This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
File: 60789a29-f516-47ec-9154-b2b610f7282e.roa (raw, json)
Hash identifier: lJitAiVysCMyGJgwKaLSBfuDgHRl7O0BhoRjDZVwEjE=
Subject key identifier: E3:D1:FA:1D:84:D3:82:9B:13:C6:5D:B1:15:F3:20:71:FC:62:1A:FF
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5206B3747DD59026AC8F09E3F523377A37B2C963
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
Signing time: Sat 22 Nov 2025 00:00:05 +0000
ROA not before: Sat 22 Nov 2025 00:00:05 +0000
ROA not after: Fri 20 Feb 2026 23:59:59 +0000
asID: 14618
IP address blocks: 216.221.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:06:b3:74:7d:d5:90:26:ac:8f:09:e3:f5:23:37:7a:37:b2:c9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Nov 22 00:00:05 2025 GMT
Not After : Feb 20 23:59:59 2026 GMT
Subject: serialNumber=0257ea71a35b107fae8d2c314178e825261d059076d62a2c75f4fda8a464c4d8, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:8c:8c:0b:b3:0e:95:78:06:88:f6:2d:34:
1e:aa:73:81:d6:bb:b7:8a:17:af:cd:99:ed:34:71:
50:29:1c:ff:b5:42:28:8b:10:1f:29:49:d8:b6:95:
c3:aa:96:c9:a8:c5:18:98:2a:4b:2d:dd:6d:d9:f7:
e1:09:96:c7:dd:75:b7:70:d5:ef:eb:72:b0:1d:29:
e5:92:50:a0:0d:e6:03:66:2d:00:37:01:a0:ca:ad:
cc:5a:2d:99:34:cd:70:44:45:a9:55:e8:c3:08:3c:
42:15:13:7f:40:f9:ca:c2:3d:60:87:62:3b:3b:0b:
f7:06:29:b6:1d:3a:03:19:aa:40:94:5e:2f:1b:e4:
89:e1:9f:8d:15:ba:3c:65:48:2d:87:8a:8c:2b:0e:
9b:00:9b:54:0f:99:3d:57:e7:0a:da:f1:fb:d3:e8:
4e:b5:b3:5a:f5:4d:85:c9:a2:4b:5f:34:52:27:e5:
6f:07:4a:6e:93:73:16:fc:ba:8d:ba:56:b5:15:c5:
d3:75:a4:9c:90:99:f3:4f:ff:09:50:8c:8b:68:11:
48:ff:79:71:e9:eb:07:e9:3c:89:5d:24:f0:96:84:
1d:04:10:63:4b:23:20:02:d8:31:e0:08:06:6b:0f:
92:65:75:df:17:50:10:06:c2:1d:bf:d1:bd:20:25:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D1:FA:1D:84:D3:82:9B:13:C6:5D:B1:15:F3:20:71:FC:62:1A:FF
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.168.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:e6:da:1b:1a:00:42:6c:20:68:4e:09:9d:8a:50:6c:92:d0:
33:f6:19:d8:72:d5:9e:4f:8a:5b:53:91:96:20:21:57:57:b9:
59:48:27:4d:7e:21:db:85:aa:53:98:40:da:8f:74:29:50:e0:
cc:d8:21:50:21:d4:d1:0d:5b:82:92:34:6a:4e:60:9d:5a:78:
ab:c0:18:a5:2b:52:e5:b9:2b:64:9c:22:5a:c0:dd:bc:74:ed:
f0:07:1e:fa:28:f5:2f:59:03:45:46:3d:89:41:d3:92:5b:68:
17:1b:c1:8d:13:12:7c:58:b5:a9:5c:5a:b0:e0:ab:a7:ba:79:
c0:07:63:f2:82:a5:da:59:20:d0:05:92:1a:a3:96:6c:c6:5a:
c4:27:21:0f:bd:af:f1:77:28:f8:7f:9a:7d:89:6a:65:ae:55:
4f:80:33:94:4b:b5:2f:54:76:38:88:01:f1:48:45:87:6a:d7:
b6:9f:f3:bb:3c:58:65:57:97:a3:58:0a:0c:a4:45:74:63:2a:
6d:d4:2b:c5:8b:8d:f3:cf:24:f4:2a:54:62:68:a8:65:34:44:
c5:5c:c2:5f:f4:eb:15:f3:2b:c7:24:85:44:8d:10:83:71:9b:
ae:b0:75:35:8c:da:13:65:ed:f1:fa:98:b6:22:7d:9b:9b:38:
0a:03:8b:1f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUgazdH3VkCasjwnj9SM3ejeyyWMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTIyMDAwMDA1WhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwMjU3ZWE3MWEzNWIxMDdmYWU4ZDJjMzE0MTc4ZTgyNTI2
MWQwNTkwNzZkNjJhMmM3NWY0ZmRhOGE0NjRjNGQ4MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwkoyMC7MOlXgGiPYtNB6qc4HWu7eKF6/Nme00cVApHP+1
QiiLEB8pSdi2lcOqlsmoxRiYKkst3W3Z9+EJlsfddbdw1e/rcrAdKeWSUKAN5gNm
LQA3AaDKrcxaLZk0zXBERalV6MMIPEIVE39A+crCPWCHYjs7C/cGKbYdOgMZqkCU
Xi8b5Inhn40VujxlSC2HiowrDpsAm1QPmT1X5wra8fvT6E61s1r1TYXJoktfNFIn
5W8HSm6Tcxb8uo26VrUVxdN1pJyQmfNP/wlQjItoEUj/eXHp6wfpPIldJPCWhB0E
EGNLIyAC2DHgCAZrD5Jldd8XUBAGwh2/0b0gJZmnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU49H6HYTTgpsTxl2xFfMgcfxiGv8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzYwNzg5YTI5LWY1MTYtNDdlYy05MTU0LWIyYjYxMGY3MjgyZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPY3agwDQYJKoZIhvcNAQELBQADggEBAHrm2hsaAEJsIGhOCZ2KUGyS0DP2
Gdhy1Z5PiltTkZYgIVdXuVlIJ01+IduFqlOYQNqPdClQ4MzYIVAh1NENW4KSNGpO
YJ1aeKvAGKUrUuW5K2ScIlrA3bx07fAHHvoo9S9ZA0VGPYlB05JbaBcbwY0TEnxY
talcWrDgq6e6ecAHY/KCpdpZINAFkhqjlmzGWsQnIQ+9r/F3KPh/mn2JamWuVU+A
M5RLtS9UdjiIAfFIRYdq17af87s8WGVXl6NYCgykRXRjKm3UK8WLjfPPJPQqVGJo
qGU0RMVcwl/06xXzK8ckhUSNEINxm66wdTWM2hNl7fH6mLYifZubOAoDix8=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:36:10 2025 by rpki-client