This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ff9c68c-902d-436f-9044-89559f96b070.roa
File: 8ff9c68c-902d-436f-9044-89559f96b070.roa (raw, json)
Hash identifier: jgga7TTU4yjnYW+/zxbuxVUbodlv9m1WidX7AjEp2Gg=
Subject key identifier: 66:E5:2B:AA:A9:18:D1:78:98:DC:10:9D:E0:80:86:F7:F2:41:3A:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2EE63CE91753485AEB4774206C5EC788CF2334C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ff9c68c-902d-436f-9044-89559f96b070.roa
Signing time: Mon 08 Dec 2025 01:00:34 +0000
ROA not before: Mon 08 Dec 2025 01:00:34 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.174.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e6:3c:e9:17:53:48:5a:eb:47:74:20:6c:5e:c7:88:cf:23:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 8 01:00:34 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=fe18aec4d1a569a66d9ef0598feeb84e8213732d26d3f9453061aff954a36d53, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:9c:47:9f:4b:91:83:7a:89:08:61:d1:4c:
90:7b:af:6a:59:1e:ff:df:32:e8:0f:6c:bd:10:b6:
28:23:38:16:95:77:c3:3f:ea:c2:3c:7c:a3:b3:35:
aa:db:b4:0b:57:3a:d8:2a:b4:c9:9a:7a:94:39:8d:
2e:96:96:9d:bd:82:7f:54:ba:b6:8f:03:a3:d3:e2:
dd:5b:87:fe:59:76:78:b0:2b:a2:3f:c8:d0:32:88:
bb:93:a0:a2:e7:cd:51:e6:1a:15:8f:8b:e2:27:db:
c7:a6:09:4d:30:f2:7f:20:76:45:8e:cd:8b:3a:4b:
7b:28:b1:c7:b6:d5:49:5a:71:96:5e:99:97:32:f8:
fb:73:3f:b4:cd:99:34:14:a3:82:67:7c:54:f1:9e:
fd:14:36:cb:b4:9a:59:17:de:db:38:d7:fa:d1:26:
42:12:86:8e:d0:bd:24:04:bf:5a:e1:fb:e2:27:1e:
db:6f:70:c6:36:70:13:f6:1e:86:25:91:32:e5:87:
fd:67:8f:52:d5:0f:de:9e:75:dd:94:1d:04:74:25:
a5:0e:ec:aa:4d:17:95:05:a4:f0:3c:cb:ae:05:86:
9f:bc:9e:cb:dc:55:9e:fe:42:09:9d:79:ef:b3:64:
28:b4:03:96:1f:31:d8:0d:be:00:bf:dd:d5:43:4b:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:2B:AA:A9:18:D1:78:98:DC:10:9D:E0:80:86:F7:F2:41:3A:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ff9c68c-902d-436f-9044-89559f96b070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.174.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:4a:90:a1:21:af:cc:36:24:95:f5:86:ff:b4:fe:32:70:18:
8a:8e:d4:4f:d3:79:79:98:ab:4b:dd:91:32:25:e5:15:9b:c7:
e8:c4:39:c6:08:ac:84:cf:11:d7:26:ba:92:84:ce:52:81:15:
c2:78:d5:44:20:4c:c8:88:62:0e:24:5e:26:ee:d0:1b:01:7f:
c7:9a:60:b5:3d:f7:8e:57:59:84:c9:83:ba:75:3f:bc:b8:1e:
c3:f8:ae:75:a2:43:91:75:73:b7:7c:cb:e0:0a:a5:b0:aa:c1:
2d:ea:12:e7:8d:b2:b0:83:9c:7b:0a:d8:87:34:0b:16:a9:19:
70:99:5e:4d:a6:70:c3:38:ce:9b:44:a9:0b:d4:0e:37:fd:6d:
6a:10:8d:74:79:e1:4d:53:46:ca:a1:bf:64:44:e5:65:5c:a9:
c7:40:9d:d2:9a:62:55:8e:d3:c0:92:22:ef:76:b9:5e:fd:69:
34:4b:de:c5:2b:cb:d5:7a:f5:f2:bf:43:68:0e:7c:5e:46:80:
62:1c:b5:88:8f:8f:ca:29:e3:2a:8f:9d:29:51:76:26:49:b8:
c9:1e:f5:a1:ab:4d:db:fe:cd:93:99:ec:1b:5b:0f:33:ae:3c:
02:df:81:ff:51:6c:72:a9:b3:b9:9a:0b:be:1a:b1:8f:43:af:
79:6d:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:58 2026 by rpki-client