This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa
File: b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa (raw, json)
Hash identifier: Ba9A3lkTAVAD7s0tr1buDXhDU9ENoJl4thyvZqOP3eo=
Subject key identifier: 0A:AC:E1:5F:01:AC:39:2E:14:FE:B1:41:03:DB:6A:E8:6F:E0:83:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F35469161E160EBFE9DF83E9434B15515BFC0BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa
Signing time: Sat 06 Dec 2025 00:51:17 +0000
ROA not before: Sat 06 Dec 2025 00:51:17 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:74c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:35:46:91:61:e1:60:eb:fe:9d:f8:3e:94:34:b1:55:15:bf:c0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 00:51:17 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=54f13c54dea6fe0df3d3eeb28ab5482d1b5ff4664bc35bcdaf716572935274ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:43:9f:09:2b:79:81:89:2c:e8:f6:4b:ff:
ee:c7:0a:07:c0:de:19:f7:60:9f:8a:0c:15:81:49:
0f:4f:77:5e:87:53:40:ae:b6:59:d8:09:be:3b:51:
e4:57:ed:5d:5c:4e:0f:1d:41:6a:6a:40:3c:9d:d4:
58:83:90:53:32:50:fe:4b:1d:6e:08:cf:ac:77:3f:
71:7b:37:f4:7a:2a:f0:14:60:c7:7c:da:56:30:97:
18:f5:38:c5:33:40:36:73:9b:c4:eb:61:c7:de:91:
27:85:21:14:7b:48:7f:fa:44:1f:31:c0:c5:ed:4c:
b6:7e:d5:bd:d7:ac:54:75:0f:71:da:4b:a1:95:b2:
46:ed:aa:06:7b:e8:4f:3e:d1:97:ab:0c:ca:c6:c6:
9f:4c:8f:ca:16:a7:8b:1b:07:9c:7c:2e:de:86:20:
87:db:a2:81:af:70:70:1a:aa:4f:10:8c:4e:a4:9a:
22:84:87:50:94:df:6f:bf:96:c5:7b:34:41:02:dc:
62:e5:1b:ea:8e:1d:d8:a9:34:5f:fd:9d:18:55:9c:
ca:b6:d1:25:59:ab:f5:ea:a5:48:b2:c8:cc:cf:68:
c7:d9:c4:f5:d6:31:c4:6f:94:7d:fc:94:92:1e:ad:
10:e6:cb:37:e5:a1:e2:b6:c0:88:50:f0:cf:c8:71:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AC:E1:5F:01:AC:39:2E:14:FE:B1:41:03:DB:6A:E8:6F:E0:83:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:74c0::/48
Signature Algorithm: sha256WithRSAEncryption
d7:2b:4c:bc:48:d8:ef:f4:cb:25:34:b3:9c:ff:38:4e:9e:e2:
2c:6a:d5:35:25:98:a0:f3:a5:6f:4a:53:02:41:03:ba:6d:41:
46:c2:ca:cc:db:7d:9d:2b:2d:a8:ba:90:02:fc:1f:69:5a:71:
a8:81:94:ef:f2:cf:ba:33:ab:91:24:ef:17:a2:42:31:92:ee:
c9:4d:1d:c0:0f:db:cb:65:48:1b:75:d0:41:32:65:71:a2:87:
e6:ab:e0:3e:ee:af:41:29:6a:05:2b:89:72:2f:f3:57:14:06:
08:d6:bf:5e:c8:b9:e4:ab:dc:ee:e8:fe:d4:9e:88:fa:5c:c9:
20:9f:c8:6a:0f:e5:86:d2:10:bb:e5:60:5d:34:cc:bd:dd:5e:
33:7d:2b:3c:db:5e:fe:4f:2e:7b:53:5d:b3:14:06:71:6d:5d:
41:d9:1d:0e:48:50:8e:a6:46:cb:9c:81:2f:a1:da:cf:58:9e:
03:47:8c:87:86:10:53:7c:ee:5c:13:2c:85:85:f7:fe:a5:8e:
f9:4c:1d:ed:a6:df:ea:62:95:50:2d:2e:a6:fc:de:56:aa:00:
42:f1:99:50:d8:67:8c:0e:01:21:bb:ba:5a:56:4e:f2:c8:d1:
dd:6d:ba:7c:59:bb:e4:7b:71:66:8f:b1:d9:8b:3e:f3:7c:e5:
7b:4b:ae:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:08:13 2025 by rpki-client