This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a99f94c-8b10-4779-851f-4ee9c8051796.roa
File: 2a99f94c-8b10-4779-851f-4ee9c8051796.roa (raw, json)
Hash identifier: vG+eZzOXmUQ+8oTWaokOE5Kvug4hm6jr/nxnza7BRac=
Subject key identifier: 4F:F7:C7:3F:11:B8:46:07:03:15:65:FC:4E:AC:03:2C:D8:7E:E6:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 35766A02B2DDCD88EDC7E2685634AB84E0F796B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a99f94c-8b10-4779-851f-4ee9c8051796.roa
Signing time: Mon 08 Dec 2025 00:40:08 +0000
ROA not before: Mon 08 Dec 2025 00:40:08 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:76:6a:02:b2:dd:cd:88:ed:c7:e2:68:56:34:ab:84:e0:f7:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 8 00:40:08 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=44e85eb00832080d61e3de86a065beceb186d0be9c7fc37f6e85cb5b6c3b145b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:25:b8:61:02:da:45:b6:ed:a8:5d:bd:c2:
c2:79:91:4e:dc:38:1c:e0:23:51:47:b1:76:ce:8e:
be:10:c1:f1:d2:dd:3d:39:be:16:ed:0a:ee:8e:cb:
d3:5a:63:19:a8:8f:52:f6:55:75:89:e1:b0:34:7a:
cf:f4:65:a8:4a:dd:4b:0a:0b:43:0e:58:b6:3f:e6:
44:5a:6d:ff:14:52:ca:fe:cf:dd:a2:21:63:25:81:
aa:e2:ed:2c:8e:f7:53:d1:1d:2e:8b:a5:2a:3b:03:
99:63:13:86:e3:72:37:73:8b:6b:b6:bd:6c:a3:bd:
20:3e:1d:09:dd:f6:fe:35:5c:eb:00:9c:ea:d8:b7:
61:43:91:62:ce:61:0c:08:4c:3c:9c:aa:78:38:1b:
45:14:d5:7e:6f:54:55:4a:87:05:90:4e:5d:0f:e6:
27:d3:76:35:7b:43:8a:d6:a8:54:19:bc:dd:67:4a:
a5:c5:09:71:14:10:79:3b:e6:c1:23:75:92:a2:b4:
7f:98:05:22:06:a4:19:df:3d:7e:da:c8:9f:48:1f:
6c:9c:2e:99:ee:3f:09:2c:26:72:ed:62:18:23:e6:
02:f2:92:d3:e5:e9:46:2b:a4:ba:4a:61:04:13:31:
5e:18:64:1b:44:ff:a8:af:d2:82:5f:f9:95:4f:b9:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:C7:3F:11:B8:46:07:03:15:65:FC:4E:AC:03:2C:D8:7E:E6:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a99f94c-8b10-4779-851f-4ee9c8051796.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:ba:88:d4:a7:ff:5b:b6:73:5a:dd:d3:ed:a1:96:20:2d:9b:
a7:d4:7f:8f:16:f6:b7:57:12:5d:d2:c3:bf:53:56:86:88:7a:
a1:f4:b3:62:d9:1f:e9:09:c1:c5:83:58:04:46:01:2a:a2:82:
f8:ce:89:a5:6e:be:09:91:e9:c3:65:88:f4:99:b2:b6:90:c6:
94:11:d3:b4:05:d9:0f:d8:36:bc:3c:27:b9:8c:f7:d0:b2:8b:
49:b0:31:ce:b5:5b:09:a0:c9:87:06:39:a1:42:0e:ea:e9:ab:
e6:84:3a:0f:af:e4:1e:2d:36:41:81:d7:68:c5:8b:1c:ff:fb:
01:58:96:f0:18:84:bd:68:c8:94:11:52:68:ec:9d:18:1f:0c:
41:f4:80:19:12:ef:ec:e4:7e:01:e5:9c:83:08:f8:b2:fd:51:
1b:4d:15:9c:9c:f3:9a:65:d0:a1:f8:a9:1e:1c:12:0e:1a:a3:
1f:ae:32:85:66:66:66:75:2e:fe:23:16:d4:92:4a:af:fd:52:
3b:c9:87:1b:52:b5:e0:89:f2:00:15:8e:19:e5:53:09:3f:4d:
5f:c6:48:b2:f0:00:08:d3:24:18:6b:4f:f1:93:c1:c5:d4:82:
56:30:21:64:51:84:88:cf:7a:ff:9f:20:9e:70:61:3d:2a:84:
e3:f1:45:c6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUNXZqArLdzYjtx+JoVjSrhOD3lrIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA4MDA0MDA4WhcNMjYwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NGU4NWViMDA4MzIwODBkNjFlM2RlODZhMDY1YmVjZWIx
ODZkMGJlOWM3ZmMzN2Y2ZTg1Y2I1YjZjM2IxNDViMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDG0iW4YQLaRbbtqF29wsJ5kU7cOBzgI1FHsXbOjr4QwfHS
3T05vhbtCu6Oy9NaYxmoj1L2VXWJ4bA0es/0ZahK3UsKC0MOWLY/5kRabf8UUsr+
z92iIWMlgari7SyO91PRHS6LpSo7A5ljE4bjcjdzi2u2vWyjvSA+HQnd9v41XOsA
nOrYt2FDkWLOYQwITDycqng4G0UU1X5vVFVKhwWQTl0P5ifTdjV7Q4rWqFQZvN1n
SqXFCXEUEHk75sEjdZKitH+YBSIGpBnfPX7ayJ9IH2ycLpnuPwksJnLtYhgj5gLy
ktPl6UYrpLpKYQQTMV4YZBtE/6iv0oJf+ZVPuQP3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUT/fHPxG4RgcDFWX8TqwDLNh+5owwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJhOTlmOTRjLThiMTAtNDc3OS04NTFmLTRlZTljODA1MTc5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCfCzANBgkqhkiG9w0BAQsFAAOCAQEAXLqI1Kf/W7ZzWt3T7aGWIC2bp9R/
jxb2t1cSXdLDv1NWhoh6ofSzYtkf6QnBxYNYBEYBKqKC+M6JpW6+CZHpw2WI9Jmy
tpDGlBHTtAXZD9g2vDwnuYz30LKLSbAxzrVbCaDJhwY5oUIO6umr5oQ6D6/kHi02
QYHXaMWLHP/7AViW8BiEvWjIlBFSaOydGB8MQfSAGRLv7OR+AeWcgwj4sv1RG00V
nJzzmmXQofipHhwSDhqjH64yhWZmZnUu/iMW1JJKr/1SO8mHG1K14InyABWOGeVT
CT9NX8ZIsvAACNMkGGtP8ZPBxdSCVjAhZFGEiM96/58gnnBhPSqE4/FFxg==
-----END CERTIFICATE-----
Generated at Mon Dec 15 16:48:29 2025 by rpki-client