This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99c3ba23-5b45-4325-8ff3-73aa51d9ae3b.roa
File: 99c3ba23-5b45-4325-8ff3-73aa51d9ae3b.roa (raw, json)
Hash identifier: E4PmxmYgcXhXA4kD3261lX/pWo1EqA9Fj+vc7s1bqa0=
Subject key identifier: B0:67:EB:FA:12:A5:5C:4A:27:D0:98:EC:30:C1:A1:00:CB:B7:63:AA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7BDFB5204D88BE0AE7DACF77B6FBEF31C80C144A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99c3ba23-5b45-4325-8ff3-73aa51d9ae3b.roa
Signing time: Wed 03 Dec 2025 00:20:46 +0000
ROA not before: Wed 03 Dec 2025 00:20:46 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 114.57.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:df:b5:20:4d:88:be:0a:e7:da:cf:77:b6:fb:ef:31:c8:0c:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:20:46 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=2b101b8732eb4acf37de6c754cada4f3ad112d14a09680608efce3239a0d9e67, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:fa:59:be:9c:b7:e1:87:e3:4f:22:3b:db:
d6:f1:83:9a:82:e7:c4:33:f3:d3:f3:ae:25:22:6d:
b5:af:31:c2:25:00:cb:ff:52:b5:01:24:38:e0:d0:
81:dc:b0:b4:0e:fe:ea:f7:9f:72:61:a0:8a:5a:96:
dc:47:b2:f1:c8:46:a9:59:08:dd:79:84:72:29:bf:
f7:91:af:0a:ab:92:ab:d1:be:ee:42:33:d2:79:c1:
56:52:73:c2:74:ae:d0:99:de:1f:54:43:96:a8:6b:
3a:d8:12:f0:a0:0b:8f:f7:21:bd:c5:eb:68:ee:86:
43:57:36:b1:6b:e7:21:6b:3d:64:7c:e0:45:5b:b3:
24:95:f0:64:d5:ec:0c:33:b7:42:bb:a5:7d:3a:75:
31:29:0d:09:c0:74:ad:4d:57:bf:14:4d:e4:dc:2c:
ea:60:c0:9a:4c:1a:76:e4:5e:37:62:80:15:80:64:
9c:29:bf:45:6e:94:cf:21:35:e5:b1:8e:96:d4:86:
3c:dc:99:a7:34:28:d6:ad:d3:f8:64:2a:79:0a:1d:
03:6f:fd:46:11:ee:48:43:3e:b3:70:e6:1d:79:b4:
19:77:93:8b:75:bb:37:38:61:85:3f:1d:5f:00:b4:
8b:50:c1:1e:af:07:e1:2a:f2:17:e9:b5:7d:33:cd:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:67:EB:FA:12:A5:5C:4A:27:D0:98:EC:30:C1:A1:00:CB:B7:63:AA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99c3ba23-5b45-4325-8ff3-73aa51d9ae3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.57.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:d2:4a:c1:c8:a3:ed:6c:7f:48:68:61:f0:fd:8d:0e:2e:79:
12:40:3b:f7:14:ac:25:c5:20:15:6b:78:d7:66:5e:fe:fc:5e:
e0:b5:0d:c7:f7:36:f8:51:f2:2e:f4:b0:21:56:59:4f:e4:68:
1c:66:ce:60:c9:af:d6:b2:16:5c:72:a5:e5:d6:73:95:2d:36:
09:7d:36:87:78:e6:4b:ea:4b:ff:8a:b7:47:3b:24:3b:f1:7e:
87:0b:80:6f:37:19:6c:d8:95:55:e4:4c:a4:3e:31:6d:5f:ea:
7f:cc:62:6e:7f:7d:a4:7a:2d:81:13:85:58:94:ac:c1:81:e0:
93:55:9d:9e:ef:38:84:9b:46:e0:0e:f9:ea:00:63:de:75:38:
2b:50:bc:b8:0a:f8:41:f0:20:0f:db:ed:7a:d2:e8:34:9a:fa:
f9:fa:d3:7e:67:0f:f8:c1:59:97:ef:47:9c:f7:c3:26:00:21:
8f:98:d7:86:81:0c:5c:5e:10:2a:6c:33:cc:fb:fb:05:d4:4f:
7f:6e:e7:ae:04:80:23:88:6c:88:8d:e5:d0:5d:4e:2a:d8:52:
c5:8d:62:76:2f:f4:1a:08:83:80:f8:73:7e:e8:0a:d9:23:7a:
6b:c9:12:5b:f0:5c:d5:17:18:d2:fe:a3:ac:bc:78:c4:99:c6:
54:64:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:54:44 2025 by rpki-client