This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71125bc2-755d-45ec-b689-05bfd289cfe7.roa
File: 71125bc2-755d-45ec-b689-05bfd289cfe7.roa (raw, json)
Hash identifier: Y092RKFwjD83uUFzHdO/6kLjEqbdii0rHlOQ6z0wv+I=
Subject key identifier: E0:84:DE:66:FC:18:7B:CB:32:DB:34:1C:CB:05:D7:70:5B:5E:21:C4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 079DE522944FCF69D605ED6A858CE927526EFBD9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71125bc2-755d-45ec-b689-05bfd289cfe7.roa
Signing time: Wed 12 Nov 2025 02:40:46 +0000
ROA not before: Wed 12 Nov 2025 02:40:46 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.254.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9d:e5:22:94:4f:cf:69:d6:05:ed:6a:85:8c:e9:27:52:6e:fb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 12 02:40:46 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=209be8ab196bef3d139d29f9a3b69eb4ca9a762e51d2e2294f27cf2366c90f81, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:91:e4:d5:5d:ce:e4:08:35:ea:cc:57:6c:
f6:c8:5c:7a:8a:dd:2e:56:29:5f:9e:24:ce:65:9d:
2d:cc:e1:d9:07:7b:86:e1:33:82:17:8e:50:11:d7:
74:97:ce:7a:0a:35:25:ef:a4:5b:2f:2f:33:d8:2c:
f4:74:98:91:2b:25:68:9b:ec:8c:95:6f:b7:72:42:
2f:6e:ba:3e:9e:25:8c:42:e4:24:70:50:2a:18:69:
5c:44:8f:9b:c2:76:d9:c4:a0:99:b4:93:64:9c:c2:
be:d1:13:64:1e:52:dc:d7:c4:fb:87:1c:8a:56:43:
07:ff:e5:51:6f:e2:8a:fc:0f:ac:7b:b6:d6:c6:e9:
13:56:97:a4:3f:73:b8:79:90:74:e8:b1:a5:6a:1f:
41:38:84:72:18:04:88:c3:20:4d:ba:26:db:4c:48:
7f:69:05:6d:2c:e6:9e:ae:3e:48:5c:7a:90:b2:65:
d8:2a:f3:fa:23:4e:7a:e8:a4:f9:ec:3e:44:cc:7f:
ab:6d:7e:38:b6:ee:f4:9a:48:d1:60:f7:4a:48:6f:
04:ab:bd:1b:35:6f:9e:b3:7c:e0:a3:e2:64:1a:3d:
35:a9:f3:ab:41:24:5f:10:fd:e5:37:c8:7a:84:dd:
15:b2:9e:92:f7:76:4d:6c:8d:99:77:57:52:a7:d2:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:DE:66:FC:18:7B:CB:32:DB:34:1C:CB:05:D7:70:5B:5E:21:C4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71125bc2-755d-45ec-b689-05bfd289cfe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.254.96.0/20
Signature Algorithm: sha256WithRSAEncryption
18:88:1e:8c:67:ed:dc:0e:85:fc:78:ac:89:9b:da:22:43:e8:
c4:93:3e:01:35:04:58:fd:06:22:a4:5f:64:71:4e:bf:b2:bf:
23:37:55:27:1f:ec:02:66:e9:a8:ef:63:f1:ea:d7:49:b1:5f:
fc:93:82:ae:1e:9a:0d:55:3b:24:5f:ab:d1:06:87:bc:ab:1d:
fe:bf:81:bc:4d:b2:b2:65:3a:60:13:13:a8:aa:c6:0b:5d:b5:
d2:8d:01:1e:7c:c8:9e:5a:b8:07:8c:d0:7a:54:26:a0:3a:b0:
d0:78:e5:03:f9:5e:66:78:d7:14:89:74:ae:00:ad:3d:10:d3:
19:b7:20:3f:aa:c5:22:5b:24:3b:df:db:9a:cb:be:13:d4:fb:
7e:0f:77:5b:d3:00:8b:a1:20:7c:23:62:59:2b:0c:d0:2e:a4:
e4:67:5d:bb:1d:f0:c3:cf:3c:fd:14:3a:c0:00:b2:cb:dc:a6:
09:fd:e4:f7:ed:93:18:57:4f:4d:bb:07:e4:0f:b8:f5:b3:28:
f3:a8:5a:a5:47:0a:43:1a:83:51:65:56:e8:88:b5:02:fa:76:
c8:81:13:cf:69:6a:2c:53:8a:ba:01:1a:65:00:ef:16:23:44:
44:98:9b:2b:19:02:61:bd:d4:53:a4:02:39:c8:fc:2d:a0:25:
ca:d1:1d:6c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUB53lIpRPz2nWBe1qhYzpJ1Ju+9kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTEyMDI0MDQ2WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMDliZThhYjE5NmJlZjNkMTM5ZDI5ZjlhM2I2OWViNGNh
OWE3NjJlNTFkMmUyMjk0ZjI3Y2YyMzY2YzkwZjgxMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJBJHk1V3O5Ag16sxXbPbIXHqK3S5WKV+eJM5lnS3M4dkH
e4bhM4IXjlAR13SXznoKNSXvpFsvLzPYLPR0mJErJWib7IyVb7dyQi9uuj6eJYxC
5CRwUCoYaVxEj5vCdtnEoJm0k2Scwr7RE2QeUtzXxPuHHIpWQwf/5VFv4or8D6x7
ttbG6RNWl6Q/c7h5kHTosaVqH0E4hHIYBIjDIE26JttMSH9pBW0s5p6uPkhcepCy
Zdgq8/ojTnropPnsPkTMf6ttfji27vSaSNFg90pIbwSrvRs1b56zfOCj4mQaPTWp
86tBJF8Q/eU3yHqE3RWynpL3dk1sjZl3V1Kn0uqtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4ITeZvwYe8sy2zQcywXXcFteIcQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzcxMTI1YmMyLTc1NWQtNDVlYy1iNjg5LTA1YmZkMjg5Y2ZlNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ2/mAwDQYJKoZIhvcNAQELBQADggEBABiIHoxn7dwOhfx4rImb2iJD6MST
PgE1BFj9BiKkX2RxTr+yvyM3VScf7AJm6ajvY/Hq10mxX/yTgq4emg1VOyRfq9EG
h7yrHf6/gbxNsrJlOmATE6iqxgtdtdKNAR58yJ5auAeM0HpUJqA6sNB45QP5XmZ4
1xSJdK4ArT0Q0xm3ID+qxSJbJDvf25rLvhPU+34Pd1vTAIuhIHwjYlkrDNAupORn
Xbsd8MPPPP0UOsAAssvcpgn95PftkxhXT027B+QPuPWzKPOoWqVHCkMag1FlVuiI
tQL6dsiBE89paixTiroBGmUA7xYjRESYmysZAmG91FOkAjnI/C2gJcrRHWw=
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:02:29 2025 by rpki-client