This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10033961-c437-4201-87b8-c9dfc05eb475.roa
File: 10033961-c437-4201-87b8-c9dfc05eb475.roa (raw, json)
Hash identifier: eZH6frL/WF6Ihik6jdPNZxlIheelomQjL4UXsg2xi0g=
Subject key identifier: EC:8D:A2:0F:53:1C:A0:5B:A9:13:37:4A:5C:40:2B:CF:CA:F3:68:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D33EF46649802C3646FE65AB7DC5968F643798B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10033961-c437-4201-87b8-c9dfc05eb475.roa
Signing time: Wed 03 Dec 2025 01:20:06 +0000
ROA not before: Wed 03 Dec 2025 01:20:06 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:c400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:33:ef:46:64:98:02:c3:64:6f:e6:5a:b7:dc:59:68:f6:43:79:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 01:20:06 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=b42c224cb8d8c735d7dc5dc323bbb183ed6320c8ff934f81b958834c763e2ca5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:14:4d:25:6f:c0:d2:4e:cd:c8:ca:cb:f5:
48:e5:80:8d:c1:1c:ed:02:bb:0a:4f:6c:53:4a:39:
76:eb:b9:02:9e:53:b3:46:b9:ad:31:85:f6:e3:e3:
71:08:30:9d:24:6e:99:f0:f7:88:ba:9a:7a:eb:13:
5b:34:71:9b:85:ba:5c:3c:f0:b9:fe:e3:bd:66:cf:
20:98:8b:76:82:93:11:4d:4a:b5:71:ee:e7:4f:85:
72:73:11:7d:32:87:a4:d2:1a:4f:60:65:02:08:3a:
59:a2:d9:a6:58:08:63:09:6d:65:16:0f:b1:61:8d:
43:cd:6a:b1:35:21:b2:a0:9f:d0:78:84:5a:bb:14:
58:f3:c5:b3:75:45:66:a3:aa:6f:93:43:ba:f8:aa:
49:df:b4:b6:a9:5d:ab:ee:9c:0c:4d:9a:be:68:c9:
22:d1:53:77:3d:7b:bc:c0:5f:0c:4e:9f:28:51:2e:
45:03:c6:62:92:ea:f0:1d:02:73:90:35:e3:cd:00:
31:0f:57:39:79:50:ad:46:75:dc:64:66:69:57:7e:
f1:1f:c1:eb:eb:4c:a4:3e:f8:29:11:59:e7:22:4b:
d7:da:f4:41:5f:2a:f6:55:cd:df:86:b3:44:52:9a:
52:3e:2e:39:ac:86:d0:89:a5:99:74:6c:76:97:52:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8D:A2:0F:53:1C:A0:5B:A9:13:37:4A:5C:40:2B:CF:CA:F3:68:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10033961-c437-4201-87b8-c9dfc05eb475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:c400::/48
Signature Algorithm: sha256WithRSAEncryption
91:9c:28:b0:41:68:59:ff:c5:87:95:c8:a4:90:99:6c:b3:4a:
ec:5f:45:9d:5e:1d:ef:24:a1:f3:5f:bd:97:1b:90:a2:ac:f1:
45:6c:30:ba:7e:ae:97:87:43:ca:44:90:ce:e8:99:2d:59:98:
9a:2e:19:3b:a8:9b:83:77:17:11:b2:16:b8:72:31:ca:dc:b9:
f4:a8:18:a8:e2:6f:d8:3e:f0:2e:fb:83:b0:d0:d9:b7:93:f2:
a7:01:4e:78:67:9d:f3:2f:b0:de:3c:ab:ef:9e:01:38:94:c6:
10:85:cd:ee:1f:ae:36:4e:a5:14:38:87:97:da:e2:2b:8b:28:
c2:e0:0f:99:c5:77:54:cc:37:64:f7:d4:9f:fa:ac:11:dc:5c:
66:75:d0:c6:a8:42:71:0e:5c:0e:99:24:25:aa:a4:75:f9:73:
25:60:74:3e:63:a5:13:4e:4f:51:e5:dc:5c:41:00:b4:2a:a2:
ca:b5:4f:ee:15:8b:df:b0:4c:e2:36:46:07:bb:6f:5d:5e:fc:
f8:ce:c0:18:93:5b:e0:cd:5f:c3:2a:95:b5:e6:ec:d6:cb:5a:
88:6f:87:70:5c:86:34:3b:9a:40:76:2c:25:1f:35:bf:f3:d5:
02:93:f8:d7:c2:0f:82:19:35:15:53:99:93:cc:29:e7:5b:80:
24:af:1c:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:53:47 2025 by rpki-client