This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cafe4c1-68f8-4701-986b-5ec06431a231.roa
File: 0cafe4c1-68f8-4701-986b-5ec06431a231.roa (raw, json)
Hash identifier: QAR2x/Tf0fbcDOUrbxrmoCQj0aVe7YKpPsvTaUSUDwY=
Subject key identifier: 6A:7E:14:22:3C:BA:D5:9D:D4:8E:9C:40:C1:00:6B:E5:C1:1F:22:A2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5AC2FFC56D340539BF06370C7593873794ACC032
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cafe4c1-68f8-4701-986b-5ec06431a231.roa
Signing time: Wed 12 Nov 2025 01:20:08 +0000
ROA not before: Wed 12 Nov 2025 01:20:08 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c2:ff:c5:6d:34:05:39:bf:06:37:0c:75:93:87:37:94:ac:c0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 01:20:08 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=c4b6146a6b9f8903c0d44c40095617c7d20e3cc74097154a8d7006948e07c689, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:38:72:91:d6:73:37:93:14:f6:6c:7e:da:
e5:5b:3e:e8:c1:30:41:14:e5:fc:bb:01:b8:cf:de:
40:6a:69:03:15:5e:b5:85:28:3a:d0:ef:b7:21:0f:
e0:d0:b5:d9:6e:40:99:91:dd:1a:73:cc:ea:9c:59:
02:8d:9f:38:4e:8b:87:f7:c3:f8:22:22:6e:d0:e2:
6e:70:ab:f4:3a:c5:08:3c:bf:d3:93:29:3d:fc:d2:
1b:c6:00:8f:59:12:3b:ea:05:0b:f4:99:fa:f2:d9:
9d:24:21:a7:de:c2:c3:62:e3:68:97:d2:22:96:3e:
94:7c:bd:74:23:f1:b0:68:e6:4a:84:19:c4:79:28:
fc:52:f0:e1:99:02:59:42:f6:a7:6d:1d:de:23:cb:
be:a2:9e:64:05:28:b0:db:dd:13:04:34:88:52:0b:
52:a1:80:d1:45:75:51:24:61:c8:e4:80:fe:e0:57:
6d:ce:41:37:e5:88:ae:4d:63:86:b3:5d:dd:c3:c9:
87:e0:9e:05:10:de:f4:d7:01:b9:d1:7e:e1:5a:9a:
a4:16:30:f7:32:50:b0:7e:5a:7e:ef:0b:31:4f:d5:
eb:d2:9e:72:f0:6f:d6:2f:9d:e0:ff:d7:66:61:0a:
c6:68:5b:fe:56:22:68:8a:e9:9b:c3:7b:b4:29:6e:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7E:14:22:3C:BA:D5:9D:D4:8E:9C:40:C1:00:6B:E5:C1:1F:22:A2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cafe4c1-68f8-4701-986b-5ec06431a231.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:a8:52:08:09:7a:2e:08:cc:cc:7d:a4:5c:93:66:c6:78:16:
a3:27:71:f5:91:8c:09:b0:c0:12:a4:7f:fb:2d:b5:06:d5:22:
3e:cc:f4:89:8f:13:76:48:2f:13:e4:18:9c:53:0e:88:80:a4:
1a:2a:04:38:9f:0a:72:78:0b:8d:a7:c0:5b:c3:ce:24:6d:49:
f6:d4:29:d8:51:15:90:cd:8b:9e:b1:d3:3e:a8:b1:5f:8c:66:
ca:4a:ea:91:aa:a3:92:a4:84:87:e7:9a:e4:6a:4a:62:1b:15:
72:69:52:e6:1f:0a:2c:aa:bf:db:c6:ce:a4:08:3c:a2:cb:21:
86:69:ca:41:ec:e9:05:c8:dd:60:77:b3:53:dd:bd:de:63:40:
01:fe:4e:7f:be:2d:99:dc:54:56:ba:ac:ec:25:96:84:66:7d:
13:a4:ca:52:08:6f:04:90:fa:7d:77:15:d1:e9:b6:cf:5c:fb:
e8:e5:a2:8d:08:88:3b:c4:47:d6:ab:9b:2b:49:c9:7d:a7:42:
38:0b:a8:18:d6:7e:8c:fd:91:ab:a5:14:51:a6:39:a7:f0:40:
ec:57:74:e1:7c:a6:41:16:36:a4:c0:dc:a2:4b:f5:cc:a8:f8:
4e:c2:ac:78:4f:5a:fe:13:cf:7b:3b:60:20:d9:e6:ad:a5:d0:
70:6e:ad:ad
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWsL/xW00BTm/BjcMdZOHN5SswDIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDEyMDA4WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjNGI2MTQ2YTZiOWY4OTAzYzBkNDRjNDAwOTU2MTdjN2Qy
MGUzY2M3NDA5NzE1NGE4ZDcwMDY5NDhlMDdjNjg5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDF+zhykdZzN5MU9mx+2uVbPujBMEEU5fy7AbjP3kBqaQMV
XrWFKDrQ77chD+DQtdluQJmR3RpzzOqcWQKNnzhOi4f3w/giIm7Q4m5wq/Q6xQg8
v9OTKT380hvGAI9ZEjvqBQv0mfry2Z0kIafewsNi42iX0iKWPpR8vXQj8bBo5kqE
GcR5KPxS8OGZAllC9qdtHd4jy76inmQFKLDb3RMENIhSC1KhgNFFdVEkYcjkgP7g
V23OQTfliK5NY4azXd3DyYfgngUQ3vTXAbnRfuFamqQWMPcyULB+Wn7vCzFP1evS
nnLwb9YvneD/12ZhCsZoW/5WImiK6ZvDe7QpbrotAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUan4UIjy61Z3UjpxAwQBr5cEfIqIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBjYWZlNGMxLTY4ZjgtNDcwMS05ODZiLTVlYzA2NDMxYTIzMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2GTANBgkqhkiG9w0BAQsFAAOCAQEAG6hSCAl6LgjMzH2kXJNmxngWoydx
9ZGMCbDAEqR/+y21BtUiPsz0iY8TdkgvE+QYnFMOiICkGioEOJ8KcngLjafAW8PO
JG1J9tQp2FEVkM2LnrHTPqixX4xmykrqkaqjkqSEh+ea5GpKYhsVcmlS5h8KLKq/
28bOpAg8osshhmnKQezpBcjdYHezU9293mNAAf5Of74tmdxUVrqs7CWWhGZ9E6TK
UghvBJD6fXcV0em2z1z76OWijQiIO8RH1qubK0nJfadCOAuoGNZ+jP2Rq6UUUaY5
p/BA7Fd04XymQRY2pMDcokv1zKj4TsKseE9a/hPPeztgINnmraXQcG6trQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:17 2025 by rpki-client