This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa
File: b3c97cba-7083-48f3-8280-ad90bc3bee59.roa (raw, json)
Hash identifier: EYiy3bxLmLTVRTrMepnqVN+aSdwKA74qXsvCv+LMoJo=
Subject key identifier: D4:39:16:AC:8E:F0:43:C9:6B:86:88:A8:21:35:56:44:FB:C8:26:49
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F8A526D91B7884F3D62070A695E511191B8EE43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa
Signing time: Sat 22 Nov 2025 00:30:11 +0000
ROA not before: Sat 22 Nov 2025 00:30:11 +0000
ROA not after: Fri 20 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 192.10.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:8a:52:6d:91:b7:88:4f:3d:62:07:0a:69:5e:51:11:91:b8:ee:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 22 00:30:11 2025 GMT
Not After : Feb 20 23:59:59 2026 GMT
Subject: serialNumber=f322cabe6506d3bb977c6f6f0fbe7435fc13678cde90e0f92ebd4acf9bfd80b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:93:82:8f:f2:b1:fc:cc:a9:fc:a6:76:bf:
d8:3c:d4:dc:15:4f:90:37:4e:c4:09:82:5e:85:c0:
f8:50:7e:e4:28:d3:87:30:c0:49:cf:93:41:b8:4b:
95:bd:07:d0:89:4a:51:0c:2d:09:e8:cc:be:63:87:
dc:79:9b:47:ae:00:05:f2:38:31:ed:b0:97:ba:82:
0c:a9:9e:f6:fb:2e:ba:51:e7:17:91:5b:32:6f:f1:
a8:ea:72:cb:01:68:cf:47:6d:ed:84:e9:ed:88:48:
42:44:20:28:33:ac:25:6a:65:db:67:e2:d6:13:13:
b1:b3:7f:5b:0c:f8:e9:44:b0:d3:df:7c:0c:b8:86:
86:cc:b6:09:d6:c1:1e:da:4e:f4:c4:70:cf:1b:b4:
94:19:88:61:7f:d0:67:4e:d4:2e:15:ef:79:12:66:
bc:8d:72:fe:a0:ba:82:ed:55:46:a9:98:37:bd:a1:
48:32:ea:36:3f:50:3a:c0:46:db:7a:c5:82:d2:b2:
35:47:4d:31:85:6d:9d:6f:2a:e0:7b:f2:30:99:26:
d0:95:ea:86:77:e0:10:f7:e1:d2:5d:a6:7e:63:f7:
e9:2b:c7:41:24:b7:82:44:d0:5c:57:39:d0:65:06:
e2:bf:8f:4c:6d:06:db:16:e7:71:be:42:b5:19:6e:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:16:AC:8E:F0:43:C9:6B:86:88:A8:21:35:56:44:FB:C8:26:49
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3c97cba-7083-48f3-8280-ad90bc3bee59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:13:0d:be:06:13:f4:75:2b:41:d5:4f:dc:f3:b8:a4:2b:45:
f7:54:a9:cc:fc:8c:ea:17:cb:9e:39:dc:69:03:1b:27:d8:59:
27:71:0f:12:8d:6b:44:02:c4:15:10:f4:40:87:ea:5c:ee:17:
d7:47:48:56:e2:39:1e:5b:f4:c9:00:83:c9:10:b9:fa:f4:92:
72:34:6f:7c:51:96:60:7e:de:bd:ce:b9:a2:2d:64:f2:c6:f8:
c2:4e:5d:d2:38:83:8a:e1:5c:ad:d6:ff:c2:90:fb:41:86:98:
c8:8e:20:ca:c4:fe:84:6a:d4:fb:b8:cb:41:25:c8:b1:13:28:
0f:b4:d9:97:b8:23:ce:c5:7e:ca:9a:62:8a:87:c4:77:c8:26:
ad:54:37:07:87:5c:44:16:9f:8f:0e:bf:8d:90:fc:33:e4:2d:
bf:5e:10:c7:1e:02:68:63:7f:ed:19:a8:52:81:13:9c:55:e4:
2b:05:72:03:74:76:21:a4:be:dc:87:9e:62:b3:81:55:a1:b2:
69:ac:e4:be:90:39:2d:c0:97:6c:1a:68:3a:bd:cd:42:82:90:
b5:0e:a1:04:30:16:b7:29:de:fd:a8:42:16:f5:53:88:95:ff:
23:93:4e:d4:8a:24:0b:8c:bd:ff:7e:20:78:3b:04:26:f5:d1:
da:f1:5f:56
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUX4pSbZG3iE89YgcKaV5REZG47kMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAzMDExWhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmMzIyY2FiZTY1MDZkM2JiOTc3YzZmNmYwZmJlNzQzNWZj
MTM2NzhjZGU5MGUwZjkyZWJkNGFjZjliZmQ4MGIxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWhZOCj/Kx/Myp/KZ2v9g81NwVT5A3TsQJgl6FwPhQfuQo
04cwwEnPk0G4S5W9B9CJSlEMLQnozL5jh9x5m0euAAXyODHtsJe6ggypnvb7LrpR
5xeRWzJv8ajqcssBaM9Hbe2E6e2ISEJEICgzrCVqZdtn4tYTE7Gzf1sM+OlEsNPf
fAy4hobMtgnWwR7aTvTEcM8btJQZiGF/0GdO1C4V73kSZryNcv6guoLtVUapmDe9
oUgy6jY/UDrARtt6xYLSsjVHTTGFbZ1vKuB78jCZJtCV6oZ34BD34dJdpn5j9+kr
x0Ekt4JE0FxXOdBlBuK/j0xtBtsW53G+QrUZbqq7AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU1DkWrI7wQ8lrhoioITVWRPvIJkkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IzYzk3Y2JhLTcwODMtNDhmMy04MjgwLWFkOTBiYzNiZWU1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDACjANBgkqhkiG9w0BAQsFAAOCAQEAOxMNvgYT9HUrQdVP3PO4pCtF91Sp
zPyM6hfLnjncaQMbJ9hZJ3EPEo1rRALEFRD0QIfqXO4X10dIVuI5Hlv0yQCDyRC5
+vSScjRvfFGWYH7evc65oi1k8sb4wk5d0jiDiuFcrdb/wpD7QYaYyI4gysT+hGrU
+7jLQSXIsRMoD7TZl7gjzsV+yppiiofEd8gmrVQ3B4dcRBafjw6/jZD8M+Qtv14Q
xx4CaGN/7RmoUoETnFXkKwVyA3R2IaS+3IeeYrOBVaGyaazkvpA5LcCXbBpoOr3N
QoKQtQ6hBDAWtyne/ahCFvVTiJX/I5NO1IokC4y9/34geDsEJvXR2vFfVg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:29:29 2025 by rpki-client