This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac0c9bbb-60c5-4758-abc3-54032a060d3a.roa
File: ac0c9bbb-60c5-4758-abc3-54032a060d3a.roa (raw, json)
Hash identifier: VPulPY6V2QOEACk9pV3Ocwvqy5O1vC6B5ZPoB2bHVrw=
Subject key identifier: 41:CC:0C:3E:7E:C9:71:A2:4A:40:EF:D4:2E:7F:B1:78:C3:08:38:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F169B8EA4F8AD3DD3A602987DFB192A8942A110
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac0c9bbb-60c5-4758-abc3-54032a060d3a.roa
Signing time: Wed 19 Nov 2025 00:32:13 +0000
ROA not before: Wed 19 Nov 2025 00:32:13 +0000
ROA not after: Tue 17 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 153.12.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:16:9b:8e:a4:f8:ad:3d:d3:a6:02:98:7d:fb:19:2a:89:42:a1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 19 00:32:13 2025 GMT
Not After : Feb 17 23:59:59 2026 GMT
Subject: serialNumber=f42c4f661f57750e6284fcacbdce4fd37d98bdfa1952ad321d169d99ed8b097e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:a4:2c:3b:2f:3a:c7:71:1c:34:bd:0e:a9:
2a:7e:f2:8f:0a:8d:71:6e:1a:1b:f4:5e:26:3f:81:
0d:b9:96:19:a0:0d:b4:8b:f6:4d:33:48:95:90:07:
43:0c:43:d6:97:63:89:5e:a2:3b:c0:68:4f:22:c8:
72:0e:1d:7b:af:9a:73:68:dc:16:a4:89:85:35:22:
46:da:76:33:34:4f:a0:03:d2:4e:b0:93:4f:0c:35:
41:f0:02:42:99:03:98:55:1f:17:46:d7:3d:5e:f4:
f9:33:0a:2f:d4:44:75:95:d4:f6:c1:95:15:d9:1e:
5c:eb:9c:ab:d5:f9:b0:b1:30:1e:dc:c4:9f:44:0a:
d9:a1:f7:07:5d:2e:98:64:0d:e8:aa:ee:88:ae:1b:
ea:c5:27:b5:0a:ea:f7:e1:0d:77:8d:aa:fd:53:25:
6a:96:eb:2a:4e:85:5d:1a:43:fa:32:19:ac:8b:6b:
0c:c4:59:bc:44:ab:4a:d2:a4:11:aa:79:73:cd:88:
e8:c0:42:63:5b:58:28:e2:23:cf:17:7e:25:33:4c:
1f:fd:e2:57:28:13:bd:e5:9d:c6:ab:9f:a8:0d:02:
2d:59:b2:ab:eb:19:72:98:5f:b1:7a:f6:61:80:76:
e8:1d:a0:38:e3:a7:4f:0e:23:d9:19:2e:7d:fe:67:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:0C:3E:7E:C9:71:A2:4A:40:EF:D4:2E:7F:B1:78:C3:08:38:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac0c9bbb-60c5-4758-abc3-54032a060d3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.12.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:65:90:b3:99:c8:29:29:75:18:61:ef:57:39:4d:83:35:be:
e3:7d:10:49:ba:d6:61:00:11:f0:e4:64:f8:fc:ad:3d:35:06:
c6:b2:bb:83:7b:13:6e:a5:12:09:df:b3:1d:e6:95:70:9d:99:
0f:8e:6c:aa:08:8f:64:21:b5:2c:80:78:0e:81:ba:b2:98:93:
fc:0e:42:5b:92:b1:d2:44:4f:b2:5d:d7:9c:48:c7:77:a9:e3:
41:a1:b1:c8:da:9d:9c:9e:61:57:83:f5:2c:60:89:49:60:26:
15:44:9c:b1:21:b0:a2:a7:a6:b9:80:f3:8b:42:15:5d:b8:15:
08:db:cb:6f:27:00:87:65:9c:2d:1d:4a:4f:16:1b:ce:27:76:
b3:bd:9f:4c:92:9c:b3:6f:75:3a:16:0f:d3:5d:c8:e7:cf:0f:
81:ff:29:e7:9c:db:6e:03:c3:5f:24:e5:15:13:fe:ef:e5:fa:
e7:1c:ff:ea:b5:39:72:87:43:e8:a8:bb:af:fb:35:63:07:03:
e4:81:82:c5:a7:68:1e:9f:6f:5a:75:fa:4d:c1:e0:1e:04:c1:
dd:37:bf:a2:41:8c:18:46:e1:1a:64:cf:b3:0f:25:e2:1f:55:
1e:9e:3f:c1:b2:26:d6:e4:ad:a6:f4:b2:2a:9f:56:dd:10:9b:
ca:3a:67:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:00 2025 by rpki-client