This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f600baf-95fc-4f91-9940-ae1a493c4f0c.roa
File: 6f600baf-95fc-4f91-9940-ae1a493c4f0c.roa (raw, json)
Hash identifier: mrlooZPNwQEcaPGeX2q5n93gT0X9eyQ17b1iVhaPGMs=
Subject key identifier: C4:A9:2A:25:4E:50:45:1E:83:FA:8B:F7:5D:CB:FC:94:28:1F:72:0A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B23B03378E603290E98CE77F8B3F06AF608ACD2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f600baf-95fc-4f91-9940-ae1a493c4f0c.roa
Signing time: Wed 03 Dec 2025 01:01:22 +0000
ROA not before: Wed 03 Dec 2025 01:01:22 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:8c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:23:b0:33:78:e6:03:29:0e:98:ce:77:f8:b3:f0:6a:f6:08:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 01:01:22 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=616182e6268cd5c1731816e773d8a1872d8230f53c95b5bd500dc70eadc488e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fa:ca:57:ef:29:1f:e6:32:ed:b7:95:b9:1c:
d2:2d:cf:cf:97:16:9c:49:98:1a:f2:b8:db:9e:ba:
59:c6:d7:1f:57:46:0a:74:c3:84:d7:f6:7f:1c:c7:
b5:da:a5:70:0f:1d:fb:ff:d1:c8:5c:d1:16:9c:7b:
9f:81:2d:1a:bc:e9:c9:db:0a:50:74:68:a3:0c:85:
12:fd:60:bf:12:74:5c:c4:9a:e8:bd:d0:eb:3c:09:
42:0d:14:70:d1:88:73:cd:74:a8:5f:03:3b:52:a0:
13:e4:38:07:b1:98:8d:2b:67:a4:71:a4:f5:96:41:
02:3b:b2:52:4c:85:a6:51:a3:be:1b:d5:66:c5:08:
57:19:db:03:11:56:a0:f1:dd:91:68:85:be:9f:15:
e7:71:d4:b3:2a:d2:ca:6b:7e:03:25:8e:b5:dd:64:
5b:22:80:83:a0:58:88:e5:74:37:ad:2e:c2:d3:03:
f1:23:da:04:75:db:8e:5d:0a:47:84:f7:32:47:9a:
85:2b:e5:ef:6a:34:16:2d:f8:f3:e1:42:6e:93:14:
50:29:6d:42:d3:5d:e4:9a:03:fe:32:61:24:f6:cb:
1b:03:34:7b:23:0e:1d:b9:89:66:ce:d2:2e:9b:22:
08:8b:82:df:5a:43:0f:9d:03:5d:4b:50:f5:18:cc:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A9:2A:25:4E:50:45:1E:83:FA:8B:F7:5D:CB:FC:94:28:1F:72:0A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f600baf-95fc-4f91-9940-ae1a493c4f0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:8c00::/48
Signature Algorithm: sha256WithRSAEncryption
b8:ba:55:19:87:fe:6a:04:be:b0:c1:f2:47:d0:62:2e:1d:d3:
0f:a0:a4:e6:ad:9e:2d:e2:03:5b:b6:ee:ab:37:73:e3:bd:04:
00:57:55:10:27:a8:96:eb:4c:3f:89:f0:04:c7:93:1a:4c:c9:
c9:77:0a:f5:fa:9d:19:04:8d:b5:40:cb:7f:d9:c1:fd:4a:e1:
47:32:a3:23:1f:8e:63:54:c7:ce:e3:9e:a9:62:6a:35:64:2f:
9e:43:38:cd:c6:26:bc:af:9e:4f:58:eb:59:4a:48:3f:39:df:
1e:86:df:1a:2c:42:e4:d2:c0:bd:22:17:59:7a:b3:f4:93:ec:
ec:36:a8:a0:d3:7e:fa:58:e4:32:fe:f2:17:cb:27:73:52:b3:
98:f2:2e:3a:83:b5:12:af:bf:ef:52:a5:db:34:cb:91:dd:c4:
ab:7d:91:20:44:46:74:74:6d:f4:b3:a9:46:09:14:77:3a:a2:
cb:43:b2:e5:44:9f:ce:2b:17:73:09:6d:8c:7a:ff:a1:5d:71:
fc:cf:44:6a:46:db:00:3e:2a:2b:ca:b9:f6:ba:11:fd:d0:47:
e4:b9:5d:9f:86:83:00:6a:b4:71:e9:cd:d7:3f:ea:e3:a3:a4:
25:aa:e8:6d:04:60:ff:f2:fe:dd:09:2b:10:9d:fe:cd:be:75:
c9:6a:ad:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:40:15 2025 by rpki-client