This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
File: a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa (raw, json)
Hash identifier: UoWIuiv/McEoBMM2qlUxoXkUfjzQ2WK8AC8dvy0VTdM=
Subject key identifier: FA:10:A7:46:A1:04:4E:3C:71:2D:F3:37:8B:D1:21:DF:E3:B7:46:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0AFEE26BD732118E6C6C675F581E44A846AF2375
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
Signing time: Sat 22 Nov 2025 00:10:10 +0000
ROA not before: Sat 22 Nov 2025 00:10:10 +0000
ROA not after: Fri 20 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f32:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fe:e2:6b:d7:32:11:8e:6c:6c:67:5f:58:1e:44:a8:46:af:23:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 22 00:10:10 2025 GMT
Not After : Feb 20 23:59:59 2026 GMT
Subject: serialNumber=70aa415bf36ccc3074716f9ae634a563484780c098822826718b9ea47aaea6d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:5e:53:5d:57:40:5e:e5:f6:94:72:3e:1d:
92:2f:c7:d4:f0:d8:79:d4:45:ef:c4:fb:cc:5f:d1:
49:6d:a7:6b:a3:1e:af:c6:bc:d4:47:4c:e5:07:7d:
91:d1:a9:62:45:cf:86:86:22:92:90:6c:ad:ef:31:
81:66:fd:2b:2a:8e:97:51:5d:c0:47:2b:e3:ef:39:
46:d5:aa:25:90:17:de:33:81:e6:70:b9:b2:b6:ae:
35:6c:82:8c:68:74:fb:a5:90:26:ab:cf:d3:35:37:
8f:86:ca:d5:a6:0d:15:ad:2c:e2:6b:eb:a0:97:3a:
ee:64:31:ab:02:61:7d:82:aa:fd:da:fa:9b:ed:f4:
9b:b5:3f:9b:c4:6e:0a:bf:0d:1a:fe:54:70:f1:36:
4f:ff:26:a7:99:06:eb:a5:57:0c:91:86:a7:6d:04:
75:dd:54:89:08:60:d2:d4:5a:ce:df:2d:63:b0:1a:
be:62:d9:c6:ec:73:13:39:de:cb:04:fd:c0:7f:75:
57:68:53:df:41:34:c1:6e:c1:ab:3b:8d:da:31:c1:
b5:b8:3e:b5:85:6b:39:35:61:a4:70:79:5b:6b:e1:
b4:83:85:1f:c7:8c:8b:a5:92:96:27:07:75:52:cc:
3f:0d:5c:86:a8:c9:ad:9d:f3:cd:d4:75:05:8f:a7:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:10:A7:46:A1:04:4E:3C:71:2D:F3:37:8B:D1:21:DF:E3:B7:46:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f32:5000::/40
Signature Algorithm: sha256WithRSAEncryption
ad:d8:ef:9a:69:cc:d4:c7:01:40:37:76:6d:a7:c7:c4:94:d5:
e7:15:00:d3:fe:41:7a:56:a8:89:37:98:da:19:b0:9d:f1:11:
14:29:22:31:f2:29:71:e1:6e:13:f2:bd:3f:39:b6:79:88:95:
32:94:55:60:45:bf:2c:c1:a8:94:aa:52:cd:cd:01:d4:86:19:
69:28:24:29:ce:3a:2c:02:48:4e:67:16:ad:c0:bc:ff:74:8a:
58:f2:33:fb:e2:9d:fe:59:a6:5e:87:af:c3:78:93:1a:de:14:
b3:4a:cb:51:6c:0b:0d:db:33:37:32:5d:5c:66:31:3f:31:55:
20:64:75:de:61:5b:ea:77:de:50:bc:89:74:74:7b:11:cb:38:
fc:5e:88:1a:7c:ec:44:04:e3:0f:d5:71:bd:a6:c7:1c:04:71:
0f:4a:5d:24:7a:18:6f:a8:fa:ef:eb:b8:73:a3:ff:7a:11:4a:
36:e3:bf:a4:2d:d4:54:ff:06:96:93:fc:43:4c:28:5a:d5:fb:
f7:15:41:39:c8:54:99:36:5e:88:f5:b2:68:e7:7a:31:5b:ca:
49:b8:5b:e8:ed:9a:49:14:e5:dc:50:03:45:ea:b2:4e:81:3a:
16:41:6f:ca:80:b4:e8:2a:0c:56:1e:52:d8:d0:df:03:41:3d:
03:a0:ab:8e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUCv7ia9cyEY5sbGdfWB5EqEavI3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAxMDEwWhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MGFhNDE1YmYzNmNjYzMwNzQ3MTZmOWFlNjM0YTU2MzQ4
NDc4MGMwOTg4MjI4MjY3MThiOWVhNDdhYWVhNmQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5Q15TXVdAXuX2lHI+HZIvx9Tw2HnURe/E+8xf0Ultp2uj
Hq/GvNRHTOUHfZHRqWJFz4aGIpKQbK3vMYFm/SsqjpdRXcBHK+PvOUbVqiWQF94z
geZwubK2rjVsgoxodPulkCarz9M1N4+GytWmDRWtLOJr66CXOu5kMasCYX2Cqv3a
+pvt9Ju1P5vEbgq/DRr+VHDxNk//JqeZBuulVwyRhqdtBHXdVIkIYNLUWs7fLWOw
Gr5i2cbscxM53ssE/cB/dVdoU99BNMFuwas7jdoxwbW4PrWFazk1YaRweVtr4bSD
hR/HjIulkpYnB3VSzD8NXIaoya2d883UdQWPpxFnAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU+hCnRqEETjxxLfM3i9Eh3+O3RkcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E3M2YyNzk3LWVjMTctNDRkZi04YzM3LTRlMzhhNWZjMjlmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB8yUDANBgkqhkiG9w0BAQsFAAOCAQEArdjvmmnM1McBQDd2bafHxJTV
5xUA0/5BelaoiTeY2hmwnfERFCkiMfIpceFuE/K9Pzm2eYiVMpRVYEW/LMGolKpS
zc0B1IYZaSgkKc46LAJITmcWrcC8/3SKWPIz++Kd/lmmXoevw3iTGt4Us0rLUWwL
DdszNzJdXGYxPzFVIGR13mFb6nfeULyJdHR7Ecs4/F6IGnzsRATjD9VxvabHHARx
D0pdJHoYb6j67+u4c6P/ehFKNuO/pC3UVP8GlpP8Q0woWtX79xVBOchUmTZeiPWy
aOd6MVvKSbhb6O2aSRTl3FADReqyToE6FkFvyoC06CoMVh5S2NDfA0E9A6Crjg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:22:43 2025 by rpki-client