This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa
File: 12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa (raw, json)
Hash identifier: FxiDvDd+GslC77MchzoAuhs988LU+Z5EP5aydwoO03g=
Subject key identifier: 68:E0:60:CF:3E:3A:DF:BC:FA:0D:47:86:0E:04:E0:61:1D:53:1B:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 041A7EBF1AAE2B53F100C9C31F27F09CCAA76538
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa
Signing time: Sat 29 Nov 2025 00:10:05 +0000
ROA not before: Sat 29 Nov 2025 00:10:05 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff4:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:1a:7e:bf:1a:ae:2b:53:f1:00:c9:c3:1f:27:f0:9c:ca:a7:65:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 29 00:10:05 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=f5c11a7bd08a23c0d970d33051d44fff93a7fce1d848967d521250a50450e5d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:5f:68:91:68:5d:d6:e4:5d:55:d7:71:32:
eb:00:ec:4b:c2:07:29:39:ab:38:9f:38:ac:81:0e:
ba:9f:40:15:da:f2:82:04:1a:6b:f8:fa:a6:5c:96:
b7:ac:d1:92:6d:d6:15:da:4b:a7:7c:e4:05:d3:fd:
74:7e:bd:5e:1d:bf:10:bb:e8:4a:1a:63:79:db:15:
3c:ab:14:09:a8:3a:9b:30:2f:c5:c7:f3:6c:51:40:
b3:0d:74:0f:a0:0e:8b:57:f6:92:39:a8:f8:3b:c0:
f3:f2:0b:6d:8e:95:e5:17:cf:d4:8b:2e:3b:c5:28:
54:8b:04:a1:5b:c4:7c:fb:ed:38:35:35:b2:98:e3:
41:a6:e5:0a:71:70:0b:38:30:55:bc:57:a3:ca:6c:
fc:79:db:87:c5:c5:b5:de:47:ee:28:c5:1e:50:ad:
5f:d7:c4:e5:2f:2a:29:39:55:3b:c0:7b:0c:ba:a0:
d9:b6:72:bf:eb:15:67:5b:dc:b5:89:e3:37:75:88:
9b:d5:c7:2f:ca:91:4e:e0:47:c5:27:70:41:bb:c7:
5c:dd:4f:76:b4:04:23:42:b4:bf:37:79:3a:0d:4d:
c4:3f:c0:8c:f1:89:4f:94:74:72:c4:b2:77:fa:c2:
52:54:25:ea:2f:48:95:d7:43:81:d3:20:de:c1:67:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E0:60:CF:3E:3A:DF:BC:FA:0D:47:86:0E:04:E0:61:1D:53:1B:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:c000::/40
Signature Algorithm: sha256WithRSAEncryption
9e:a3:7c:e0:00:8b:2d:e7:f6:51:3a:36:74:5a:c9:87:e8:40:
99:16:ec:04:e8:c6:3f:15:46:42:f1:de:1f:23:0b:2c:8b:83:
af:d7:03:6b:70:01:ab:50:1b:f6:2f:6d:d2:1a:3a:73:04:49:
56:76:fb:4f:c1:2d:c7:98:1b:5e:dc:8d:f4:c8:26:48:15:b2:
6e:ef:fa:3b:ba:bd:95:5e:0a:2e:9f:4c:c4:8d:49:9b:5a:eb:
d8:80:97:bc:9f:6f:20:61:c6:56:c6:48:86:a2:31:f7:21:f6:
72:3d:a1:43:66:f7:bb:41:6b:5e:7b:f3:ae:08:f7:73:08:65:
09:ce:08:14:0a:8d:90:d2:83:37:84:42:fc:4f:70:1b:98:dc:
fd:2b:65:51:e2:8b:ab:e3:72:34:40:45:2e:23:ba:99:25:ed:
5c:54:11:a8:1d:d9:26:f9:34:a8:0b:ac:66:49:a0:34:01:00:
6a:5e:fa:69:30:b3:11:66:34:4e:3e:e6:94:76:d9:9b:dc:3c:
00:58:cb:b9:51:a5:21:92:61:03:23:50:6b:3f:b0:6e:ab:aa:
8b:00:c4:91:01:15:d7:a8:60:b5:e5:52:de:09:4e:27:08:92:
e8:b8:96:ac:d4:aa:98:11:5b:9b:4a:71:4b:e4:24:7c:2e:0a:
bc:69:67:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:01:57 2025 by rpki-client