This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53ccc235-9729-41cb-9421-026c1d944b56.roa
File: 53ccc235-9729-41cb-9421-026c1d944b56.roa (raw, json)
Hash identifier: 9vLEDr4o2QcTMOHuZGr0xZjnUJVxAf4P/ACOXNA8rrg=
Subject key identifier: C0:6A:CC:A1:91:6C:72:EC:CE:C6:73:67:AA:8F:0B:70:C0:CD:3B:59
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7AF6E210A9B19599A5E7632D09508B6FDE567458
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53ccc235-9729-41cb-9421-026c1d944b56.roa
Signing time: Wed 03 Dec 2025 01:41:12 +0000
ROA not before: Wed 03 Dec 2025 01:41:12 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f6:e2:10:a9:b1:95:99:a5:e7:63:2d:09:50:8b:6f:de:56:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 01:41:12 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=cfabdf1e5be26c4328523b6e1ecd17e2cb9f2167b511697ace06d0bb3819f2dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2f:52:51:77:00:a4:68:49:2f:db:cb:5b:8c:
c0:10:b7:85:b1:34:8f:a5:17:e2:6e:a4:ef:2f:1e:
b1:28:51:13:72:f7:58:b0:88:7a:7b:8e:43:62:55:
8a:a6:37:9c:cc:79:f6:2c:e1:77:58:88:e3:32:e1:
1c:5b:0a:72:19:69:e8:77:e9:cc:ce:d6:71:03:5f:
82:5b:08:f6:01:32:db:90:34:70:b8:39:51:f4:45:
98:9c:01:fe:db:b0:af:c8:0a:60:23:7b:be:77:34:
f9:32:76:ba:ae:49:33:83:4e:bb:30:e0:eb:03:2d:
38:98:3e:df:80:67:f7:27:b2:6f:3d:9b:38:a0:46:
af:de:e0:1f:45:1f:a0:97:7c:b9:01:2c:34:c0:3c:
92:6a:bf:a1:c5:14:67:78:be:a5:14:2d:16:42:f6:
e8:81:fe:13:2c:1a:45:d0:7f:3d:7e:83:81:43:d5:
79:89:74:d1:72:21:2a:cc:27:01:55:bc:24:d5:dd:
93:db:78:dc:2d:38:80:3c:a9:9b:e4:22:6a:fd:cd:
ab:1e:59:ca:22:98:bb:95:b3:9d:73:1b:19:37:9c:
07:d3:a9:1a:35:19:ed:aa:97:e6:61:e3:34:3c:43:
70:8e:05:bd:d9:f1:e5:71:6c:d3:c9:6a:d3:ee:f7:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6A:CC:A1:91:6C:72:EC:CE:C6:73:67:AA:8F:0B:70:C0:CD:3B:59
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53ccc235-9729-41cb-9421-026c1d944b56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.79.0/24
Signature Algorithm: sha256WithRSAEncryption
be:76:4c:8f:c7:75:c0:cc:a9:02:8f:9b:25:24:af:cb:64:98:
89:62:51:4e:49:6e:e6:ec:b6:6e:89:a4:98:0b:85:70:10:64:
f8:13:12:e2:0c:a1:21:41:d0:60:71:a7:25:fd:42:56:b4:3a:
63:6d:f8:09:e5:25:0e:21:95:e9:f5:38:89:4f:56:75:1c:ab:
25:af:b6:81:95:b0:56:d4:26:92:93:56:c3:4a:d8:00:bc:dd:
40:7c:69:7b:16:2c:69:27:3b:4a:86:d4:4c:a0:e6:89:33:87:
5e:95:0f:dd:84:ef:8a:28:9d:72:99:3d:9a:11:37:00:73:c4:
af:3f:07:e4:d1:33:8b:89:25:09:73:96:cf:cc:8c:16:c9:66:
2d:7b:e5:57:7e:15:d9:f0:23:53:10:fc:24:19:29:ed:d7:c1:
d6:62:d3:be:40:7b:d5:24:7a:36:ec:9a:a9:b5:34:d0:9b:3e:
dd:6d:a5:7b:1d:1a:06:f4:e3:76:a4:db:c8:e8:05:66:42:82:
0d:b4:bd:69:69:e2:e7:c6:36:d8:07:5c:ef:ad:4f:73:50:c6:
a1:7b:37:c8:e8:6d:f7:01:45:a4:20:7a:9d:af:a7:f5:87:c6:
3b:d5:45:ec:35:48:0d:e2:0d:5b:74:e1:dd:8f:3c:a6:1d:74:
37:a3:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:35:39 2025 by rpki-client