This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba9dfe59-e2a2-4074-b3a7-998fd9738bd9.roa
File: ba9dfe59-e2a2-4074-b3a7-998fd9738bd9.roa (raw, json)
Hash identifier: pYqTkiE6SRLOQz0diKbJ1bNHa1Ic0//O2AGLpZnXypc=
Subject key identifier: D5:C8:BA:73:5E:57:A3:90:C0:FD:E9:6D:21:CF:D7:68:2A:F8:01:44
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 67B6B96C13E82ECFEF4A633A91B1BA03865AF922
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba9dfe59-e2a2-4074-b3a7-998fd9738bd9.roa
Signing time: Sat 29 Nov 2025 00:50:06 +0000
ROA not before: Sat 29 Nov 2025 00:50:06 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.220.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b6:b9:6c:13:e8:2e:cf:ef:4a:63:3a:91:b1:ba:03:86:5a:f9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 00:50:06 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=c93e73122b60768b9f6a23d98d79f48eb719a844b0e231e65ade36f117c1b35d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:b5:88:f0:cb:cf:8a:a6:62:47:7f:2c:67:
12:a3:b4:a2:32:24:c6:8f:a6:55:28:19:4d:75:00:
9a:c6:b4:5a:4d:3a:43:f3:d8:49:3d:8c:a1:b2:68:
70:1b:23:c9:73:ab:cf:55:7d:b5:79:64:af:50:8f:
db:32:a9:27:fe:6b:20:b3:2f:04:6b:7c:ee:43:f8:
ab:f7:95:33:f5:67:9c:7e:84:40:e2:c5:d3:ad:dd:
6f:0f:93:7b:9e:00:13:96:7d:78:5f:4a:4a:a1:db:
c3:ac:7a:50:88:4e:ff:98:43:b9:35:2d:3b:b4:83:
59:0c:65:f9:cc:b8:70:cb:e4:ee:c3:c5:52:4a:9d:
89:59:34:07:52:51:4d:85:2e:93:ab:be:1d:53:c4:
0e:fe:8e:3f:5f:59:51:35:97:65:fd:52:74:0e:16:
00:6a:c6:81:55:37:48:03:0b:d5:46:e9:97:27:ec:
63:72:0d:16:93:6e:bd:d7:6f:9f:3d:81:0e:86:3b:
c7:a7:69:d2:51:4d:97:e0:15:50:3a:fd:76:31:ab:
b4:7d:57:12:c7:ab:34:f6:48:d4:82:9f:af:2d:2c:
6f:45:65:09:21:ea:15:95:81:c3:f4:3b:7f:54:6f:
80:9f:9c:d2:90:35:4e:21:dc:95:06:c9:c9:d6:9c:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C8:BA:73:5E:57:A3:90:C0:FD:E9:6D:21:CF:D7:68:2A:F8:01:44
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba9dfe59-e2a2-4074-b3a7-998fd9738bd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.220.146.0/23
Signature Algorithm: sha256WithRSAEncryption
48:fb:6a:5d:3d:e1:32:22:de:05:38:43:86:14:d8:5a:55:36:
b5:79:96:ba:0c:4c:a3:62:38:5e:d0:3b:e9:11:80:c9:07:f8:
cb:95:ef:7b:88:8e:bc:b9:11:e8:64:3c:74:ec:81:ee:5d:61:
ce:35:c7:22:ae:c6:2f:3f:3c:f4:da:09:d7:f8:89:f2:41:2c:
62:fe:eb:e2:e4:79:e2:36:4d:b0:37:67:e6:c5:8d:f6:d8:ba:
5d:b7:93:6e:3d:94:5a:e7:53:db:85:59:12:e8:26:b9:35:47:
82:76:f1:19:08:ec:23:bc:22:00:34:c6:08:58:5f:9e:e4:7c:
b3:92:97:27:a7:e3:06:bb:af:47:af:73:42:22:d8:c3:3d:26:
23:a3:ca:dd:dd:14:58:08:ab:88:7b:a3:ad:8d:e6:4b:09:ba:
79:f0:4e:28:64:91:c1:99:01:23:4c:b6:39:5a:8a:70:66:8b:
8c:f0:de:64:73:e7:42:ed:01:ef:9f:33:50:20:66:2f:5e:c8:
d5:3d:8b:86:41:e2:a5:19:10:ad:c3:2c:82:d3:4a:01:f1:45:
5d:85:3c:f7:0b:4f:97:4e:66:68:6c:23:be:d4:51:b1:5a:dc:
a2:fe:d4:f8:04:3c:c5:d0:4a:7a:3f:bf:94:f6:3d:7d:95:a4:
39:f9:ba:d5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ7a5bBPoLs/vSmM6kbG6A4Za+SIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTI5MDA1MDA2WhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOTNlNzMxMjJiNjA3NjhiOWY2YTIzZDk4ZDc5ZjQ4ZWI3
MTlhODQ0YjBlMjMxZTY1YWRlMzZmMTE3YzFiMzVkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMO7WI8MvPiqZiR38sZxKjtKIyJMaPplUoGU11AJrGtFpN
OkPz2Ek9jKGyaHAbI8lzq89VfbV5ZK9Qj9syqSf+ayCzLwRrfO5D+Kv3lTP1Z5x+
hEDixdOt3W8Pk3ueABOWfXhfSkqh28OselCITv+YQ7k1LTu0g1kMZfnMuHDL5O7D
xVJKnYlZNAdSUU2FLpOrvh1TxA7+jj9fWVE1l2X9UnQOFgBqxoFVN0gDC9VG6Zcn
7GNyDRaTbr3Xb589gQ6GO8enadJRTZfgFVA6/XYxq7R9VxLHqzT2SNSCn68tLG9F
ZQkh6hWVgcP0O39Ub4CfnNKQNU4h3JUGycnWnEihAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1ci6c15Xo5DA/eltIc/XaCr4AUQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2JhOWRmZTU5LWUyYTItNDA3NC1iM2E3LTk5OGZkOTczOGJkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEP3JIwDQYJKoZIhvcNAQELBQADggEBAEj7al094TIi3gU4Q4YU2FpVNrV5
lroMTKNiOF7QO+kRgMkH+MuV73uIjry5EehkPHTsge5dYc41xyKuxi8/PPTaCdf4
ifJBLGL+6+LkeeI2TbA3Z+bFjfbYul23k249lFrnU9uFWRLoJrk1R4J28RkI7CO8
IgA0xghYX57kfLOSlyen4wa7r0evc0Ii2MM9JiOjyt3dFFgIq4h7o62N5ksJunnw
TihkkcGZASNMtjlainBmi4zw3mRz50LtAe+fM1AgZi9eyNU9i4ZB4qUZEK3DLILT
SgHxRV2FPPcLT5dOZmhsI77UUbFa3KL+1PgEPMXQSno/v5T2PX2VpDn5utU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:46:55 2025 by rpki-client