This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba83e183-0a04-4e8a-b5ec-f97dc99ec644.roa
File: ba83e183-0a04-4e8a-b5ec-f97dc99ec644.roa (raw, json)
Hash identifier: iLHlEi9YZLFfuB3Cxjz4uRprA4BfL49GbztvmHoVre8=
Subject key identifier: 02:5B:57:B1:A4:CD:11:27:A6:84:64:B2:83:3D:18:DC:EF:91:CE:F5
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3394C9B96334F606621F87D8E2C5BD04D3B8C767
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba83e183-0a04-4e8a-b5ec-f97dc99ec644.roa
Signing time: Sat 15 Nov 2025 02:30:13 +0000
ROA not before: Sat 15 Nov 2025 02:30:13 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:94:c9:b9:63:34:f6:06:62:1f:87:d8:e2:c5:bd:04:d3:b8:c7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 15 02:30:13 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=0df0ecf2e58de2ad5259e6acaf3fee0d3940b994623f9788d19f9eddf680cd98, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:6a:e1:10:b7:b5:d9:b3:75:64:1b:5e:55:
36:88:34:f3:d2:bd:4e:b0:1e:bc:bb:0a:3d:5a:bc:
58:71:4d:42:f7:d2:39:db:e8:f8:fa:b9:e6:a6:9d:
50:22:8b:2e:cb:85:1a:81:ef:f4:c6:a3:89:80:0d:
95:6e:e6:20:3b:72:a1:3f:a5:68:b8:c3:a7:18:e7:
4e:63:f8:09:2b:54:69:14:a1:94:ab:fc:bc:09:25:
56:9e:8b:50:00:a5:11:63:eb:63:ac:86:ce:4e:0d:
74:55:c9:e7:46:c1:0c:b9:8b:a5:42:6c:12:26:de:
65:38:91:a2:73:0e:03:9e:07:1f:ad:d1:a2:24:35:
1e:00:bc:42:a2:0b:c2:7d:f7:d1:ad:94:85:68:a5:
d5:48:cb:ec:ef:4f:77:74:c9:94:cc:d9:ec:b7:22:
7b:7a:9f:0d:68:0d:2d:89:9b:5b:b9:04:eb:67:d9:
ad:0b:33:6b:43:6c:00:b0:9f:93:de:9b:02:9d:f4:
b4:97:07:5f:12:a5:28:08:d6:a4:9d:06:2b:1e:7e:
46:c0:a3:53:9f:2e:5c:4d:73:60:54:7c:a6:69:cd:
f1:5f:1f:a8:35:1a:88:f3:f9:e5:7c:89:da:be:25:
8a:6c:c9:82:fc:b1:43:1b:dd:15:35:96:09:5e:d0:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:57:B1:A4:CD:11:27:A6:84:64:B2:83:3D:18:DC:EF:91:CE:F5
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba83e183-0a04-4e8a-b5ec-f97dc99ec644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.108.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:f4:e5:5c:46:ce:88:5e:c9:65:2b:cf:f0:b1:fe:7e:35:b3:
9c:1d:94:49:72:29:4e:91:99:9f:38:2a:ce:0a:08:6a:d7:e0:
23:e9:f6:f0:63:b2:be:13:1c:d9:7f:6e:35:40:33:99:e6:24:
14:76:34:c9:29:da:47:17:20:2b:22:96:d8:94:14:0e:f4:f5:
42:e3:ba:80:c3:0d:2a:3f:08:08:eb:03:05:09:29:7e:c3:cb:
c4:0d:cb:71:eb:b4:00:32:e9:b2:dd:4f:cd:7c:8d:f2:96:ef:
3a:fb:d1:7a:21:b2:3c:46:8a:dd:1f:65:cc:f7:0e:01:8d:c6:
91:4c:38:f0:93:db:6a:2e:01:5f:1f:8e:71:c2:0a:34:16:60:
15:de:6f:cf:fa:e7:62:00:6e:fd:0d:ab:c3:06:61:f7:af:97:
cf:25:cf:78:28:59:4d:06:98:4d:8b:7b:2e:7d:d1:5b:b4:ed:
55:91:0b:4f:7a:da:b3:92:f9:eb:fe:00:77:ec:9b:96:2b:7d:
b3:af:0b:cc:da:ab:ae:62:a6:7c:df:4b:f9:a2:91:b5:9b:89:
61:b3:5d:44:52:d4:a3:a0:ed:0e:0a:62:c0:71:22:aa:1b:e0:
5b:8d:6f:7e:73:30:c0:34:78:19:7f:d5:c5:92:0b:89:a4:07:
8d:28:b8:37
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM5TJuWM09gZiH4fY4sW9BNO4x2cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE1MDIzMDEzWhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZGYwZWNmMmU1OGRlMmFkNTI1OWU2YWNhZjNmZWUwZDM5
NDBiOTk0NjIzZjk3ODhkMTlmOWVkZGY2ODBjZDk4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfmGrhELe12bN1ZBteVTaINPPSvU6wHry7Cj1avFhxTUL3
0jnb6Pj6ueamnVAiiy7LhRqB7/TGo4mADZVu5iA7cqE/pWi4w6cY505j+AkrVGkU
oZSr/LwJJVaei1AApRFj62Oshs5ODXRVyedGwQy5i6VCbBIm3mU4kaJzDgOeBx+t
0aIkNR4AvEKiC8J999GtlIVopdVIy+zvT3d0yZTM2ey3Int6nw1oDS2Jm1u5BOtn
2a0LM2tDbACwn5PemwKd9LSXB18SpSgI1qSdBisefkbAo1OfLlxNc2BUfKZpzfFf
H6g1Gojz+eV8idq+JYpsyYL8sUMb3RU1lgle0EBHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAltXsaTNESemhGSygz0Y3O+RzvUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2JhODNlMTgzLTBhMDQtNGU4YS1iNWVjLWY5N2RjOTllYzY0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAE0X2wwDQYJKoZIhvcNAQELBQADggEBAEv05VxGzoheyWUrz/Cx/n41s5wd
lElyKU6RmZ84Ks4KCGrX4CPp9vBjsr4THNl/bjVAM5nmJBR2NMkp2kcXICsiltiU
FA709ULjuoDDDSo/CAjrAwUJKX7Dy8QNy3HrtAAy6bLdT818jfKW7zr70XohsjxG
it0fZcz3DgGNxpFMOPCT22ouAV8fjnHCCjQWYBXeb8/652IAbv0Nq8MGYfevl88l
z3goWU0GmE2Ley590Vu07VWRC0962rOS+ev+AHfsm5YrfbOvC8zaq65ipnzfS/mi
kbWbiWGzXURS1KOg7Q4KYsBxIqob4FuNb35zMMA0eBl/1cWSC4mkB40ouDc=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:51:59 2025 by rpki-client