This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa
File: b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa (raw, json)
Hash identifier: PYbVzDmHygTS4kMtMCMv9GS1ErcMMTPXF5X8c/NQEaY=
Subject key identifier: E5:37:FA:4E:9B:50:BF:2C:C4:FD:8F:DD:C6:BA:DF:95:0E:F1:98:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33FCBAA700B96FB4D0D1BFB75D9115E06203A099
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa
Signing time: Wed 26 Nov 2025 00:30:08 +0000
ROA not before: Wed 26 Nov 2025 00:30:08 +0000
ROA not after: Tue 24 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 209.248.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:fc:ba:a7:00:b9:6f:b4:d0:d1:bf:b7:5d:91:15:e0:62:03:a0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 26 00:30:08 2025 GMT
Not After : Feb 24 23:59:59 2026 GMT
Subject: serialNumber=268bbf915d8f273b181204fec794f7437104ce8dd7223d8ccc323f5c0369c03e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:5d:23:45:2f:58:be:30:b7:8b:61:4c:c2:
d5:bb:a2:b1:13:dc:b4:1f:6a:d4:a7:7b:a0:21:85:
01:be:c1:83:8d:cd:e3:cf:6c:03:b0:b0:e1:f2:0a:
f7:a0:24:32:13:5d:f4:eb:b2:f1:1f:1c:a7:b4:eb:
23:05:7a:73:9a:5b:3d:3f:65:56:32:21:ab:8c:ee:
d9:04:00:8c:fb:de:1e:12:42:7e:d2:95:1d:2a:56:
eb:09:e5:d6:e5:54:a9:ed:11:d9:38:ed:b8:8e:c7:
7b:57:32:c6:f9:85:23:c0:7e:39:23:92:09:0d:57:
8b:b9:f9:1d:b2:f4:e4:4d:7b:a2:5b:e9:02:c3:2b:
e5:c4:0b:11:78:3d:b5:48:7c:1a:4a:f5:8d:0d:0e:
a7:55:81:58:4d:dc:0e:f3:2e:8a:9d:5b:89:7c:6c:
dd:32:8f:26:20:a2:0e:99:57:75:92:0a:33:b5:bb:
64:f5:df:06:d9:ef:ad:87:07:b2:af:b6:fe:d5:47:
f7:0a:8b:a2:4d:72:83:7d:16:32:0a:26:b2:aa:84:
a1:c1:02:ba:7d:ce:f6:d4:5a:04:18:7a:c9:71:51:
22:a6:bb:6f:6c:d2:1e:50:6b:bf:f3:2c:6d:ef:a7:
e3:47:58:91:f4:30:8d:b2:d2:bd:25:eb:c3:a7:6c:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:FA:4E:9B:50:BF:2C:C4:FD:8F:DD:C6:BA:DF:95:0E:F1:98:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b01f5a39-26bb-4920-a2d3-e44bbf13abab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
bb:a2:2c:91:18:52:5d:55:b7:98:bc:97:8e:ab:a8:70:8c:05:
d6:77:8c:a8:ec:09:ce:6e:b4:18:2e:56:69:a6:ef:1d:ac:4d:
54:ad:c7:ee:76:e1:fe:74:83:57:6d:5f:19:f8:f0:cd:3d:08:
ca:9a:77:21:b5:de:b2:62:ba:5e:bc:fb:c7:e6:c6:5a:e8:f3:
3d:0f:94:49:e1:2d:ac:4b:bf:26:00:c1:c1:c0:9d:3c:bc:af:
09:6e:69:80:51:04:19:85:a4:f6:e5:48:4f:5c:b5:a1:e9:22:
a9:5e:75:0b:10:7e:bd:3f:62:37:8c:bb:58:9b:c6:e3:ff:53:
df:09:c6:42:48:54:ce:26:94:e0:a7:90:4e:68:7d:9d:c7:de:
37:d2:45:33:31:a4:ec:20:38:13:54:81:ee:e7:35:10:d3:51:
38:c5:ce:12:95:d1:14:06:43:4d:8e:07:1a:86:78:97:6d:4a:
ea:54:d9:20:3f:24:ae:4f:f7:95:df:78:61:d8:3d:ea:eb:bb:
41:c1:62:a9:40:9e:ea:d2:b2:9a:57:b0:f1:79:a7:af:46:91:
f3:8d:16:2c:be:c6:a6:9d:9a:f5:9d:f3:e8:14:4e:cb:19:29:
40:66:1f:b2:66:8e:ca:0a:98:8b:a5:d2:ea:ab:67:00:53:5f:
0c:6e:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:01:13 2025 by rpki-client