This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f99236be-03a7-4f91-be31-5366989c9d7b.roa
File: f99236be-03a7-4f91-be31-5366989c9d7b.roa (raw, json)
Hash identifier: gModXYPcd4zVLMfv/7P+0pps/zMhUYtSotzzpx3n1l4=
Subject key identifier: C5:B5:A5:A7:87:AD:13:4C:BC:9C:11:38:F2:98:A7:95:3B:96:B9:D0
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 675DD9D01BC540427A3EC5D043402A252BCD88E1
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f99236be-03a7-4f91-be31-5366989c9d7b.roa
Signing time: Sun 07 Dec 2025 00:00:06 +0000
ROA not before: Sun 07 Dec 2025 00:00:06 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 199.255.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:5d:d9:d0:1b:c5:40:42:7a:3e:c5:d0:43:40:2a:25:2b:cd:88:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Dec 7 00:00:06 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=fe3ce903d27a4d04dbb92aabed380598428d514adff0cce9ba579c97a8e80d70, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:e0:9c:35:4c:2a:fa:44:91:5d:db:24:01:
3e:3b:21:19:82:f0:b6:ff:03:b3:7e:6d:3c:17:63:
76:82:67:e5:bd:2d:5a:35:d0:ee:56:ef:7f:59:fc:
4a:ea:69:f6:a7:29:80:80:b5:e5:f2:c8:14:74:d0:
5f:93:51:50:36:da:b8:89:89:9b:04:cf:56:bb:bd:
f0:3a:e7:81:28:fb:1b:05:50:a1:9e:79:47:ef:94:
70:5f:b4:9b:f6:8e:8d:61:f2:9c:1d:fb:20:28:a1:
7e:e4:df:6a:fe:5c:5c:bb:40:b8:be:db:9c:0b:ec:
7b:1b:f4:36:9a:4d:18:7e:62:64:6c:22:b6:b6:85:
c1:1d:25:f7:95:19:cd:e5:c2:9c:59:d9:74:ac:38:
12:38:a7:d8:5a:a3:7a:4f:8f:b1:e5:f8:ec:4d:82:
37:bc:2c:65:8a:8f:94:8e:51:61:42:70:2c:83:5e:
ea:c1:93:1c:03:5d:3b:1d:e6:33:3d:8d:cb:85:b0:
6e:10:64:31:a2:2b:4d:8f:d8:40:ea:27:5b:b8:60:
c7:9e:f2:21:3c:f6:10:29:1c:af:39:c3:01:11:d6:
e6:1e:0c:95:48:f0:51:63:8e:00:88:ae:af:e3:8e:
4b:de:7c:5a:43:27:d7:d8:41:97:e0:57:2a:96:1d:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B5:A5:A7:87:AD:13:4C:BC:9C:11:38:F2:98:A7:95:3B:96:B9:D0
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f99236be-03a7-4f91-be31-5366989c9d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.255.192.0/22
Signature Algorithm: sha256WithRSAEncryption
89:7a:7b:42:66:be:57:2f:31:ba:0d:22:0d:77:b7:49:42:e8:
78:db:74:67:6f:ac:7f:16:6b:a5:68:49:53:2e:63:eb:c8:5a:
0a:a2:bc:a1:5c:c2:e6:0c:f7:ac:6f:22:5f:c9:b4:f7:f9:7c:
8b:23:89:a6:a7:f7:9f:a2:46:64:95:1f:14:de:33:f8:e2:04:
61:b3:8a:00:10:24:a5:d8:5e:45:65:6e:8b:3c:53:1a:66:25:
87:2a:3d:a0:88:08:79:70:67:ef:3d:9b:9f:e1:70:24:a2:69:
56:07:4a:60:9d:e3:bd:fa:ab:0d:d6:fd:d1:4a:69:9d:4f:96:
73:9e:ba:0e:cc:a5:3f:21:7d:20:49:eb:b8:d2:45:a4:05:c3:
18:cb:a7:86:f5:f0:20:81:cf:33:fb:7f:28:15:f9:65:74:af:
bc:ca:5b:c5:53:37:3f:3f:71:c5:6c:52:b8:a8:df:56:d2:f8:
5a:c3:30:5f:b8:a8:7b:89:60:66:7e:27:18:14:5e:94:b7:3b:
70:9a:c2:5a:af:1f:b1:09:2c:e9:42:79:29:aa:06:18:46:10:
3e:28:0b:fd:f6:69:bb:2b:c5:51:09:89:71:aa:81:23:5e:38:
a2:85:b2:b4:91:4a:ac:33:1d:7d:be:8f:11:71:4f:13:04:8d:
10:2a:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:50:06 2025 by rpki-client