This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68dcad37-18c1-468c-aca3-9e34ef1240c2.roa
File: 68dcad37-18c1-468c-aca3-9e34ef1240c2.roa (raw, json)
Hash identifier: GC4RiGgD6KiFj8DbWRq+oY3Fwaqyt5orCNLoypEbW78=
Subject key identifier: 18:B0:37:7C:32:A0:78:B9:2F:D1:BB:31:6D:3E:7D:13:2C:A0:65:EE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04B6720D0FBBFF4FCE6EEB8D7ADF14EACE7C83C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68dcad37-18c1-468c-aca3-9e34ef1240c2.roa
Signing time: Sat 06 Dec 2025 02:00:06 +0000
ROA not before: Sat 06 Dec 2025 02:00:06 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 149.128.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b6:72:0d:0f:bb:ff:4f:ce:6e:eb:8d:7a:df:14:ea:ce:7c:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 02:00:06 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=6d2692f4627982e1405b7c2d662c665aa7498131be0205d7bcb1d11021615882, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:42:b0:e2:0d:4e:0b:1d:13:39:56:aa:4e:64:
19:80:30:74:58:03:be:53:1a:45:16:0e:b7:b2:39:
8e:4c:cc:76:b2:ce:31:5b:bd:87:65:7f:4d:56:8b:
44:4a:bf:b7:16:1f:6e:01:64:41:af:be:79:3c:0e:
59:62:3b:8d:78:f7:95:3a:d6:d9:b5:8f:73:48:ea:
51:ec:23:16:65:cc:3f:03:94:ea:d5:fc:b5:aa:1f:
5b:22:e1:d0:b8:c1:9f:62:94:f9:1e:9c:9a:98:c1:
89:e1:7b:cc:71:3f:9e:f8:d4:cf:c4:6d:3a:5e:ac:
f3:0f:7b:ad:73:e3:7d:d4:45:2f:2b:9a:da:5c:08:
b3:ad:12:da:86:41:ca:f3:35:ba:c3:48:80:23:cd:
81:41:b0:1b:9a:51:fb:35:de:c3:97:18:05:98:ff:
17:7c:57:1a:80:af:79:0e:32:be:3f:40:f9:b5:7c:
5a:e9:47:82:6e:af:12:cf:52:59:9d:79:b5:15:6c:
cc:45:b7:75:74:a4:71:94:48:3f:a9:fc:21:ce:54:
e6:27:c6:65:22:c7:4b:e9:4c:9b:f1:13:a5:66:88:
68:b6:8a:14:22:a3:4f:42:0a:00:b6:cc:65:6d:39:
0c:4c:05:6f:7b:b3:a7:60:52:fd:f9:c5:df:7c:cc:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:37:7C:32:A0:78:B9:2F:D1:BB:31:6D:3E:7D:13:2C:A0:65:EE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68dcad37-18c1-468c-aca3-9e34ef1240c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.128.32.0/19
Signature Algorithm: sha256WithRSAEncryption
14:fc:3d:24:a3:fd:d5:de:4e:55:f4:9f:9e:f3:5b:2a:ea:fc:
d5:54:03:4d:e2:d4:a7:f8:cc:28:f1:0b:3a:06:9f:57:a8:a9:
c2:68:9a:72:03:67:01:c3:d6:75:95:84:de:c1:58:fb:18:04:
8c:d2:4e:7a:e1:09:8c:f7:81:e4:d0:ca:07:02:23:7f:81:c6:
a5:bb:54:4a:2d:cb:12:61:e4:6d:31:a3:8b:17:00:84:de:e3:
2a:af:73:68:ea:2d:ed:49:69:38:6e:98:fe:a5:43:71:f1:e5:
0c:a4:3f:72:1b:26:56:a5:4e:b3:84:7e:7e:5e:ad:00:1b:ce:
95:ce:ca:48:1c:01:f1:29:2f:5a:60:b9:19:cb:bb:3a:73:74:
a0:91:06:c8:59:ec:2d:10:fd:5e:08:dd:5c:54:39:f3:22:94:
af:03:62:67:2c:7c:3e:f8:e6:ca:41:1a:24:3d:40:60:82:bc:
81:8c:c9:ec:f7:a2:89:49:80:f5:29:c4:c5:f4:96:45:fc:95:
dd:09:16:7d:9d:a9:80:4d:4b:7e:4d:53:15:ef:df:8c:85:50:
c8:c5:ce:e7:03:e2:cf:72:40:bd:35:11:72:58:ac:3c:6a:c0:
ee:d9:51:2e:62:53:bd:20:26:7c:04:79:d8:de:88:6d:48:4f:
b6:77:21:f0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBLZyDQ+7/0/ObuuNet8U6s58g8QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIwMDA2WhcNMjYwMzA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDI2OTJmNDYyNzk4MmUxNDA1YjdjMmQ2NjJjNjY1YWE3
NDk4MTMxYmUwMjA1ZDdiY2IxZDExMDIxNjE1ODgyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpQrDiDU4LHRM5VqpOZBmAMHRYA75TGkUWDreyOY5MzHay
zjFbvYdlf01Wi0RKv7cWH24BZEGvvnk8DlliO41495U61tm1j3NI6lHsIxZlzD8D
lOrV/LWqH1si4dC4wZ9ilPkenJqYwYnhe8xxP5741M/EbTperPMPe61z433URS8r
mtpcCLOtEtqGQcrzNbrDSIAjzYFBsBuaUfs13sOXGAWY/xd8VxqAr3kOMr4/QPm1
fFrpR4JurxLPUlmdebUVbMxFt3V0pHGUSD+p/CHOVOYnxmUix0vpTJvxE6VmiGi2
ihQio09CCgC2zGVtOQxMBW97s6dgUv35xd98zAL/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGLA3fDKgeLkv0bsxbT59EyygZe4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY4ZGNhZDM3LTE4YzEtNDY4Yy1hY2EzLTllMzRlZjEyNDBjMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWVgCAwDQYJKoZIhvcNAQELBQADggEBABT8PSSj/dXeTlX0n57zWyrq/NVU
A03i1Kf4zCjxCzoGn1eoqcJomnIDZwHD1nWVhN7BWPsYBIzSTnrhCYz3geTQygcC
I3+BxqW7VEotyxJh5G0xo4sXAITe4yqvc2jqLe1JaThumP6lQ3Hx5QykP3IbJlal
TrOEfn5erQAbzpXOykgcAfEpL1pguRnLuzpzdKCRBshZ7C0Q/V4I3VxUOfMilK8D
YmcsfD745spBGiQ9QGCCvIGMyez3oolJgPUpxMX0lkX8ld0JFn2dqYBNS35NUxXv
34yFUMjFzucD4s9yQL01EXJYrDxqwO7ZUS5iU70gJnwEedjeiG1IT7Z3IfA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:03:02 2025 by rpki-client