This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/998d5f0e-e0d0-45cb-96fd-9e8b1ff02524.roa
File: 998d5f0e-e0d0-45cb-96fd-9e8b1ff02524.roa (raw, json)
Hash identifier: LYV7kM0tHIl81na9NPpFjJbltYHyomf4d/1Mzy6Vf+U=
Subject key identifier: 4A:DB:87:3A:09:2C:EB:76:DF:9A:FC:D3:38:D7:E9:37:F9:61:8A:5E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 63E521E8B63903E867F648135DF9401BCF3F524D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/998d5f0e-e0d0-45cb-96fd-9e8b1ff02524.roa
Signing time: Sat 15 Nov 2025 03:30:14 +0000
ROA not before: Sat 15 Nov 2025 03:30:14 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.34.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e5:21:e8:b6:39:03:e8:67:f6:48:13:5d:f9:40:1b:cf:3f:52:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 15 03:30:14 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=9fb803eef088a5a79aa7f8e35843a52f4d007975a268f7504b0ba4a39a758e90, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:16:32:1c:97:9e:f3:2b:e5:2e:d7:83:b3:
fb:52:b6:16:dd:72:a2:b4:08:65:48:9e:3b:6a:3a:
a4:5b:f6:99:19:11:3d:74:22:42:cf:42:29:07:2b:
bc:7e:75:30:36:e6:1a:da:6b:09:e7:05:a7:de:de:
c5:a2:26:d6:25:2e:ca:bb:77:e7:c2:90:0d:a5:7e:
12:7e:53:3b:94:ba:58:03:55:80:7d:ea:18:21:5e:
0f:6c:ed:24:e2:97:29:b9:05:19:9b:9f:bd:52:95:
bf:04:93:f6:bb:52:60:00:48:4d:ca:6c:87:10:53:
a2:0b:e5:84:61:4e:ea:f7:0f:29:09:fd:39:5e:4f:
f5:34:43:68:cd:e4:24:ba:99:ac:d1:95:c5:06:70:
ec:1a:4c:15:10:5c:bc:a1:2f:ac:f7:cf:a8:af:e9:
c2:f3:f1:4a:3b:e8:19:6c:6d:f4:24:af:a1:a2:6b:
b6:23:2a:0c:50:db:b4:6f:21:70:b9:6b:49:c7:d2:
3b:8b:0c:00:a8:e7:bb:97:f3:36:4a:23:72:53:af:
b2:a9:75:35:56:42:4c:76:4f:ba:f2:d8:28:e3:07:
67:b7:c2:0e:2d:69:5e:67:7c:b8:c3:3a:01:10:8f:
5e:22:c6:b1:eb:dd:23:4d:b4:2c:7c:88:d5:42:a0:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:87:3A:09:2C:EB:76:DF:9A:FC:D3:38:D7:E9:37:F9:61:8A:5E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/998d5f0e-e0d0-45cb-96fd-9e8b1ff02524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.34.232.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:27:ea:14:8d:17:92:02:28:39:41:29:b4:c0:95:1e:b2:e4:
9d:cd:70:6d:91:67:88:07:6a:e0:d0:35:8a:e8:ff:92:55:cc:
b2:f6:af:97:17:bf:8a:f0:d4:bf:f3:7c:ea:28:00:8d:d9:1d:
14:95:c7:3f:9f:81:43:70:f3:b6:45:b8:bd:b4:5e:f2:32:65:
73:6d:fe:f3:ca:8c:b6:57:13:b3:5c:0b:6c:54:a9:bd:01:90:
8f:7b:31:61:af:ff:a0:26:64:3f:64:f5:80:b0:8e:dc:8c:f6:
d3:b2:21:51:2a:8f:6a:d6:f0:30:2d:f3:16:36:70:ad:e9:eb:
8e:a3:ff:01:7f:73:b8:5b:31:1d:8f:4b:77:a9:4d:06:8f:c1:
52:ae:1c:84:1a:3e:12:d3:e1:54:5d:f3:d7:fb:b5:cb:dd:58:
4f:76:a2:c2:8c:9c:99:5b:0e:d8:cb:6d:4b:45:fe:96:9d:05:
32:84:cf:cf:b8:87:0c:cd:7a:9d:d9:8e:17:77:12:f8:03:41:
4d:ee:ef:7f:1c:c8:0d:ba:8e:50:ec:a8:e8:73:f6:5b:f3:75:
e6:f2:ff:d8:f3:b3:c2:15:1b:34:c8:8c:60:d9:27:37:2b:89:
44:d7:ad:97:50:21:6f:a3:bd:ed:18:a3:f6:03:e7:f0:8f:86:
d9:0f:f6:06
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUY+Uh6LY5A+hn9kgTXflAG88/Uk0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTE1MDMzMDE0WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZmI4MDNlZWYwODhhNWE3OWFhN2Y4ZTM1ODQzYTUyZjRk
MDA3OTc1YTI2OGY3NTA0YjBiYTRhMzlhNzU4ZTkwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvQxYyHJee8yvlLteDs/tSthbdcqK0CGVInjtqOqRb9pkZ
ET10IkLPQikHK7x+dTA25hraawnnBafe3sWiJtYlLsq7d+fCkA2lfhJ+UzuUulgD
VYB96hghXg9s7STilym5BRmbn71Slb8Ek/a7UmAASE3KbIcQU6IL5YRhTur3DykJ
/TleT/U0Q2jN5CS6mazRlcUGcOwaTBUQXLyhL6z3z6iv6cLz8Uo76BlsbfQkr6Gi
a7YjKgxQ27RvIXC5a0nH0juLDACo57uX8zZKI3JTr7KpdTVWQkx2T7ry2CjjB2e3
wg4taV5nfLjDOgEQj14ixrHr3SNNtCx8iNVCoN9zAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUStuHOgks63bfmvzTONfpN/lhil4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzk5OGQ1ZjBlLWUwZDAtNDVjYi05NmZkLTllOGIxZmYwMjUyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMSIugwDQYJKoZIhvcNAQELBQADggEBAC0n6hSNF5ICKDlBKbTAlR6y5J3N
cG2RZ4gHauDQNYro/5JVzLL2r5cXv4rw1L/zfOooAI3ZHRSVxz+fgUNw87ZFuL20
XvIyZXNt/vPKjLZXE7NcC2xUqb0BkI97MWGv/6AmZD9k9YCwjtyM9tOyIVEqj2rW
8DAt8xY2cK3p646j/wF/c7hbMR2PS3epTQaPwVKuHIQaPhLT4VRd89f7tcvdWE92
osKMnJlbDtjLbUtF/padBTKEz8+4hwzNep3Zjhd3EvgDQU3u738cyA26jlDsqOhz
9lvzdeby/9jzs8IVGzTIjGDZJzcriUTXrZdQIW+jve0Yo/YD5/CPhtkP9gY=
-----END CERTIFICATE-----
Generated at Wed Dec 3 18:01:28 2025 by rpki-client