:
ae:2e:e0:eb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUL0UxSP6xtxsCYaUuAypOaSxClQEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi
NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUxMTI5MDAxMDA3WhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyYmUyOGRhODBkYzk4ZWNjMjM2NDI1NWFiMTIzNDA1Mzkw
NmY3MDBjYTYwMTkyZDM4YThlOTJhZjdjMTY2MTEzMS0wKwYDVQQDEyRiMGRiYmI2
YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAf4z4ShN8x/DyTOecPR1mkFLyoS0I0GWe0KLmswDGE1TN
k28lwb0fsc1618Atp/jkLYb5TGQPaQNGACXk3xbIEcwzn0o3BezxnmjK7QD7CbV7
EaLBJ++9Bup0bRLvfA7/O3RV0fEPKQJ8aZdaq6Aw1LtvjZ7ajDci3HNcecM7H/Qz
P+IqhqOnMUFT0I/igkYx2SRcMHsoCgTtlTd99sFpnc2yFIlL09I5lVyRahj84vPM
uxflWSVeYaSpt0hd4Dh+M+DTp0cmccxXoJ1fqWAeeqi1Yc6NngjXLOtkD33sKl6W
gMTiXhwYs7+ChPHPxZjApWoslKXRmVMi6M81mYVjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtcZ9Y+txPt3hoyh8yMvGGfibLiYwHwYDVR0jBBgwFoAUfYRHxJeKC0xz
m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z
NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi
ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1
MmM1MzUzODk4L2VmNTY2MTM0LWRjMzctNDE1YS1hMWUzLTA1ZjIzMzA1YTkyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3
LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAOsYGgwDQYJKoZIhvcNAQELBQADggEBAGK1X0Hjsmd7SJCYL0kgltsjw+47
jjrx6AMSp/7tga/yIghc6b9Bn4xg5aR1OzRruHcVAYIiA20LvH9gmDcI6G39vjHL
iVPRQJceE18PnNKw7d8PSML3v7laDaegwZe6y7L93tG0e2rDda+b/aEKBSQ6V+37
Hq8V5gbdgJfRcP3AlpEWaBsDdx+Dql+jnVlyjCQbcifatcvCQM4aCvXmJignYwJ7
FT1+AONTjEhiB34Be+umCA1AZBKR8JCA0T9Q1WzAZpkkAdQKb4AOcEpwogK3DGpk
Fur8UtSj22+k8ZMIw+OiyMPucDVErgThKKxcSXXOZkA2/K+I4nReeq4u4Os=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:05:54 2025 by rpki-client