This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f26a4b-62f1-40da-8ebc-27801bd5f757.roa
File: 40f26a4b-62f1-40da-8ebc-27801bd5f757.roa (raw, json)
Hash identifier: +jLKZKUD/EMsUfFtp3Rdg0XD9EoxQghEfD8mXR59wx0=
Subject key identifier: A4:D2:B1:05:FF:5A:27:CF:8B:70:A3:1B:50:06:26:90:BB:AD:CD:53
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2AC7E42F6662FFC5ACC439043256382F35DE511B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f26a4b-62f1-40da-8ebc-27801bd5f757.roa
Signing time: Thu 20 Nov 2025 00:40:08 +0000
ROA not before: Thu 20 Nov 2025 00:40:08 +0000
ROA not after: Wed 18 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.95.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c7:e4:2f:66:62:ff:c5:ac:c4:39:04:32:56:38:2f:35:de:51:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 20 00:40:08 2025 GMT
Not After : Feb 18 23:59:59 2026 GMT
Subject: serialNumber=59989ccd62d1496c997d3f43c48b331ae9da3ed942a6c01134cf618824a71981, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9a:c4:eb:c4:81:df:cd:fc:ab:28:5a:7c:9a:
04:96:a4:ff:ec:cf:0a:7c:16:49:7a:72:6d:ca:86:
a6:2e:d8:95:d2:eb:ef:f8:d0:37:d3:42:35:f2:aa:
dd:1c:1d:3a:28:bb:35:9a:97:af:c6:4f:b2:90:36:
69:ac:2e:a1:8d:c1:e3:6c:ec:be:79:89:5c:8a:42:
27:b0:b4:2b:b8:91:01:c1:d6:6c:80:50:17:60:9e:
fe:54:c8:a2:cb:5a:cc:e2:fc:8c:8f:bc:71:42:fa:
b0:7b:08:45:bf:73:c7:58:91:44:c9:ff:a3:72:c6:
19:c3:05:92:af:72:da:84:6c:61:ee:a7:1c:81:20:
82:4d:f3:b1:4f:95:f8:83:20:cb:16:f6:23:ae:73:
0e:43:20:ad:35:49:61:eb:fb:82:79:8b:54:45:e9:
17:5f:bd:f3:66:6d:d2:5d:1e:6a:76:3d:ff:22:16:
7f:0a:20:0b:5f:10:fc:80:48:c8:d9:fe:7d:52:49:
e5:2a:e1:a6:67:7d:bc:6e:71:2b:f7:f5:ba:2f:57:
10:1a:9d:27:54:09:83:11:cd:e0:36:a1:c0:ac:53:
5b:a8:5c:15:6d:c9:27:ef:8a:cb:df:c5:fd:e3:4f:
92:4d:99:00:29:56:d6:c4:f0:31:e4:9d:4f:91:3e:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:B1:05:FF:5A:27:CF:8B:70:A3:1B:50:06:26:90:BB:AD:CD:53
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f26a4b-62f1-40da-8ebc-27801bd5f757.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:ae:0e:7a:a4:9f:7e:cf:61:be:e8:28:1d:6d:bc:be:9d:4e:
e9:03:73:cd:29:95:67:77:4c:d5:70:16:87:80:4f:8c:d2:e4:
36:46:7c:99:8d:ec:38:35:b4:5c:99:e0:7e:6e:e6:2f:22:e3:
34:5d:79:6a:d6:f7:ae:15:8a:c9:20:b6:56:9c:e6:07:f9:32:
33:d1:f8:bf:30:3e:8c:ba:ab:b0:b9:1b:ab:a2:38:43:a7:e2:
72:4d:55:16:58:6d:de:20:e2:fc:8c:df:d3:a6:d0:64:63:e1:
39:f6:d5:f9:e6:9b:66:28:8f:4b:1f:8e:7e:8a:ec:3b:33:1a:
fb:e9:57:62:fd:9d:cc:d5:f3:73:5d:df:8b:04:fb:7d:ae:49:
89:8e:37:fb:25:b6:12:23:c2:91:a0:93:08:5c:5f:a6:ac:a1:
fc:fb:50:b9:fb:db:9e:81:d8:c4:69:0d:0c:42:71:d0:21:12:
6a:c3:76:23:06:b4:0c:f8:4b:ed:2e:a8:1f:b0:4b:6b:14:a4:
fb:07:27:af:ed:94:fa:8e:dd:0d:f1:cf:ba:d7:9f:59:2b:05:
ba:4f:c8:ce:10:f7:a2:d9:d0:b0:5b:2f:04:f8:46:d0:37:65:
c2:5a:70:cc:79:6b:92:bb:c2:c2:f0:bf:46:37:b9:bf:3b:81:
67:b2:e6:43
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUKsfkL2Zi/8WsxDkEMlY4LzXeURswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDA0MDA4WhcNMjYwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1OTk4OWNjZDYyZDE0OTZjOTk3ZDNmNDNjNDhiMzMxYWU5
ZGEzZWQ5NDJhNmMwMTEzNGNmNjE4ODI0YTcxOTgxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUmsTrxIHfzfyrKFp8mgSWpP/szwp8Fkl6cm3KhqYu2JXS
6+/40DfTQjXyqt0cHToouzWal6/GT7KQNmmsLqGNweNs7L55iVyKQiewtCu4kQHB
1myAUBdgnv5UyKLLWszi/IyPvHFC+rB7CEW/c8dYkUTJ/6NyxhnDBZKvctqEbGHu
pxyBIIJN87FPlfiDIMsW9iOucw5DIK01SWHr+4J5i1RF6RdfvfNmbdJdHmp2Pf8i
Fn8KIAtfEPyASMjZ/n1SSeUq4aZnfbxucSv39bovVxAanSdUCYMRzeA2ocCsU1uo
XBVtySfvisvfxf3jT5JNmQApVtbE8DHknU+RPjoBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUpNKxBf9aJ8+LcKMbUAYmkLutzVMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQwZjI2YTRiLTYyZjEtNDBkYS04ZWJjLTI3ODAxYmQ1Zjc1Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQXzANBgkqhkiG9w0BAQsFAAOCAQEAF64OeqSffs9hvugoHW28vp1O6QNz
zSmVZ3dM1XAWh4BPjNLkNkZ8mY3sODW0XJngfm7mLyLjNF15atb3rhWKySC2Vpzm
B/kyM9H4vzA+jLqrsLkbq6I4Q6fick1VFlht3iDi/Izf06bQZGPhOfbV+eabZiiP
Sx+OforsOzMa++lXYv2dzNXzc13fiwT7fa5JiY43+yW2EiPCkaCTCFxfpqyh/PtQ
ufvbnoHYxGkNDEJx0CESasN2Iwa0DPhL7S6oH7BLaxSk+wcnr+2U+o7dDfHPutef
WSsFuk/IzhD3otnQsFsvBPhG0DdlwlpwzHlrkrvCwvC/Rje5vzuBZ7LmQw==
-----END CERTIFICATE-----
Generated at Tue Nov 25 19:33:36 2025 by rpki-client