This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4faa1bd2-03e8-4b93-adcd-b37abd4a32fa.roa
File: 4faa1bd2-03e8-4b93-adcd-b37abd4a32fa.roa (raw, json)
Hash identifier: hQCEc8qAYSjTrzGxD1ktBPJuNa3NrhqGsQEE4/HkMoE=
Subject key identifier: DC:70:D6:38:3B:D4:1A:35:30:60:FE:8D:30:42:18:00:E9:B2:79:A7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7635A2308A461E4F7F0CF913A66B3CF90CA23E0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4faa1bd2-03e8-4b93-adcd-b37abd4a32fa.roa
Signing time: Fri 21 Nov 2025 00:00:56 +0000
ROA not before: Fri 21 Nov 2025 00:00:56 +0000
ROA not after: Thu 19 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 89.60.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:35:a2:30:8a:46:1e:4f:7f:0c:f9:13:a6:6b:3c:f9:0c:a2:3e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 21 00:00:56 2025 GMT
Not After : Feb 19 23:59:59 2026 GMT
Subject: serialNumber=7c5a18cb714796a467e1649ef5ebca6008c2a2857ac7ea043729cb674f6146f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:b7:c9:26:79:10:f9:0f:0f:5a:dc:43:c4:
3c:83:5e:72:49:d6:bd:44:61:e5:e0:f1:f1:bb:47:
2b:04:83:56:84:09:91:f4:6c:77:84:2c:03:13:19:
a4:53:4b:95:cc:8f:5e:08:f3:d5:80:45:81:76:1f:
e5:ee:fc:2d:28:96:52:58:1b:24:09:05:a6:ef:e9:
45:f8:5e:73:a1:fe:77:62:ed:46:a3:f5:15:eb:4e:
5d:8b:b6:53:5b:60:2d:dc:a3:80:ec:1d:be:ab:38:
2f:04:16:9a:af:92:52:8c:97:1a:4a:20:d9:91:b4:
7c:65:27:88:12:ed:34:cc:6f:d8:74:be:52:98:65:
f2:8f:60:b6:bf:93:0d:d2:7f:32:fe:a3:73:e4:de:
61:c4:a6:50:6d:6c:d1:07:4f:34:e0:dd:91:61:6c:
70:3f:9c:62:ca:d0:47:34:bd:c8:37:1f:1c:31:39:
37:09:da:01:89:69:82:2c:08:76:f1:be:6f:d0:7c:
b4:f0:7b:6c:59:4f:75:1b:a5:a6:a9:58:6b:f9:87:
56:04:82:f4:72:b8:75:82:1d:98:db:38:1f:cc:af:
c8:18:cf:e9:8e:31:71:8d:a9:3b:37:1b:6f:b2:14:
90:49:4c:de:99:71:14:42:a9:e2:ba:ce:20:6e:c4:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:D6:38:3B:D4:1A:35:30:60:FE:8D:30:42:18:00:E9:B2:79:A7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4faa1bd2-03e8-4b93-adcd-b37abd4a32fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.60.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4f:5b:86:87:94:2a:08:8f:41:c8:16:d0:d6:21:0f:96:19:cf:
01:88:6c:99:ba:55:6e:d0:d3:7e:4f:38:e3:89:d5:91:ea:41:
25:2c:7b:c2:1a:1b:fe:44:c4:91:88:2e:6d:cf:61:44:9b:1c:
e2:38:ad:3d:b2:70:32:80:91:4e:2b:fd:a2:95:98:a2:32:13:
f4:f3:74:7d:38:92:2c:37:97:a3:a4:b0:c6:c4:dd:5e:08:9c:
b2:22:78:df:4b:66:a5:fa:fc:e5:34:e2:27:58:41:9b:ec:a4:
28:d8:2b:77:9c:47:59:2d:38:8c:b0:d5:03:0b:35:82:06:87:
1b:6d:38:c8:fd:c0:d3:0e:3f:2e:89:e4:c9:b8:0f:da:8c:cb:
ea:32:ba:9e:75:38:85:23:20:7d:a4:c6:af:10:cb:cb:0f:e9:
31:2b:d6:1b:fe:52:24:e2:6b:b6:95:04:6f:4b:26:19:71:c0:
5c:66:72:66:3b:9e:8c:a1:d7:8d:73:43:89:aa:2c:8a:95:83:
52:7e:d8:35:37:bf:60:7e:45:d0:f2:70:4e:06:9b:f0:1a:56:
17:b1:cb:bc:92:60:c8:04:67:81:af:f7:3a:8e:80:3e:22:36:
99:70:d5:3d:8b:75:e9:61:19:f0:e6:ec:55:59:87:6c:25:21:
61:bf:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:31:18 2025 by rpki-client