This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f4c8a2a-83fa-465e-8b41-32661fce3929.roa
File: 9f4c8a2a-83fa-465e-8b41-32661fce3929.roa (raw, json)
Hash identifier: N85894wtNdo5DGA3ZNTBFyfY12JMCPYIC4IMbcs+egc=
Subject key identifier: F4:B8:5F:ED:B5:7F:EC:04:23:BA:7B:AD:7C:4A:CC:A9:A1:B4:BB:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E29FA9EB97CB79918C18BF0D4F3EFF6CD9AA1A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f4c8a2a-83fa-465e-8b41-32661fce3929.roa
Signing time: Sun 07 Dec 2025 02:11:18 +0000
ROA not before: Sun 07 Dec 2025 02:11:18 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:29:fa:9e:b9:7c:b7:99:18:c1:8b:f0:d4:f3:ef:f6:cd:9a:a1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 7 02:11:18 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=fe6517cf58641288a9c5af4033ca0befea841290431b2421e82cf2db35951692, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:b1:57:cf:ac:44:d7:7f:69:42:19:2e:37:
a2:04:e8:fb:fa:96:ab:2b:1c:cd:e4:d7:8b:dc:ac:
d2:f5:f4:e0:09:7d:37:65:77:fe:33:84:73:e3:a7:
46:9a:35:29:68:74:bd:f0:5b:70:49:26:dc:68:d2:
b4:4a:a3:b6:63:50:8a:7e:03:7d:8d:c1:34:47:f3:
31:c9:3f:9b:e0:19:dc:09:7d:b0:89:fe:af:f0:6a:
ac:56:3e:84:22:1d:45:d5:39:84:d4:49:07:1d:93:
c0:6e:e1:6a:76:f5:c3:df:10:89:66:f1:8b:b1:a6:
91:50:dc:8b:b1:97:f2:23:ae:c8:92:85:2f:60:e4:
ff:29:6d:90:0d:4e:44:3d:09:c3:16:b9:d6:05:94:
5f:c2:c3:47:f9:2a:de:9e:ec:35:56:6c:81:9d:75:
bb:a4:aa:b1:77:4f:29:a5:ef:0f:40:76:4b:0f:18:
8b:e5:a7:8b:6e:b9:d4:89:6b:33:ea:81:71:ab:19:
e5:c6:f1:62:63:d8:0d:12:6c:bd:f4:e3:12:69:70:
76:8e:7a:04:72:0f:76:f9:67:de:a3:a3:7f:1d:42:
43:b2:3f:79:f5:4c:d8:0c:09:39:d3:cd:5d:02:e7:
96:69:85:bd:96:95:18:e4:ca:75:88:f3:0e:45:0f:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:5F:ED:B5:7F:EC:04:23:BA:7B:AD:7C:4A:CC:A9:A1:B4:BB:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f4c8a2a-83fa-465e-8b41-32661fce3929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:6080::/48
Signature Algorithm: sha256WithRSAEncryption
ae:63:a1:f4:f9:9f:cd:f7:3a:3c:12:2a:92:f0:f0:9b:ee:e3:
af:36:38:ea:60:7e:cd:d7:15:dd:86:69:3d:4b:7a:7e:c4:4e:
fb:78:41:bc:ac:2b:a3:a8:44:06:c3:83:42:9b:d4:37:c3:14:
e8:d3:e0:57:b3:e5:a8:ba:a4:54:fc:60:07:a0:43:ef:11:ff:
87:bd:62:f7:8d:0f:b4:88:ee:c7:d9:db:64:da:b2:3d:31:30:
91:8f:ad:05:f9:33:dd:4c:80:4f:6c:43:51:b2:b3:17:1e:61:
d7:f2:49:44:a9:d0:c6:24:41:13:92:5c:1e:81:db:68:cc:df:
f4:33:37:68:86:07:c3:5e:13:e4:94:f9:f1:3f:8c:79:94:42:
bd:7e:f8:57:f1:de:c4:94:d4:72:a5:54:62:d8:61:d0:9d:7d:
ff:c0:c5:b4:e5:5e:74:13:3b:46:16:98:75:26:3d:54:94:f0:
d1:a6:a7:cd:a6:e3:6b:c0:57:3b:8c:47:62:25:a8:0f:c5:ef:
55:05:af:87:84:f8:20:8d:e2:ff:1b:e0:fe:13:09:fd:96:97:
72:9f:e7:03:fd:83:7e:04:45:c1:78:05:a5:1b:53:47:e6:df:
2a:e2:f3:70:d4:d2:df:42:1d:8f:bd:e9:a7:46:91:c0:ba:f5:
27:31:1b:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:55:58 2025 by rpki-client