This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a4ce9e7-b596-43b2-bb24-814c65627e76.roa
File: 0a4ce9e7-b596-43b2-bb24-814c65627e76.roa (raw, json)
Hash identifier: yHZT2oqTlUCAibYdMUgCIH0mdf04ISP2vtAmIbuOxd8=
Subject key identifier: 33:C3:88:E1:B5:18:33:3B:13:4C:77:3A:1D:49:B6:55:E3:04:AC:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20CA9A2CAB20D6C66466944004057AA3635D4865
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a4ce9e7-b596-43b2-bb24-814c65627e76.roa
Signing time: Sat 22 Nov 2025 00:50:07 +0000
ROA not before: Sat 22 Nov 2025 00:50:07 +0000
ROA not after: Fri 20 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.32.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ca:9a:2c:ab:20:d6:c6:64:66:94:40:04:05:7a:a3:63:5d:48:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 22 00:50:07 2025 GMT
Not After : Feb 20 23:59:59 2026 GMT
Subject: serialNumber=6aa0e2d73f58b571297d466c03dfe094a71983f20f658385f789da9e47ae12f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:c5:5b:f5:93:b7:77:1a:7d:2c:d8:d6:89:
97:29:ed:ea:0b:45:cb:31:17:bf:62:7e:29:a9:fd:
86:f0:1c:79:bb:d8:aa:1f:05:53:80:08:25:ec:3e:
3c:09:b7:ec:19:71:d7:6f:86:ad:da:aa:e2:99:bc:
7a:96:16:7f:b1:8b:06:76:90:9d:0a:28:59:f8:a3:
c1:22:0a:07:64:19:7d:a0:bd:98:86:4f:78:81:e3:
23:5d:b2:cf:a2:7c:07:18:ba:78:ea:db:11:a8:cc:
01:59:d7:6f:04:f9:89:ea:27:a8:fa:df:cc:26:ab:
d0:63:48:b1:30:c6:c1:6a:83:a3:57:2d:cb:86:e6:
74:12:ef:d3:e8:d4:ec:b1:77:de:f6:53:37:2a:0b:
c2:6b:ff:c4:64:41:0c:64:76:bb:45:47:73:5a:fd:
46:20:1e:c8:5f:57:61:f8:02:38:03:8e:ac:29:c4:
92:9b:c8:39:4e:10:a9:51:a9:95:83:d1:45:35:1f:
85:9c:5c:1b:f9:7c:f9:c6:60:e4:9c:0e:bf:4f:02:
6e:9d:93:d3:ad:57:f1:8c:74:b1:9d:f0:fa:fd:db:
6f:f0:55:c4:f8:36:aa:6c:d3:35:6d:a2:ae:9e:c9:
d2:03:e8:09:dc:1a:3e:f3:60:f9:8b:0e:5e:a3:9b:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:88:E1:B5:18:33:3B:13:4C:77:3A:1D:49:B6:55:E3:04:AC:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a4ce9e7-b596-43b2-bb24-814c65627e76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:1c:f5:5b:63:6f:ad:42:e8:c5:02:a0:05:9f:f3:49:6c:ab:
8f:13:a9:9f:01:6e:b2:9f:9a:0d:03:ee:a8:2a:ef:fc:b8:33:
68:61:b7:f5:3e:f1:60:d7:dd:0a:4a:75:36:5f:c6:bf:b7:40:
17:eb:c4:2d:4f:32:39:fb:14:9f:44:67:ce:8c:34:13:60:56:
53:b9:ea:ee:4d:c6:9c:bf:65:15:a2:78:17:2b:cc:64:34:e4:
0e:66:b0:6c:96:9f:c8:4b:ab:c9:95:f7:98:05:90:94:4d:8b:
b9:84:cc:bb:c5:5b:ec:ce:e8:5b:f6:b2:ed:9a:fd:05:56:ec:
5d:df:59:07:54:1d:9f:a4:3a:ac:67:da:32:9a:27:a1:da:07:
82:75:d0:fc:8b:a0:88:5d:30:8b:dd:2c:37:c7:e1:65:93:1e:
f8:b9:d9:39:0c:c2:d0:45:0f:96:7e:f6:10:2e:c7:b4:23:6d:
83:bd:ce:9d:a7:0d:8e:b7:ee:72:06:57:ee:6f:06:7f:a0:f1:
21:78:c3:18:63:44:de:51:a7:ee:1e:ed:55:7c:c5:f8:f6:37:
c8:43:ea:18:e6:7d:9a:46:cf:0f:1e:0b:f5:e5:36:3c:1c:27:
0a:fc:82:82:f9:48:f0:2c:53:35:25:ce:66:46:26:5c:7a:83:
d6:23:23:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:21:13 2025 by rpki-client