This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa
File: 8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa (raw, json)
Hash identifier: Z98kaPdlh7G8P6/Ii0yOVRr7PU1riiWd04ZSs2FnG2Q=
Subject key identifier: 91:D6:D0:F2:2A:99:88:73:CF:68:06:85:EC:91:62:1D:C4:7C:F2:20
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2BA5F0BAF945C217665B72D658C6A720B0DFB599
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa
Signing time: Fri 14 Nov 2025 00:00:11 +0000
ROA not before: Fri 14 Nov 2025 00:00:11 +0000
ROA not after: Fri 19 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a5:f0:ba:f9:45:c2:17:66:5b:72:d6:58:c6:a7:20:b0:df:b5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 14 00:00:11 2025 GMT
Not After : Dec 19 23:59:59 2025 GMT
Subject: serialNumber=c35b14615e2894bb195d057d6fddc4adf84bcfcbaca676a35673576b3a5e2d40, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5a:36:5b:a3:2f:de:7f:cd:0d:38:c4:38:67:
db:7b:0e:d8:0d:c3:0c:01:71:54:92:9b:aa:45:a2:
a5:e9:fb:47:71:c8:13:43:b3:6e:88:4a:d0:4a:23:
c5:1a:9f:c8:f3:cf:ba:a6:f4:d3:ed:68:1d:dd:73:
ab:f6:ce:ee:e8:37:46:47:58:b3:7c:14:c3:f6:a8:
d3:05:ed:ff:48:bb:c4:cf:a0:18:bc:d2:71:0a:09:
3c:ae:1e:88:0e:3b:55:a1:8b:aa:0d:13:7d:b3:db:
bf:c5:94:a9:d0:83:ba:59:2d:1e:47:31:7e:c8:c9:
df:c3:b2:a3:d3:c0:8e:e1:21:1c:c1:2d:a0:eb:7e:
d9:31:b6:1a:a9:36:99:47:3e:99:2b:d9:6c:18:0a:
d1:13:28:28:07:35:95:86:ae:e3:ba:b7:6d:c1:6f:
1b:c2:ea:5c:cc:46:cf:84:a1:0b:cc:fd:02:03:f3:
3c:46:22:0d:2c:94:0d:0a:6a:4e:34:f7:ec:ed:3a:
23:95:d5:e3:b2:df:df:75:e6:7f:48:bd:42:c5:f5:
6b:0d:fb:34:2f:bd:7e:13:83:98:fd:4e:8f:25:2d:
1a:bf:ad:dc:d6:81:dc:d5:6f:4a:9f:53:cb:43:5a:
81:e1:f5:c0:32:d9:bd:6b:48:5c:38:33:09:81:00:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D6:D0:F2:2A:99:88:73:CF:68:06:85:EC:91:62:1D:C4:7C:F2:20
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.48.0/24
Signature Algorithm: sha256WithRSAEncryption
14:52:19:74:07:22:37:a6:d7:8d:c7:bd:27:38:46:e7:40:6f:
d9:d2:d6:f8:0c:ac:8d:bc:33:eb:e9:90:a1:67:7f:1f:32:f5:
ef:77:c7:ae:f2:fd:ff:aa:c8:53:7c:28:e6:4f:7f:df:03:d1:
d7:9b:6d:71:7f:7b:e3:36:05:ae:8e:cf:62:f9:8b:4b:b7:78:
70:13:ac:cb:34:e4:ac:99:f9:56:2b:2f:5c:84:6d:ab:b2:0d:
33:5e:05:9d:96:ab:7e:53:2a:72:69:ed:91:71:c5:ba:ef:d2:
5e:0a:3e:38:63:65:12:a6:69:92:ce:31:77:ee:5f:83:cb:7f:
df:09:08:4f:47:9f:f8:98:2f:f1:b0:4b:47:a7:83:d6:79:3c:
d5:d1:07:82:62:b0:9e:85:58:2b:4f:56:78:ca:66:7e:df:1a:
0a:e5:77:8a:4b:b0:21:c2:9c:68:b9:3a:00:a0:67:cf:54:07:
8a:a2:43:8f:72:19:8e:5a:6a:e5:e9:79:ee:5f:0a:81:d6:60:
72:31:61:1a:d6:a2:9e:4e:dc:30:28:64:c7:60:de:40:b5:84:
f1:07:ec:6c:84:52:41:18:d2:25:89:0d:ad:79:58:28:89:d2:
69:9b:90:c3:dc:41:15:ac:fc:73:f3:5f:d4:b1:eb:9a:8f:59:
08:9f:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:05:51 2025 by rpki-client