This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b38112c-7d17-4d80-8de2-0d581c9785c0.roa
File: 9b38112c-7d17-4d80-8de2-0d581c9785c0.roa (raw, json)
Hash identifier: gSoVHQy69MQx0DhkxRwxmXHA9jBxyH2dyxzYLakY9jU=
Subject key identifier: 24:C6:CE:C8:66:82:2F:AD:8F:83:33:DB:CF:05:14:B3:7B:D9:D6:FB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1F7F4876CD16431711E6568D3536E89B65777466
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b38112c-7d17-4d80-8de2-0d581c9785c0.roa
Signing time: Tue 02 Dec 2025 00:40:04 +0000
ROA not before: Tue 02 Dec 2025 00:40:04 +0000
ROA not after: Mon 02 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7f:48:76:cd:16:43:17:11:e6:56:8d:35:36:e8:9b:65:77:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:40:04 2025 GMT
Not After : Mar 2 23:59:59 2026 GMT
Subject: serialNumber=a197f1d33a418a6f856ef5b73ff9f483ce800e26e500c0123a3c0ee73f62aaa9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:68:58:07:b3:41:59:46:1b:c1:ab:18:a5:
0f:bc:3b:27:18:2e:83:72:67:26:73:49:c4:a4:31:
a7:44:0d:d5:4c:99:20:40:ab:1e:11:9b:cb:4e:7a:
ef:83:13:7d:79:4e:58:16:98:f2:b2:b1:e7:f8:84:
80:60:a2:97:d1:16:60:6b:23:e6:36:83:fe:7a:85:
c9:94:74:e1:01:e8:85:23:70:cd:ed:f6:64:7c:0c:
38:ef:61:59:ca:b1:4b:28:7d:cd:2f:b4:1a:0f:6b:
7f:a6:89:c2:9b:36:03:04:cf:6a:bc:a6:e7:27:a0:
5a:b9:04:57:b1:4c:a6:af:e5:c3:0d:a8:da:48:de:
e6:70:81:fd:d8:b1:8b:dc:6f:1f:01:fd:34:96:51:
d9:75:82:54:89:95:0f:60:a7:48:0d:9c:ea:e4:48:
38:43:42:98:ef:d1:5f:72:eb:9c:75:44:3b:7a:e7:
89:96:19:d6:bb:63:71:cd:9b:79:04:b3:5d:fb:bc:
95:0c:a3:51:fc:d7:54:d1:de:fc:c3:7c:66:0d:27:
03:c0:91:9f:0b:1d:44:b8:a6:72:22:ef:82:1a:c5:
e6:21:35:2f:3f:18:f1:3b:30:75:9c:d7:3c:14:48:
d0:aa:3d:78:d0:a5:22:2f:c1:d3:38:e7:b5:63:d6:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:CE:C8:66:82:2F:AD:8F:83:33:DB:CF:05:14:B3:7B:D9:D6:FB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b38112c-7d17-4d80-8de2-0d581c9785c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.30.0/24
Signature Algorithm: sha256WithRSAEncryption
52:3c:33:25:70:da:9c:a4:e2:0d:2d:88:0a:67:b4:60:e7:70:
1e:37:5b:e8:a6:0a:ef:80:f4:6e:04:fb:af:05:a5:d2:02:8e:
2f:e5:7a:a7:e2:fa:12:33:ae:f4:ed:90:47:6c:70:8a:f0:db:
37:11:e4:98:f7:4b:f4:09:5e:5c:ed:84:5d:36:f4:46:15:cb:
e1:69:6c:86:2e:f2:a9:16:e7:a0:90:34:5e:18:cc:15:aa:3b:
74:46:ea:67:8b:d0:71:73:9c:9b:83:e5:17:3d:7b:28:9a:09:
79:1a:20:c6:13:14:73:f8:4d:1b:af:36:30:52:f6:7a:83:15:
7a:5d:ae:58:62:3b:63:05:ad:af:60:a1:72:07:02:10:9b:b5:
04:43:18:cf:e6:60:88:bb:fe:3b:0a:31:99:94:28:af:6e:8f:
7c:8a:ad:5d:18:f9:51:cb:db:b1:19:97:7f:44:37:03:a4:86:
a5:33:4d:fd:82:cb:04:c0:3b:96:75:4d:ce:5a:06:bd:ee:a7:
39:3b:5c:82:d3:6c:13:e7:fd:72:b0:2d:b9:48:81:89:00:1c:
f3:ae:96:33:85:22:34:3a:dc:e1:e9:92:6e:3b:d0:36:c8:fc:
1c:45:a0:fb:af:d8:25:1f:d9:4f:b3:98:d5:5c:16:39:9a:a2:
35:01:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:48:57 2025 by rpki-client