This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89c87c0b-b8ef-48e2-948e-f9e95582a036.roa
File: 89c87c0b-b8ef-48e2-948e-f9e95582a036.roa (raw, json)
Hash identifier: KRAupLzn41VYM6G8FHq+TWBytLrC9U+GjV47ZG8pOBE=
Subject key identifier: 67:98:90:97:BF:D0:C4:01:EE:E0:51:2B:2E:80:93:C0:58:AA:8A:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1CD6EABAD04DFE95C30D38583A75F6E47CD78AAA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89c87c0b-b8ef-48e2-948e-f9e95582a036.roa
Signing time: Thu 20 Nov 2025 00:00:42 +0000
ROA not before: Thu 20 Nov 2025 00:00:42 +0000
ROA not after: Wed 18 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffe:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d6:ea:ba:d0:4d:fe:95:c3:0d:38:58:3a:75:f6:e4:7c:d7:8a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 20 00:00:42 2025 GMT
Not After : Feb 18 23:59:59 2026 GMT
Subject: serialNumber=c737c013e218e2889ce8da04dc2b89cc4a396cd721495ea2dc27eea7a8918fa9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:1d:9b:2a:76:14:2d:93:94:38:73:a6:4d:
1e:04:60:12:1a:ac:fc:56:39:7a:f3:0b:e9:f9:39:
4d:ef:b5:b7:78:65:13:ba:8b:24:c5:9e:a5:b4:2a:
73:ae:4b:a4:59:81:bc:fa:f5:b5:28:67:28:b8:61:
be:c5:a1:ce:73:4c:e6:47:ca:35:1a:36:3f:1c:bd:
49:1e:45:39:a2:39:ec:9f:b7:2a:cb:b3:0a:07:fb:
2f:02:36:05:9a:c2:d3:9d:fa:9e:30:d0:61:52:2f:
57:a0:73:1c:6b:6b:fa:31:39:58:80:22:21:4d:4e:
f8:5b:bc:1e:1c:ec:ad:6e:09:df:46:d5:72:87:4c:
cf:6a:b1:f3:c6:3e:d0:44:11:6a:3d:81:61:0b:af:
23:89:8e:68:28:9b:83:69:54:7d:7a:fe:5d:85:bf:
2a:21:14:46:04:ea:6e:00:ae:48:ce:51:36:3f:07:
c5:a5:d8:8e:6f:50:43:f5:f2:84:cc:85:d5:07:88:
f8:f1:03:82:f8:91:52:a9:f8:1d:fa:0f:62:76:dc:
b8:be:6a:2f:e6:50:dc:0b:af:a4:af:8f:eb:e3:f1:
db:41:7b:3f:62:ed:d8:1e:64:e2:8e:f2:c9:29:1f:
6c:0a:c3:2d:ec:c4:6b:ed:60:2f:73:7c:0e:a0:27:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:98:90:97:BF:D0:C4:01:EE:E0:51:2B:2E:80:93:C0:58:AA:8A:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89c87c0b-b8ef-48e2-948e-f9e95582a036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffe:e000::/40
Signature Algorithm: sha256WithRSAEncryption
30:e4:fd:17:a0:16:64:86:c2:2a:49:f4:2c:b6:57:26:43:1d:
f1:18:4b:60:d1:bb:ca:2d:cd:2e:d0:81:9b:cd:49:95:c7:dc:
19:4f:60:f8:6f:d1:62:ef:08:33:11:72:33:d1:98:cf:b2:fa:
71:60:5c:02:94:89:d5:af:de:c0:06:63:42:f3:ed:28:57:83:
c8:36:fc:32:18:5e:e7:16:2d:66:f9:cd:34:fb:70:f9:fa:d8:
3c:06:e3:f3:ff:c0:1d:b8:05:5d:1e:5a:22:ec:78:f1:0b:5b:
41:65:07:c8:5d:be:6a:9e:e6:55:1a:1e:a9:77:4b:a6:54:67:
79:bc:b5:99:7f:23:38:5f:89:de:f3:d3:35:b2:d2:99:bf:e0:
4d:3f:8e:0e:af:5c:54:df:73:54:d1:fc:5f:af:9d:5b:10:bb:
df:d1:26:86:58:97:9f:78:9a:2a:f3:1d:c4:d7:9b:7c:0c:10:
2d:f8:a5:a3:fc:56:85:7a:49:28:c4:f5:02:83:a9:98:b6:6d:
27:08:90:61:29:41:4c:10:0a:4e:55:75:fc:14:fc:f7:5c:cd:
cc:b0:c9:ea:aa:e4:08:12:2f:cb:06:ab:66:0a:ef:97:77:16:
4c:2c:39:0d:d4:b2:c4:b8:3b:67:0b:4c:54:ac:3d:2f:96:56:
5d:0b:a9:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:55:44 2025 by rpki-client