This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e3dba33-c76e-49c9-9242-16e93267ef0a.roa
File: 8e3dba33-c76e-49c9-9242-16e93267ef0a.roa (raw, json)
Hash identifier: ngu3UFyoWZauwhlmcKdOdi/li3WVumW1TeBBt3cL2p4=
Subject key identifier: 08:96:67:38:62:2B:84:FF:CF:42:6A:6A:A4:00:E2:60:82:1C:9A:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1137CC75BEE0F4437289E7C048468A8DC655F252
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e3dba33-c76e-49c9-9242-16e93267ef0a.roa
Signing time: Thu 27 Nov 2025 00:21:12 +0000
ROA not before: Thu 27 Nov 2025 00:21:12 +0000
ROA not after: Wed 25 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:37:cc:75:be:e0:f4:43:72:89:e7:c0:48:46:8a:8d:c6:55:f2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 27 00:21:12 2025 GMT
Not After : Feb 25 23:59:59 2026 GMT
Subject: serialNumber=fc8d852fc0a20c4310b91c46bb3251acaa6c72a0a701fa3e53723d1a2b8da3a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:76:d7:bc:e2:6b:04:a9:29:95:ae:bc:5b:
eb:1a:7f:7d:64:e0:99:dd:8e:f0:86:47:8e:de:b2:
38:62:bf:9f:b8:ba:63:7f:f1:74:8d:76:e8:83:d8:
f1:48:6f:95:21:22:4f:93:12:ba:72:9d:9f:30:a0:
cd:8e:70:66:6a:c6:5f:c5:3f:19:39:da:c3:01:32:
9c:fc:c5:60:64:08:6a:74:58:79:75:f6:51:81:e0:
66:db:b1:e3:1f:9a:74:0c:a6:a5:9f:39:53:08:57:
97:52:a4:ca:c4:d4:a8:a7:c3:9a:60:f6:99:9a:a8:
5b:20:ab:c2:c6:12:7e:9a:65:65:e2:7e:80:fd:f8:
ab:55:92:81:8a:30:f4:d0:79:aa:9e:a9:a3:b9:c0:
ff:51:f1:11:07:47:c1:32:d3:59:03:33:8d:7f:c5:
a6:c2:66:6b:8e:12:1d:a8:63:f9:19:ae:2f:41:d4:
92:b6:78:37:44:6b:2b:38:a4:f9:77:65:10:39:f4:
bf:4d:cb:34:dc:8b:47:3c:6f:90:28:9d:b1:72:4a:
da:4a:d2:7f:3e:3b:f9:3c:2a:2c:ba:e1:0d:64:a5:
24:4b:29:49:2a:f6:c3:44:3f:ae:e1:d0:f4:8f:90:
66:9c:b8:a5:32:0c:fa:ba:21:cd:c7:84:4c:5b:1c:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:67:38:62:2B:84:FF:CF:42:6A:6A:A4:00:E2:60:82:1C:9A:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e3dba33-c76e-49c9-9242-16e93267ef0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.12.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:c0:c0:97:84:8b:32:c7:65:46:0e:7f:b4:e3:64:b4:eb:7b:
b7:8e:5f:51:94:ec:a8:e0:69:10:bf:ab:96:02:88:3b:83:2c:
fb:b0:70:5d:80:ed:88:56:0a:b3:48:6e:f3:70:64:63:7c:c0:
d6:a7:d8:52:7a:c2:d8:fd:41:ec:a3:59:da:17:78:12:51:06:
35:bc:c0:43:b6:d2:b5:35:46:78:16:7c:92:08:c1:c2:9d:80:
de:35:76:6a:03:c9:88:b9:54:2e:85:4e:ff:e5:b7:7d:05:a7:
63:60:3a:8b:9b:1a:dd:c2:b1:cd:21:bb:ce:34:75:1d:49:bc:
16:8f:af:21:5d:ce:9b:ef:61:66:b0:ef:9c:ab:08:36:89:c0:
79:83:a7:86:4c:a1:81:db:f7:e1:51:3b:f3:21:04:d7:d7:e1:
81:b8:5f:68:83:a3:f3:4e:f7:a5:31:3a:59:3b:f9:49:ea:49:
f2:b8:2e:f2:8d:71:31:b0:2b:a0:89:97:6b:84:91:a5:35:d8:
e0:34:e3:87:56:b0:e1:25:14:f9:ff:6e:87:da:47:e7:52:33:
c5:0a:4e:af:5c:81:87:94:eb:69:26:f4:33:78:a9:b1:db:c4:
3f:57:71:f4:cf:9a:ae:6f:61:46:8f:f0:54:2b:e3:f1:0c:1c:
09:20:3b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:46:11 2025 by rpki-client