This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2018ed2f-1a67-4075-bdda-cbfb6f251980.roa
File: 2018ed2f-1a67-4075-bdda-cbfb6f251980.roa (raw, json)
Hash identifier: l88tahxy2F4Rupy/MTdx9jTEE3Ji0dWauccop/ACEdU=
Subject key identifier: 96:F2:8F:F5:03:EC:1A:50:A3:01:B5:5C:52:57:42:33:6D:07:BA:7D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 132A193C170F2359F921A74889BBA4B0BF77E891
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2018ed2f-1a67-4075-bdda-cbfb6f251980.roa
Signing time: Wed 03 Dec 2025 01:20:48 +0000
ROA not before: Wed 03 Dec 2025 01:20:48 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2a:19:3c:17:0f:23:59:f9:21:a7:48:89:bb:a4:b0:bf:77:e8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 01:20:48 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=ec0c8f19818b4cbb4ed9982fc36d7aee2ae1da9b47b611faacb1bca0ea0c0149, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:95:93:b1:88:57:50:d3:23:c6:c3:89:37:1e:
fa:dc:43:dd:af:59:37:0b:c9:a1:52:d5:26:35:d7:
3f:e7:8d:5e:23:15:a7:18:a8:62:82:c7:c0:62:03:
f7:44:42:e9:9c:4e:e6:ed:f2:92:9d:f7:1f:ed:3b:
f4:60:9e:46:79:8b:53:59:5d:84:b4:3f:9b:8e:42:
d8:f8:f9:4e:ea:dd:2a:02:f1:c9:80:83:42:e1:c6:
56:4d:e1:bd:b6:17:4d:c8:cc:ce:e7:31:04:8b:aa:
3a:98:76:7d:7f:80:0c:72:8e:19:79:dc:c6:ea:5b:
cf:6b:b0:25:a9:8e:fb:a7:f2:80:b1:b1:c6:60:3f:
ea:aa:2b:26:4f:1f:77:eb:03:98:f6:87:c5:70:99:
1c:39:c5:30:94:9c:67:24:63:1e:1a:51:bd:c6:75:
7b:a1:3a:2a:27:f2:dc:dd:7d:ed:4a:86:c6:12:cf:
7e:53:31:23:cd:9c:ba:21:f8:31:df:97:a3:47:71:
b3:6e:cc:a7:d9:8c:b2:30:b2:4e:4f:2a:9b:18:43:
91:fb:14:e3:1a:c4:cb:0d:83:14:d4:78:ad:42:32:
33:6a:3a:c8:33:62:98:04:b8:e6:82:52:15:b6:1c:
d8:35:00:f0:28:e5:0b:a2:ba:67:a9:7f:72:3c:d3:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F2:8F:F5:03:EC:1A:50:A3:01:B5:5C:52:57:42:33:6D:07:BA:7D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2018ed2f-1a67-4075-bdda-cbfb6f251980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.20.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:6f:61:78:0e:37:6c:78:da:8d:d9:23:c4:05:e7:09:5f:72:
62:e2:ab:f1:db:2d:bf:19:fc:cf:81:cf:bf:0f:ac:e2:99:59:
fd:76:df:75:81:48:48:6c:7c:38:5e:c6:9d:f7:fc:bc:66:e2:
8b:11:64:45:23:99:26:f5:d1:4e:72:49:2e:82:58:1e:d9:91:
c0:30:ba:68:65:58:d9:26:ff:69:72:bd:3d:32:ab:b8:18:06:
2b:b2:4c:7e:9d:df:9d:54:79:66:c9:51:98:ba:b0:e2:6a:80:
69:c8:ee:e9:b8:45:8b:ef:5a:70:88:cc:91:35:da:60:51:18:
b2:f8:f9:f5:3e:fa:49:71:46:96:cf:80:85:d2:2a:26:19:c1:
54:eb:11:46:88:a5:96:de:12:5f:1d:2e:c8:5e:e2:ce:32:49:
e0:8b:00:aa:fd:d6:e9:12:ab:4c:cf:c7:41:c3:58:00:34:58:
13:4c:78:d6:cd:bf:29:20:6b:5c:1d:b8:c1:07:c5:46:4e:a8:
af:e7:f3:7d:04:2e:e6:7e:02:43:4c:0e:2a:b9:b8:09:63:fd:
c7:7b:e6:97:61:ed:34:e8:da:60:d2:9a:86:cf:5d:88:8f:4b:
34:d0:64:f9:55:a5:60:76:96:97:a9:2f:ba:df:46:1c:92:96:
60:96:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:20:46 2025 by rpki-client