This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22b2a8fb-d172-40f7-9aae-b42e6e1fdef6.roa
File: 22b2a8fb-d172-40f7-9aae-b42e6e1fdef6.roa (raw, json)
Hash identifier: kGelFd6QJDWNj+OOJpC36PrAnnrHXkVgojLVT6HTaqw=
Subject key identifier: 4E:70:1D:1B:9A:66:B6:53:9B:CE:2C:CD:C0:35:7F:49:11:C4:DD:D4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 46F68A528FAEC9146334860E908936FD553AAD34
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22b2a8fb-d172-40f7-9aae-b42e6e1fdef6.roa
Signing time: Fri 07 Nov 2025 01:10:11 +0000
ROA not before: Fri 07 Nov 2025 01:10:11 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.156.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f6:8a:52:8f:ae:c9:14:63:34:86:0e:90:89:36:fd:55:3a:ad:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 7 01:10:11 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=059035a77dedbbda0715b8d1bd697e9252f925292ef367069ca5e14f75f9995a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:c5:de:2b:ff:6b:d1:9e:de:81:4f:64:43:
11:5a:43:30:98:99:d8:8e:47:da:e6:d5:5f:67:d2:
7b:53:9c:be:1f:c6:49:c5:51:1d:12:17:0a:bf:2a:
d2:08:d6:74:a4:34:6e:35:ae:1d:c8:33:5e:f7:a4:
84:ea:73:bd:41:82:cf:88:c1:f1:cb:3a:8d:ce:f9:
34:f0:c1:22:68:ee:10:1f:5f:a6:62:22:ff:41:a0:
3c:08:55:13:35:d4:bb:f3:35:91:6a:96:40:fe:95:
df:57:97:de:ff:d5:4c:92:dc:6e:1a:48:9d:64:1b:
ab:cf:4b:bf:e8:e8:7e:96:26:44:89:c2:26:c1:4d:
c1:6d:e5:50:2e:42:a3:80:d1:6c:1b:71:98:d9:ad:
ba:35:8a:31:55:a1:b6:49:66:39:ee:b0:c8:3f:73:
6c:24:a9:d3:df:ae:75:fb:2a:d8:39:f9:26:5a:02:
16:af:3b:5a:57:f3:6a:1b:94:7d:3b:70:e5:e2:7c:
46:cf:f7:a3:88:8d:d6:45:d1:12:c2:6f:49:85:2a:
d5:52:65:bc:f6:09:c4:ea:1b:87:0e:cf:12:6c:47:
bc:19:6e:eb:00:06:7a:b1:f2:af:1a:7c:cd:83:e0:
44:21:0f:8d:58:e9:03:59:6d:dc:4a:53:71:15:70:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:70:1D:1B:9A:66:B6:53:9B:CE:2C:CD:C0:35:7F:49:11:C4:DD:D4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22b2a8fb-d172-40f7-9aae-b42e6e1fdef6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.156.16.0/20
Signature Algorithm: sha256WithRSAEncryption
69:b8:b4:3c:b4:64:eb:9d:83:a3:e6:d0:ce:88:32:60:97:b1:
06:e4:5c:68:2e:29:53:82:32:f8:ec:2f:31:19:ac:87:d7:ee:
c1:a0:ef:5c:34:db:0d:56:53:d1:b2:b7:56:45:af:0b:ec:83:
94:5c:b7:30:8b:da:ca:ab:6b:b9:0d:c4:15:96:52:b6:69:25:
f0:9e:d6:5a:27:e0:fd:44:d8:ef:09:d0:32:ec:aa:d7:c0:d8:
ed:f2:78:d3:4e:62:c8:b9:9f:41:06:27:10:ba:ee:69:ef:89:
1d:a9:47:c5:cf:ff:51:e9:59:86:f6:3b:b7:b9:c2:b3:15:74:
c9:75:42:21:2c:a9:4c:0c:5e:43:d1:ba:33:b3:d8:c6:61:fa:
43:ae:0e:a4:1b:7e:5d:b2:7f:a0:32:33:d9:bf:d8:a8:03:fe:
23:dd:0b:0c:d3:1f:4d:05:96:be:7a:3f:e2:b2:99:11:59:8b:
2a:49:5d:e4:e5:30:f8:c4:41:88:54:99:e1:8c:91:89:75:f1:
38:89:4b:e0:72:da:fa:63:e2:6f:1b:0c:53:0d:e0:80:8a:4f:
bd:c0:8c:e9:6e:2c:b0:8c:d1:76:ed:77:04:35:64:4e:4a:f0:
1b:0d:0e:cb:16:49:62:93:db:6e:b1:cc:ca:f3:5b:14:1c:de:
db:3d:4f:f2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURvaKUo+uyRRjNIYOkIk2/VU6rTQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDExMDExWhcNMjUxMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNTkwMzVhNzdkZWRiYmRhMDcxNWI4ZDFiZDY5N2U5MjUy
ZjkyNTI5MmVmMzY3MDY5Y2E1ZTE0Zjc1Zjk5OTVhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEKsXeK/9r0Z7egU9kQxFaQzCYmdiOR9rm1V9n0ntTnL4f
xknFUR0SFwq/KtII1nSkNG41rh3IM173pITqc71Bgs+IwfHLOo3O+TTwwSJo7hAf
X6ZiIv9BoDwIVRM11LvzNZFqlkD+ld9Xl97/1UyS3G4aSJ1kG6vPS7/o6H6WJkSJ
wibBTcFt5VAuQqOA0WwbcZjZrbo1ijFVobZJZjnusMg/c2wkqdPfrnX7Ktg5+SZa
AhavO1pX82oblH07cOXifEbP96OIjdZF0RLCb0mFKtVSZbz2CcTqG4cOzxJsR7wZ
busABnqx8q8afM2D4EQhD41Y6QNZbdxKU3EVcJcvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTnAdG5pmtlObzizNwDV/SRHE3dQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzIyYjJhOGZiLWQxNzItNDBmNy05YWFlLWI0MmU2ZTFmZGVmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ2nBAwDQYJKoZIhvcNAQELBQADggEBAGm4tDy0ZOudg6Pm0M6IMmCXsQbk
XGguKVOCMvjsLzEZrIfX7sGg71w02w1WU9Gyt1ZFrwvsg5RctzCL2sqra7kNxBWW
UrZpJfCe1lon4P1E2O8J0DLsqtfA2O3yeNNOYsi5n0EGJxC67mnviR2pR8XP/1Hp
WYb2O7e5wrMVdMl1QiEsqUwMXkPRujOz2MZh+kOuDqQbfl2yf6AyM9m/2KgD/iPd
CwzTH00Flr56P+KymRFZiypJXeTlMPjEQYhUmeGMkYl18TiJS+By2vpj4m8bDFMN
4ICKT73AjOluLLCM0XbtdwQ1ZE5K8BsNDssWSWKT226xzMrzWxQc3ts9T/I=
-----END CERTIFICATE-----
Generated at Sun Nov 23 13:47:09 2025 by rpki-client