This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa
File: 5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa (raw, json)
Hash identifier: cpJivTH5IsEbqXMAl4MHp1Kazu72cngxtH/nUo1aiMc=
Subject key identifier: A6:FC:44:9D:FB:74:B2:1D:8A:25:1C:5A:83:62:06:D8:0E:E8:18:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F2F0370E1DB89D2B4D7B1823FFF309600A88FCA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa
Signing time: Tue 02 Dec 2025 00:40:39 +0000
ROA not before: Tue 02 Dec 2025 00:40:39 +0000
ROA not after: Mon 02 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2f:03:70:e1:db:89:d2:b4:d7:b1:82:3f:ff:30:96:00:a8:8f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:40:39 2025 GMT
Not After : Mar 2 23:59:59 2026 GMT
Subject: serialNumber=fbc9c4231fa93a94703a05abe2cb0f18ef0eaba169f69d7168aa0cd9c7040c37, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:16:ab:0d:f1:6f:06:a2:ca:a2:46:04:81:
ca:91:b7:ae:bb:13:b8:2a:52:64:92:df:58:cb:7a:
0c:93:51:3a:93:2a:01:76:7b:54:a9:79:f4:df:4b:
1c:df:7f:8f:9f:03:b1:7b:de:0a:41:82:9f:3d:5a:
e7:00:cf:a4:96:6f:47:4c:96:30:ba:2a:e9:13:68:
43:7c:01:f0:a4:94:05:98:99:f0:39:71:1d:51:18:
41:b4:dc:f7:8d:a4:fa:74:80:e6:2a:f7:91:c5:b3:
fe:78:79:4a:c4:4e:55:cf:89:51:51:a9:5b:99:42:
a6:b5:16:e1:ea:58:cf:ef:ac:f8:aa:51:da:44:5d:
e9:df:38:28:36:51:04:69:45:a9:44:1c:a7:1f:1c:
b2:a1:07:ab:f8:26:87:0d:07:b4:77:fe:67:a8:77:
3a:9e:8a:a3:1f:c7:16:d0:a5:83:6d:9b:14:3a:17:
60:98:f4:8c:f0:0f:73:99:c3:8a:f8:48:a1:0d:eb:
16:da:a9:f9:f5:29:56:57:03:73:69:03:4b:ab:bb:
eb:61:25:8d:4d:e9:2f:2c:fb:5f:31:f3:77:13:15:
9b:a1:72:8b:c6:d1:03:d9:b1:69:26:a3:74:5d:48:
45:94:68:eb:96:07:ff:c1:51:ca:d7:1d:a1:92:c4:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FC:44:9D:FB:74:B2:1D:8A:25:1C:5A:83:62:06:D8:0E:E8:18:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.5.0/24
Signature Algorithm: sha256WithRSAEncryption
13:99:08:43:61:f8:10:95:8b:0e:c0:0e:14:c3:e2:d9:87:90:
8b:0f:0f:d9:39:dc:b2:7f:5f:62:ae:16:aa:86:d9:2b:82:ec:
8b:bb:b1:51:43:ab:8d:69:55:8e:bf:38:b3:09:67:4a:a7:90:
41:eb:5a:76:21:f0:58:a1:85:16:0c:43:41:11:05:76:49:99:
fe:2d:d4:90:9a:e9:9a:96:ab:ed:7f:dd:b5:f3:69:87:93:c5:
33:42:d5:7c:3b:f9:16:36:70:77:8b:0b:46:b0:8a:08:3a:75:
c6:56:85:40:33:a3:7c:dd:a1:8b:b3:da:b7:5f:c2:1c:43:19:
50:c0:4b:30:62:b0:30:e9:57:1c:1f:4e:bd:54:0d:c1:09:21:
29:1b:cd:5d:3f:47:9b:03:b0:00:ae:11:fc:23:74:12:75:33:
cc:cc:92:08:7b:30:9a:fc:bb:23:21:3c:47:2e:32:a4:28:ed:
8d:9b:77:3e:47:38:20:83:75:c9:aa:f5:bb:73:32:d7:eb:15:
75:8b:9d:a9:0c:c1:e6:a4:60:93:22:fb:63:3e:2f:d0:15:4f:
75:60:ba:34:60:fb:70:c4:e7:8f:b9:19:f3:8c:36:aa:db:40:
83:26:d2:4f:1b:b0:a0:3a:ff:8b:25:e2:fc:c2:06:d2:48:7b:
75:24:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:30:46 2025 by rpki-client