This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa
File: b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa (raw, json)
Hash identifier: o4Tg/AMIvf99PxdIfL9hyN4WOf/L3zM9zUc/UGkczVs=
Subject key identifier: C9:D1:80:4F:A3:9D:71:67:7A:D3:0F:EA:2E:82:A4:2C:D9:97:31:8B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EA517CE23B13CEEE9D75382CA708158593CCDE1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa
Signing time: Sat 06 Dec 2025 00:50:09 +0000
ROA not before: Sat 06 Dec 2025 00:50:09 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f61:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a5:17:ce:23:b1:3c:ee:e9:d7:53:82:ca:70:81:58:59:3c:cd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 00:50:09 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=d4693d2e83bb91df8ecdb3d8ae75b31478e532016dc027ca6e28c8f81984bb8c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:21:54:7b:2c:aa:eb:52:d6:45:d0:e0:23:
0d:8b:bb:31:b3:f9:c1:e0:7b:38:34:5d:b1:8e:d7:
55:63:a2:f2:a9:9a:b7:9e:b4:9e:b5:bf:f1:c3:a8:
83:ec:74:e8:4e:20:a5:8b:d2:8e:02:65:0c:40:47:
4b:31:06:8e:64:83:37:db:aa:77:17:69:7b:00:1b:
49:39:67:6d:fd:9a:2f:c1:25:ab:7c:3b:2c:bf:e8:
8c:3b:9b:f5:bb:ac:f5:39:56:a2:b4:cf:08:54:f8:
c7:c4:54:6a:b5:00:84:60:9d:d3:3e:62:44:eb:c8:
1c:5b:89:12:ce:d7:67:68:2d:9d:47:f2:de:1d:f0:
70:a2:b8:57:7c:7d:1d:de:08:0f:ef:9a:19:b5:63:
10:40:d1:33:f5:db:06:4f:69:95:8c:24:66:5c:56:
37:e2:7f:6c:43:a9:f9:30:ff:96:74:c3:8e:e9:3c:
02:e6:56:e9:61:79:97:07:74:5f:c9:69:28:ff:bc:
9b:5a:1c:36:4a:b2:2f:9a:68:55:bf:f2:db:b6:d5:
eb:a2:80:b5:44:71:f2:91:7f:bb:17:7c:a3:ef:0c:
8d:e2:98:05:b2:36:89:b2:6c:b8:d0:e4:ad:71:bb:
29:fa:00:e6:9f:bc:e0:64:28:b9:d2:4e:b9:5e:d4:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D1:80:4F:A3:9D:71:67:7A:D3:0F:EA:2E:82:A4:2C:D9:97:31:8B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7fd3b9b-ce27-4690-920b-774b7d5ae223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:8020::/48
Signature Algorithm: sha256WithRSAEncryption
33:98:f7:8c:39:88:da:15:3f:d4:e5:c5:81:0a:3c:a5:3a:a1:
12:aa:03:ef:a9:75:4d:ca:21:15:24:f4:87:0f:e9:a8:0b:a3:
a6:ee:56:2a:70:b4:bf:aa:05:68:db:06:70:8e:05:ad:41:21:
6b:cf:33:62:6a:d2:c5:21:67:25:a6:39:25:17:af:99:32:0b:
6b:79:98:34:e8:e9:71:05:14:fa:eb:bf:b4:c1:f4:9b:03:38:
62:ea:aa:9c:1f:a2:fb:67:23:a8:69:6d:4b:e8:f3:5d:3a:ca:
f3:c9:a5:7c:af:23:ac:bb:73:31:2d:08:64:dc:bb:16:20:e9:
55:15:7b:e1:6f:9b:00:ed:f2:35:f4:0c:b9:1d:ae:5e:81:fe:
f9:9d:2b:32:bd:d2:cc:3f:ab:de:f4:d1:96:bd:4b:d5:e0:96:
4a:8a:40:fa:bf:dc:15:ff:59:ab:11:90:41:24:b5:ff:03:1c:
ca:23:46:3a:ae:bc:ba:46:2c:4f:b4:01:b9:d5:d5:d3:4e:e3:
be:5c:20:4f:96:13:1c:94:25:c4:95:2d:d8:07:a2:3c:8d:78:
d5:58:43:50:26:30:e0:02:69:0b:62:fd:88:01:9c:ea:76:3d:
c0:90:8b:ff:d5:fc:c5:bb:e8:36:35:fb:84:e9:6d:4f:9c:c0:
cd:81:d6:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:24:06 2025 by rpki-client