This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa
File: a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa (raw, json)
Hash identifier: jYdjNYIyv0Ww3sxyH3ZWQsAj3kN5tj7RHs/5vLHVHYY=
Subject key identifier: FB:77:D6:12:6E:28:C1:48:BF:E8:64:81:94:DF:BC:81:11:61:AD:6E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A9310F288A7988D961EC90D775E7EF393CB80A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa
Signing time: Sat 06 Dec 2025 02:01:52 +0000
ROA not before: Sat 06 Dec 2025 02:01:52 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 108.136.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:93:10:f2:88:a7:98:8d:96:1e:c9:0d:77:5e:7e:f3:93:cb:80:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 02:01:52 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=f6bae3d2d73e3504e15cd16e452b3e1866878a925d05d06d99563aaeaf00bd27, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:78:35:04:59:7c:a8:c8:8a:55:d4:8b:3c:
7a:68:8b:39:7b:18:86:16:7c:f5:75:7b:23:33:5d:
16:da:b5:f2:1a:6b:dc:af:3a:bf:9d:4e:92:0a:ab:
ed:23:96:64:dd:be:33:82:06:81:83:51:33:8a:4e:
d6:d7:bc:4c:a5:c1:6e:f5:c3:05:50:6c:bb:ed:b2:
7a:bc:2a:b3:cf:ad:85:bf:59:cf:95:24:eb:26:29:
df:06:9c:09:aa:83:3c:fb:d0:44:f4:d7:b5:91:57:
31:92:7b:f9:42:2c:4b:a2:21:66:f3:9b:9b:2a:af:
83:f3:fd:47:09:85:97:18:2e:16:a0:f4:bf:e5:34:
4d:3a:09:29:28:cd:28:3f:07:e6:61:5e:0d:10:5d:
df:06:43:bf:ab:6d:aa:c5:36:c9:17:5c:1d:1b:83:
0d:3c:cc:24:4d:f4:07:b3:54:2b:1b:6f:9c:36:5d:
9b:8f:bd:4b:cc:60:f8:3a:85:f1:10:0d:7f:b5:71:
40:88:46:ca:ae:42:94:4c:ff:ce:8c:b4:2b:11:43:
42:c7:8d:c4:b3:8d:b2:ad:62:39:69:9e:3e:93:52:
74:20:ee:82:71:0c:00:31:cc:ac:5c:1c:34:ee:90:
1e:94:01:f7:50:f2:7f:77:5b:57:ca:45:a0:3a:ea:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:77:D6:12:6E:28:C1:48:BF:E8:64:81:94:DF:BC:81:11:61:AD:6E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1a5dd7b-1b2f-4872-9de5-37d2b4689d1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.136.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7a:d8:f0:d0:92:74:c9:d0:1e:ea:e1:d9:53:9d:b5:4f:b6:
61:29:ee:5b:bf:e3:83:8b:e3:90:48:89:69:0e:f4:a9:81:73:
37:d6:f1:87:57:3f:43:06:b0:99:c9:15:25:7d:9a:5d:61:1d:
6f:2f:37:33:b4:22:64:d8:93:87:cf:48:ee:93:69:52:a7:82:
dd:93:86:65:de:b8:8e:5b:51:53:49:a0:0b:03:e8:b4:d8:40:
0f:f1:82:20:98:ba:0f:f0:7c:c7:fd:f8:ea:98:29:00:50:86:
b9:33:30:76:81:60:35:a2:05:dc:c5:e1:14:1c:8d:d2:95:d4:
bf:bd:e0:9a:44:e5:b6:67:ca:ea:77:1c:7b:2c:14:32:7b:b9:
54:c8:05:51:6f:23:d3:1b:19:3f:ad:99:c9:d9:b9:a2:7d:35:
c1:20:3d:95:a7:08:fd:40:6e:7b:7a:bf:01:ba:40:81:99:5b:
b3:9a:be:08:3f:4e:89:f8:2c:70:30:30:bb:7a:a9:7e:22:f6:
17:5c:e5:73:7d:f5:d5:5f:35:a5:c4:8a:b8:c6:2f:98:84:95:
e0:1c:8d:66:a4:69:cf:6d:f6:94:6b:d9:5c:ad:b6:17:fa:34:
6f:60:0c:c8:c8:42:fa:c3:82:24:4e:68:95:a7:bf:e9:e8:13:
34:4d:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:09:53 2025 by rpki-client