This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa
File: 5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa (raw, json)
Hash identifier: J2Zbh8oQCECRG4XnLiBns48OhR9zzbujl8mPkDHesp4=
Subject key identifier: A4:90:49:3B:D4:AC:F0:85:2C:80:FB:F8:ED:9F:44:1F:DB:B9:A5:14
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5071D18500ED62381582AFCE3F6B2ECE312FEF50
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa
Signing time: Sat 15 Nov 2025 01:11:28 +0000
ROA not before: Sat 15 Nov 2025 01:11:28 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.153.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:71:d1:85:00:ed:62:38:15:82:af:ce:3f:6b:2e:ce:31:2f:ef:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 15 01:11:28 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=41b60f52586647cb7619c2dc530f250805cadaaa4376961023722d5f56cdca10, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:85:1f:e8:c6:d2:90:19:44:4c:90:28:28:
56:36:13:5b:a9:5a:45:06:dd:04:4b:50:c6:49:10:
54:06:d8:50:0c:d2:a0:12:28:0f:61:36:8a:00:fc:
33:7c:b0:fe:25:73:ca:03:e5:8d:a0:2b:bb:f0:a0:
1e:47:87:95:21:a4:4e:87:31:fc:e4:64:55:ef:1a:
be:46:48:cc:f8:af:90:c3:5e:16:cd:49:ae:b6:5c:
11:aa:a6:86:93:3a:7e:fe:77:48:df:3c:3d:a5:f8:
99:1a:4f:8f:6b:56:9a:d5:cb:05:72:b6:82:97:c7:
d7:f8:55:9e:51:cc:f8:78:bd:d1:2e:df:be:64:eb:
6d:9b:ef:44:01:fb:85:31:d1:ea:e6:f0:df:a2:1a:
dd:f8:0b:8a:cb:d1:74:3f:ce:62:97:de:8d:8b:34:
af:c4:d2:fa:65:41:ec:f3:dc:ed:2c:74:cd:0d:76:
34:da:4e:7e:a7:e3:a7:93:49:71:3d:4f:f6:87:5f:
b8:e6:76:44:24:17:66:7b:72:bc:f7:b0:5a:3d:b7:
6d:d1:e3:ca:0d:69:11:a7:32:9b:e0:df:fa:e1:da:
0b:bd:9e:1a:87:43:f8:8c:29:a8:55:79:dd:fb:63:
d9:a0:20:74:1d:91:a0:9d:dd:76:68:fd:b0:43:06:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:49:3B:D4:AC:F0:85:2C:80:FB:F8:ED:9F:44:1F:DB:B9:A5:14
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5224e2b7-2f6f-43d7-9b0e-bbcc30c5ad6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.153.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:e0:43:ae:34:ee:4d:9b:b2:6f:0e:7d:7e:1e:b2:8e:dc:c1:
7b:38:95:b7:17:06:32:78:eb:43:5b:e4:aa:60:b5:3d:bf:fb:
88:3e:25:16:37:3a:c2:5f:b3:d1:b5:ff:36:22:43:09:34:27:
88:79:94:38:ca:93:5f:37:a4:51:17:e4:ea:a9:59:cb:7c:f1:
d6:74:33:b3:b9:d9:ea:d2:63:15:15:fd:dc:42:19:d6:50:2c:
3f:21:26:45:b5:83:74:5c:a2:de:00:6f:11:42:08:98:0b:8a:
ad:3a:0b:fb:4e:e0:cc:7c:4a:48:e1:6b:e8:7d:ef:bd:fb:ef:
60:d1:12:2e:e9:b5:a0:23:72:b3:1a:2c:e4:6f:93:f5:33:13:
e9:d5:22:e1:4d:94:29:f5:7f:df:17:69:b4:54:f4:53:8c:bd:
ea:b5:2f:4c:a1:fc:69:5e:9c:cc:4d:ec:55:ed:66:d7:16:2a:
fc:7d:b5:1b:a2:26:ac:7e:3f:b6:d5:38:4c:87:af:40:4d:45:
fd:f4:bd:f5:3d:0f:8f:1b:75:78:a1:3d:31:8f:3c:47:6e:23:
12:59:11:d3:21:0e:e9:d9:8d:45:8a:4f:ff:a0:fb:c9:cd:ac:
ca:e3:39:75:c4:99:ca:2e:d8:e3:7d:2d:03:bb:8b:72:45:3d:
e0:6d:b8:af
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUHHRhQDtYjgVgq/OP2suzjEv71AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE1MDExMTI4WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0MWI2MGY1MjU4NjY0N2NiNzYxOWMyZGM1MzBmMjUwODA1
Y2FkYWFhNDM3Njk2MTAyMzcyMmQ1ZjU2Y2RjYTEwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMbYUf6MbSkBlETJAoKFY2E1upWkUG3QRLUMZJEFQG2FAM
0qASKA9hNooA/DN8sP4lc8oD5Y2gK7vwoB5Hh5UhpE6HMfzkZFXvGr5GSMz4r5DD
XhbNSa62XBGqpoaTOn7+d0jfPD2l+JkaT49rVprVywVytoKXx9f4VZ5RzPh4vdEu
375k622b70QB+4Ux0erm8N+iGt34C4rL0XQ/zmKX3o2LNK/E0vplQezz3O0sdM0N
djTaTn6n46eTSXE9T/aHX7jmdkQkF2Z7crz3sFo9t23R48oNaRGnMpvg3/rh2gu9
nhqHQ/iMKahVed37Y9mgIHQdkaCd3XZo/bBDBrzTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpJBJO9Ss8IUsgPv47Z9EH9u5pRQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzUyMjRlMmI3LTJmNmYtNDNkNy05YjBlLWJiY2MzMGM1YWQ2YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIjmQAwDQYJKoZIhvcNAQELBQADggEBAA7gQ6407k2bsm8OfX4eso7cwXs4
lbcXBjJ460Nb5KpgtT2/+4g+JRY3OsJfs9G1/zYiQwk0J4h5lDjKk183pFEX5Oqp
Wct88dZ0M7O52erSYxUV/dxCGdZQLD8hJkW1g3Rcot4AbxFCCJgLiq06C/tO4Mx8
Skjha+h9773772DREi7ptaAjcrMaLORvk/UzE+nVIuFNlCn1f98XabRU9FOMveq1
L0yh/GlenMxN7FXtZtcWKvx9tRuiJqx+P7bVOEyHr0BNRf30vfU9D48bdXihPTGP
PEduIxJZEdMhDunZjUWKT/+g+8nNrMrjOXXEmcou2ON9LQO7i3JFPeBtuK8=
-----END CERTIFICATE-----
Generated at Sun Nov 23 13:47:13 2025 by rpki-client