This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa
File: 5831f36f-50de-43df-b1e3-ee6e835954e3.roa (raw, json)
Hash identifier: AWMqEpMBD01+S4wD/iKvRRFQ17CvzKUbaXvnPsaCOQQ=
Subject key identifier: 54:FB:DB:2A:F7:E9:3E:88:2B:4F:F0:F8:83:8E:59:1C:56:FE:30:9B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 422EF78D3511E302E688DD193B66FB37856F683F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa
Signing time: Thu 27 Nov 2025 00:41:56 +0000
ROA not before: Thu 27 Nov 2025 00:41:56 +0000
ROA not after: Wed 25 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.66.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2e:f7:8d:35:11:e3:02:e6:88:dd:19:3b:66:fb:37:85:6f:68:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 27 00:41:56 2025 GMT
Not After : Feb 25 23:59:59 2026 GMT
Subject: serialNumber=85b66c62f8dcacc3b3ffdd69884f40b44463d4a6a93014aa32e28728a60f6105, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:31:ad:5c:d5:80:aa:36:64:71:73:a9:ed:
e9:8e:02:e7:9f:0e:a5:59:8f:8d:aa:11:e0:01:28:
92:72:bb:ab:c5:87:1e:16:d0:81:e9:bb:46:67:56:
21:ab:2d:88:de:ce:d5:90:ee:d6:e6:82:a7:5f:a2:
aa:e8:01:46:7f:da:46:e9:ff:f4:9e:db:da:af:79:
15:e3:dd:e8:ff:6f:50:8a:38:bd:37:e2:f2:bd:86:
88:f8:c4:a6:99:64:6c:07:c2:d5:4a:25:69:8b:f2:
f9:db:75:a2:4f:2e:7e:2a:fe:2f:9a:39:3f:b6:95:
05:90:3f:11:9b:19:b9:d8:d0:0e:9f:b7:4b:cb:e7:
88:23:b7:83:98:07:f1:b5:64:40:18:d4:5e:6e:6d:
d4:5d:b5:83:aa:08:8e:36:04:f6:89:42:fc:e7:2b:
bb:2d:94:d5:ef:82:49:e5:87:a4:4e:18:a6:79:61:
52:a7:96:58:80:98:b9:e1:bc:d8:e7:1c:6e:25:ed:
da:f3:d4:bf:3b:69:a2:0c:45:16:4f:a5:0b:7d:17:
92:45:8b:89:68:3c:6d:48:af:c4:9f:41:ec:22:76:
a5:64:b3:05:b0:14:bd:ae:9b:04:8a:27:f4:e0:61:
6a:20:47:ff:00:08:55:c1:7e:31:0e:0b:0e:c8:19:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:DB:2A:F7:E9:3E:88:2B:4F:F0:F8:83:8E:59:1C:56:FE:30:9B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5831f36f-50de-43df-b1e3-ee6e835954e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:1a:f2:8c:57:64:4f:63:a3:9d:96:18:97:61:5c:16:03:cf:
b8:68:ad:63:e0:bc:ca:9e:44:df:13:28:73:37:f3:d3:b8:46:
32:da:fd:b9:2c:10:f6:2e:17:a7:c6:15:cf:d6:6b:da:98:96:
ed:92:59:53:c5:a0:55:7a:a8:72:1c:77:f2:15:3c:d5:61:c3:
a8:a8:83:cb:e2:5a:f4:4a:94:1a:3d:56:df:ed:b6:0b:af:24:
39:11:54:81:1b:35:41:0d:d9:9e:35:35:af:a8:ac:cc:da:6c:
87:b7:73:a3:bd:dd:d1:14:7b:f9:37:88:1c:49:26:25:82:ed:
5e:a6:56:e6:c4:c7:c7:60:73:c2:39:73:cf:b1:d3:47:58:b0:
5f:40:e7:4a:d2:63:32:28:da:ff:45:d6:b9:a8:7d:56:80:61:
e3:c6:f2:95:07:79:c5:6f:d0:26:4f:81:e7:05:88:14:02:49:
a2:9f:60:a6:e3:5a:2d:e0:fe:75:ea:0c:d5:d8:cc:a7:0f:73:
96:87:a4:e7:b5:fc:29:dc:a1:a4:fe:b6:c9:6b:50:d6:09:04:
53:28:89:ff:21:e9:fe:38:9e:1e:f0:63:fc:ef:26:54:30:61:
b2:e8:90:2f:4e:00:6f:c6:23:fc:5f:8a:03:36:ae:72:4d:11:
6f:a5:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:24:23 2025 by rpki-client