This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84735eb9-3d3c-435d-bd71-a0b5ca2da261.roa
File: 84735eb9-3d3c-435d-bd71-a0b5ca2da261.roa (raw, json)
Hash identifier: g1TX3swvb4OoBXTrYPLyzcZzF8uXYu6ao7uo5b0+sdo=
Subject key identifier: 79:99:83:A3:07:65:90:37:DF:DA:46:F4:12:9C:4C:4C:BF:CB:4E:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DFAB24FC31EC3FF7DAE8772C55402BD31666789
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84735eb9-3d3c-435d-bd71-a0b5ca2da261.roa
Signing time: Sat 06 Dec 2025 02:11:10 +0000
ROA not before: Sat 06 Dec 2025 02:11:10 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fa:b2:4f:c3:1e:c3:ff:7d:ae:87:72:c5:54:02:bd:31:66:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 02:11:10 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=0db8b6c7d3c140ef0eb6136358b18e676533edde2af3354f38f9a4473060aac0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:0d:a2:2b:3d:5e:e9:95:70:05:d5:f1:f4:
3e:69:de:93:8b:b3:6c:29:ab:88:7d:59:52:f2:e9:
61:33:3c:4c:7c:ff:d0:06:f1:a5:e9:3d:e4:a4:f1:
2f:a0:2d:56:05:84:07:1f:a5:4e:5e:17:7e:1c:5e:
91:33:4b:fa:0e:7f:a3:db:22:a2:54:c8:77:ec:1d:
82:18:c6:c3:48:c0:7c:f4:3e:ef:e8:c4:d0:e4:15:
3e:d3:ef:c2:a0:5f:23:73:c4:c4:54:ca:b4:2c:f4:
61:01:88:73:11:df:4c:2c:b8:fd:43:ef:81:a6:8f:
39:b5:a0:c4:30:7d:63:a2:4c:ef:50:e6:06:f3:09:
2b:95:a4:d2:9f:84:fe:4a:21:4d:dc:b1:0b:1c:b0:
dc:12:eb:ce:2a:ac:a0:bc:87:3f:ad:e9:33:7e:e2:
5a:17:1f:68:e5:fd:e4:fd:e8:b8:5b:d5:59:5f:51:
91:28:54:55:95:67:09:c2:b0:79:a0:d2:96:15:d2:
01:11:f6:cb:05:68:d4:b8:f4:5f:2d:73:90:28:1f:
43:99:98:b1:9f:15:75:41:7b:2f:80:92:95:92:3d:
23:7d:99:c4:af:17:2d:ab:18:ff:e1:69:5f:20:a2:
8c:a4:a3:1e:84:55:a5:79:f2:71:9e:13:cb:f0:3c:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:83:A3:07:65:90:37:DF:DA:46:F4:12:9C:4C:4C:BF:CB:4E:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84735eb9-3d3c-435d-bd71-a0b5ca2da261.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:2080::/48
Signature Algorithm: sha256WithRSAEncryption
14:76:f7:85:fa:96:93:ef:03:e1:19:fd:62:72:02:8d:f7:ee:
53:d7:b5:66:b0:1d:90:77:c8:d9:62:8b:a7:7d:48:5a:25:ca:
12:f1:0c:14:df:1c:60:07:8c:80:65:6e:0e:eb:34:a1:a3:c5:
45:a7:8c:bc:73:b1:88:fc:2b:d9:4a:2d:f2:97:51:b6:ae:68:
aa:19:00:0e:c6:a5:e7:66:63:c5:e6:fc:1a:bb:bf:69:be:91:
2e:6e:38:03:11:bf:0a:c6:3b:90:eb:7a:89:b6:b9:89:a3:07:
64:f1:c2:3f:7e:be:d1:9f:10:94:b1:64:19:98:66:86:ed:03:
9d:60:66:2f:05:b7:91:8f:32:2a:3e:09:a0:66:58:2d:13:18:
03:83:f3:8e:60:53:b0:21:52:af:3a:62:44:b3:9b:c7:a7:07:
05:87:ab:a6:61:46:3a:27:94:5e:a6:f1:38:54:37:d2:6a:2f:
b4:6d:0a:f8:4c:52:96:e5:c5:c8:89:1d:f3:4a:b8:27:fc:3e:
d2:80:f6:08:75:73:60:2b:56:6d:ea:ad:50:4e:c1:db:e9:dc:
33:29:ac:08:06:4b:7c:68:8d:99:d3:83:e2:ea:64:4f:9b:aa:
3f:ab:61:db:68:12:d9:ef:86:ff:d7:05:99:01:51:bd:02:4a:
da:72:fa:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:57:00 2025 by rpki-client