This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bef85ccc-ba58-4e51-a301-36dbc5b72fb6.roa
File: bef85ccc-ba58-4e51-a301-36dbc5b72fb6.roa (raw, json)
Hash identifier: eg03SWbptwY0WoIJaWGQIspmDwh5yYt5Z2oeWaEX3ok=
Subject key identifier: 87:D9:97:3B:A7:76:B2:61:A0:08:5C:BE:77:0B:33:7A:11:F6:DE:B7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2D98BBE7FE7D5002E08B2504C11C3E240F6914DC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bef85ccc-ba58-4e51-a301-36dbc5b72fb6.roa
Signing time: Sat 29 Nov 2025 02:00:04 +0000
ROA not before: Sat 29 Nov 2025 02:00:04 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.214.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:98:bb:e7:fe:7d:50:02:e0:8b:25:04:c1:1c:3e:24:0f:69:14:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 29 02:00:04 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=0182cfe504cf6485939e79dc43fa5abe6bac45aa6ebd58b7b7c05af914caf247, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:a7:9d:40:aa:aa:84:29:d4:28:8b:dd:61:
a1:46:71:3a:06:5a:7d:1e:1e:cc:75:b0:a5:e3:d8:
30:70:b9:c0:11:58:6b:3a:d8:b4:d0:af:e9:12:40:
4b:52:aa:00:54:8f:c8:f3:b6:cd:d7:d4:4b:57:38:
c5:c3:66:dc:da:96:c1:c7:d9:b9:62:8e:82:91:4f:
3c:d1:15:3e:8f:a4:73:b8:b6:6b:9f:44:23:81:f5:
c9:db:37:e4:9b:5b:96:1a:ac:7f:8a:1e:7c:8d:9d:
f3:c7:bb:97:33:ba:93:cd:13:c2:d4:fe:4e:f5:63:
3a:af:9d:e5:2e:54:95:25:43:31:84:3a:93:36:95:
52:2f:90:92:f7:3f:f4:23:3c:17:e6:2f:2e:0e:24:
f2:b0:ad:8a:0c:74:1f:07:51:8b:7c:1e:a9:2d:f0:
58:6c:a4:34:e3:95:46:92:6e:49:96:aa:16:82:fd:
06:f5:34:78:93:5d:1e:19:d6:2a:ee:7b:33:03:e8:
18:b2:0b:e4:eb:57:0a:17:4e:13:e0:c6:de:78:08:
84:8e:33:28:90:9d:0d:af:63:49:bf:26:ce:bc:25:
79:12:78:7e:a9:0f:f2:24:86:ae:2a:61:0f:49:66:
3c:06:64:d5:0f:ea:86:15:07:19:00:7f:23:84:45:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:97:3B:A7:76:B2:61:A0:08:5C:BE:77:0B:33:7A:11:F6:DE:B7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bef85ccc-ba58-4e51-a301-36dbc5b72fb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.214.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b3:1c:de:15:22:73:80:32:c8:13:3c:16:5d:b7:68:38:21:ef:
a4:5c:a5:68:86:e4:7d:9c:a8:a4:a4:15:fc:6a:ea:1a:f7:ef:
63:aa:46:d7:0d:c4:93:37:cd:72:71:90:d5:ab:62:0d:10:c8:
c2:d6:dd:a7:1c:3a:43:da:1d:10:69:89:5a:3b:cb:7f:86:b4:
77:19:a0:22:10:1f:a3:fa:63:70:bf:c6:35:0f:7f:f4:89:4f:
5a:51:d7:69:e2:05:93:70:ad:3e:15:3c:57:22:3f:c2:e8:f7:
f1:75:0c:83:80:11:4a:72:79:5b:22:6f:20:e9:d2:34:0e:80:
92:3a:ec:8b:49:6c:2b:99:95:92:84:3e:51:b0:a9:4b:55:94:
6d:c1:63:58:0c:fa:9e:13:86:92:ed:45:ff:2c:a5:6b:77:2c:
8b:c2:b7:36:bb:80:d3:8a:8c:22:09:48:2e:18:c7:c2:bf:84:
fe:e5:05:d0:29:ec:08:56:2f:3f:84:10:ff:2c:f8:c6:8b:fd:
b5:0f:72:33:21:04:f8:bc:ba:eb:8a:eb:ce:86:83:50:f7:78:
48:88:f3:6c:49:2c:95:47:90:72:8e:03:52:ea:81:67:e6:bb:
75:b4:cf:05:21:dd:ad:ee:0e:fa:6c:06:6e:10:b1:e6:d1:7a:
74:63:a5:f8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULZi75/59UALgiyUEwRw+JA9pFNwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTI5MDIwMDA0WhcNMjYwMjI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMTgyY2ZlNTA0Y2Y2NDg1OTM5ZTc5ZGM0M2ZhNWFiZTZi
YWM0NWFhNmViZDU4YjdiN2MwNWFmOTE0Y2FmMjQ3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZ2KedQKqqhCnUKIvdYaFGcToGWn0eHsx1sKXj2DBwucAR
WGs62LTQr+kSQEtSqgBUj8jzts3X1EtXOMXDZtzalsHH2blijoKRTzzRFT6PpHO4
tmufRCOB9cnbN+SbW5YarH+KHnyNnfPHu5czupPNE8LU/k71YzqvneUuVJUlQzGE
OpM2lVIvkJL3P/QjPBfmLy4OJPKwrYoMdB8HUYt8Hqkt8FhspDTjlUaSbkmWqhaC
/Qb1NHiTXR4Z1iruezMD6BiyC+TrVwoXThPgxt54CISOMyiQnQ2vY0m/Js68JXkS
eH6pD/Ikhq4qYQ9JZjwGZNUP6oYVBxkAfyOERWg7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUh9mXO6d2smGgCFy+dwszehH23rcwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2JlZjg1Y2NjLWJhNTgtNGU1MS1hMzAxLTM2ZGJjNWI3MmZiNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAc21oAwDQYJKoZIhvcNAQELBQADggEBALMc3hUic4AyyBM8Fl23aDgh76Rc
pWiG5H2cqKSkFfxq6hr372OqRtcNxJM3zXJxkNWrYg0QyMLW3accOkPaHRBpiVo7
y3+GtHcZoCIQH6P6Y3C/xjUPf/SJT1pR12niBZNwrT4VPFciP8Lo9/F1DIOAEUpy
eVsibyDp0jQOgJI67ItJbCuZlZKEPlGwqUtVlG3BY1gM+p4ThpLtRf8spWt3LIvC
tza7gNOKjCIJSC4Yx8K/hP7lBdAp7AhWLz+EEP8s+MaL/bUPcjMhBPi8uuuK686G
g1D3eEiI82xJLJVHkHKOA1LqgWfmu3W0zwUh3a3uDvpsBm4QsebRenRjpfg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:51:42 2025 by rpki-client