This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616b68e5-c6f1-4f20-954a-c46d16edaaf6.roa
File: 616b68e5-c6f1-4f20-954a-c46d16edaaf6.roa (raw, json)
Hash identifier: OK4hxC/AsTm7pFwUxawBDOyIX5k2iUtjbMJ7tn264ms=
Subject key identifier: 2A:74:6F:AD:E2:49:70:C5:B4:5A:44:CC:40:8A:AA:AD:45:18:8B:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 160CF466E072BD7F6C4FC0ECFC8BC2ECBAC5339E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616b68e5-c6f1-4f20-954a-c46d16edaaf6.roa
Signing time: Tue 25 Nov 2025 01:01:08 +0000
ROA not before: Tue 25 Nov 2025 01:01:08 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:ec00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0c:f4:66:e0:72:bd:7f:6c:4f:c0:ec:fc:8b:c2:ec:ba:c5:33:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 25 01:01:08 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=20dcd36357c2eb6f1b9543a52d21688d7381eed5a905745cd0851c803771f6d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:e7:7c:20:18:ef:66:1c:75:2f:01:13:a4:
bb:02:0e:e1:62:76:15:63:f7:e3:c7:81:1c:37:6d:
80:1e:b9:11:b4:d8:d3:88:8a:f9:90:63:63:3c:ae:
33:e3:5d:6e:1a:fc:0b:6d:fb:d3:15:ab:69:76:ce:
88:0f:ec:44:21:a6:5e:ea:7a:df:dd:2e:58:4d:49:
82:29:3b:b5:68:e7:6a:79:98:9b:1d:9c:c8:80:33:
9a:62:88:4e:78:58:00:1e:68:35:b7:2e:50:ff:7b:
8c:1c:98:22:4d:c6:1c:bd:ff:ef:78:1d:4b:b2:e9:
42:03:6d:2c:19:54:d6:16:fe:fa:30:37:05:d7:b4:
5c:15:61:b2:6d:be:91:fe:80:37:43:94:37:93:98:
fa:e2:7c:70:9a:64:88:5b:b8:c6:b8:12:41:a3:c9:
31:c5:2e:dc:2e:18:26:1c:35:1a:e0:8e:c6:4e:a6:
22:3c:e8:7b:30:6b:1e:4e:05:2b:9b:86:73:c0:31:
a9:2f:75:64:80:0e:50:d3:d2:51:43:79:bc:78:bd:
cd:5c:11:08:87:0a:0d:c4:7c:95:1d:07:5b:27:b7:
a6:36:d2:25:8e:0f:a5:a4:5d:c5:f1:20:ac:16:86:
d0:0c:75:ca:96:56:0a:47:d8:3b:f1:79:ff:35:db:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:6F:AD:E2:49:70:C5:B4:5A:44:CC:40:8A:AA:AD:45:18:8B:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616b68e5-c6f1-4f20-954a-c46d16edaaf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
20:6d:fe:e0:ae:42:29:e4:5a:32:16:97:51:05:21:02:14:dd:
2f:87:f4:59:1f:13:91:38:c3:e0:39:d8:0a:3a:01:b9:cb:15:
6b:2d:fd:08:46:62:4b:ea:92:c1:fe:c3:92:43:59:55:46:4d:
ea:9f:43:2a:00:aa:e1:85:11:6b:ff:ab:11:5d:2f:2b:9a:7c:
05:79:86:d3:32:d8:2e:65:8d:79:3a:63:5a:b7:92:b0:60:bd:
38:ee:55:3f:45:ff:20:dd:2b:7b:50:79:36:8c:84:65:db:d6:
72:ce:b9:fa:1b:85:07:7f:27:d2:4d:d7:35:79:3e:0c:55:97:
40:8d:17:bb:6f:cd:fb:54:8f:bd:f0:b7:73:9a:18:6e:7d:00:
7b:5a:89:fb:9e:15:92:26:92:9a:7d:a9:f9:aa:87:b8:6c:3b:
4a:9c:f2:15:8f:d2:d7:b3:af:1f:d3:a1:38:44:d6:78:3d:61:
da:13:8b:d7:d1:4b:44:5a:06:55:4d:0b:54:48:57:47:35:a0:
90:d0:3c:d6:67:a6:16:10:bb:da:eb:68:fc:21:80:0f:31:72:
2c:af:0b:f1:66:70:df:73:07:8d:5f:cb:c1:d1:83:7d:aa:e9:
17:79:b8:25:18:c2:51:a1:5c:5f:4b:45:ac:9f:3d:27:ff:ab:
fb:7a:05:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:37:45 2025 by rpki-client