This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ca0bb-4e09-403b-882c-301eea6f0a9e.roa
File: 550ca0bb-4e09-403b-882c-301eea6f0a9e.roa (raw, json)
Hash identifier: wo3ijpX1WpVnPX1d0i2bw6RcsyUNdjmj6/53q3WqXQc=
Subject key identifier: 1A:A3:A9:B4:F2:DE:71:11:0D:93:D3:D1:56:A0:A5:39:52:03:5B:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 77F6A87B5AA99CD808F4CF6BC5FE110CFF8238E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ca0bb-4e09-403b-882c-301eea6f0a9e.roa
Signing time: Thu 27 Nov 2025 00:00:23 +0000
ROA not before: Thu 27 Nov 2025 00:00:23 +0000
ROA not after: Wed 25 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f6:a8:7b:5a:a9:9c:d8:08:f4:cf:6b:c5:fe:11:0c:ff:82:38:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 27 00:00:23 2025 GMT
Not After : Feb 25 23:59:59 2026 GMT
Subject: serialNumber=04ff75e74e3a2f02d989f53851284926e67f595573fe3b854ffe0babdd988bc8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:32:7e:35:d4:70:40:5c:61:fa:a3:c3:ea:
22:29:98:f1:4a:e2:7d:24:1c:71:a8:5a:08:e9:b9:
02:da:ba:34:35:14:12:5a:c8:1c:0e:e8:75:1e:c2:
ef:4e:01:d4:c5:94:9e:6c:4b:99:e8:92:e4:5d:ee:
1a:86:4a:6f:70:06:26:bb:51:88:55:c0:10:22:3a:
98:5d:1f:c0:ee:53:e9:24:80:38:7e:ed:57:cb:cb:
83:3a:d5:29:c8:ea:97:17:ea:f8:b4:1c:e8:36:b1:
d4:2b:f9:f3:f7:4c:25:e1:6d:49:63:84:08:29:93:
dd:95:72:df:6c:95:fe:cf:5c:69:40:fa:43:15:77:
3b:ea:ee:b1:86:84:bf:a4:6f:36:00:48:ba:1e:45:
23:de:cb:37:df:65:cf:13:43:d0:30:48:8c:91:8c:
0a:98:ca:53:8b:0d:e6:56:32:89:59:fe:f6:b2:b0:
8e:7b:a0:a7:2f:f3:fa:d7:13:ac:d6:f7:86:b9:41:
11:3d:46:f4:02:7b:27:d0:cc:61:ea:bc:79:27:d0:
aa:d5:1b:f1:32:40:c4:7d:ea:ff:81:26:84:ca:20:
54:c9:16:8e:28:7e:11:dc:ee:54:e9:63:0c:31:54:
02:24:e3:86:20:75:aa:a9:ae:e4:06:c0:2c:9a:6d:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:A9:B4:F2:DE:71:11:0D:93:D3:D1:56:A0:A5:39:52:03:5B:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ca0bb-4e09-403b-882c-301eea6f0a9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.152.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:05:5f:48:cf:a0:12:50:07:2d:07:ea:63:e6:c9:3f:0b:4f:
a5:3b:d0:ef:25:83:f8:e6:48:25:f0:43:dc:ea:43:99:7c:3f:
f0:f3:d3:dd:15:89:25:39:fb:7e:d3:9d:3b:52:bc:90:2b:c4:
38:5a:73:11:2d:c4:8e:6d:d2:9b:5e:1f:0e:b7:e7:03:16:1c:
54:b6:ce:9e:9a:8c:c7:1a:39:73:49:f5:5a:51:7f:e6:a9:e3:
ab:d2:d5:75:ba:3e:14:08:e0:a1:68:97:88:98:8b:50:23:9b:
43:d4:f6:56:48:ef:5f:a4:95:6a:78:4e:20:1e:a7:33:ea:32:
6f:12:4d:13:af:e8:4c:ee:12:4e:a4:9f:12:f0:7a:3e:0d:77:
b5:81:53:e5:75:01:f2:d3:39:43:d7:70:3f:1c:44:68:e1:70:
6e:01:58:d3:64:21:4f:3d:32:f4:58:8d:17:61:4d:22:91:3a:
74:17:4b:5b:6e:d7:9e:68:ad:42:e4:a3:c3:29:b3:ae:b3:be:
3a:db:4a:94:5d:54:bd:4c:e9:79:30:32:84:b4:24:96:41:bc:
7d:4e:e5:99:ca:28:ee:99:c9:76:15:3a:55:33:d2:bf:ef:3d:
8a:ed:af:e8:d0:c1:02:2e:b4:7f:df:e9:7d:8f:4b:d1:ab:86:
61:0a:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:41:17 2025 by rpki-client