This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0d353d-c483-4a75-8b4d-9310ac524acd.roa
File: ba0d353d-c483-4a75-8b4d-9310ac524acd.roa (raw, json)
Hash identifier: /W69qr5E92rq5xK2m8QqdmLhfhAJMSWaTOxHZs4ia8E=
Subject key identifier: BB:B1:AB:80:4B:38:B7:B9:81:6C:37:90:14:57:AD:92:E6:39:94:49
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5730C8EFBC83A5EC8A460396B599EAFF09DA9215
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0d353d-c483-4a75-8b4d-9310ac524acd.roa
Signing time: Sat 06 Dec 2025 00:50:07 +0000
ROA not before: Sat 06 Dec 2025 00:50:07 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:30:c8:ef:bc:83:a5:ec:8a:46:03:96:b5:99:ea:ff:09:da:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 00:50:07 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=937c443752ef69cdc42cc5f9c2d0501c76702cf5411d941785a7fb0ee5889a92, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:f8:ef:d2:a2:e7:6c:50:b5:ee:6e:a3:d6:
6a:d3:e8:2b:93:dc:cf:f2:98:04:f4:f5:b0:47:d5:
ab:40:ab:92:78:4c:c6:4e:45:ec:ec:f5:37:0e:62:
9a:8c:8e:08:93:0c:40:42:25:16:3f:19:29:bf:62:
a8:f2:ae:dc:58:0b:86:7a:20:cb:45:4f:93:10:e1:
76:af:07:0a:51:90:31:8d:08:45:fb:9c:5b:e7:bf:
a2:ef:86:dd:5f:2a:2e:8a:b9:6e:93:a2:73:cb:6e:
54:82:d6:bd:54:ed:96:a8:88:eb:d7:12:bd:a3:8c:
ac:71:3f:e6:61:fa:34:98:f3:52:37:9a:f1:93:8f:
0a:e3:2d:f0:35:30:04:f3:c0:36:33:86:31:18:1d:
73:60:8d:f7:18:ef:62:d8:db:f4:f3:5f:79:a8:1d:
cc:3c:57:6b:43:b6:35:33:fa:b2:c1:8a:66:c3:06:
a8:3c:ae:e2:50:c3:af:f0:79:c7:76:92:91:c7:4d:
85:9b:e0:58:a3:a8:54:2e:90:1e:d2:fc:68:98:b7:
0a:e5:d6:7e:15:ea:95:04:39:1a:15:7e:f4:c5:ae:
0f:8d:d0:e5:a8:31:40:4e:c4:9e:be:e1:4a:dd:96:
61:37:5c:13:8e:a9:5b:ae:cc:2b:93:04:bd:72:d6:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B1:AB:80:4B:38:B7:B9:81:6C:37:90:14:57:AD:92:E6:39:94:49
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0d353d-c483-4a75-8b4d-9310ac524acd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:2040::/48
Signature Algorithm: sha256WithRSAEncryption
4c:5a:d8:03:ff:b1:5c:f0:5e:52:bf:52:98:e4:35:75:0b:67:
0b:a2:e8:3a:ba:a3:7b:45:30:01:63:22:5a:71:d4:93:44:e1:
97:42:0c:7a:41:d0:70:19:f1:16:7b:87:a0:2c:6b:e2:1a:5d:
c0:37:7f:f1:bf:04:a0:88:64:5c:80:90:0e:d1:a0:bd:c1:5d:
ae:ab:ad:eb:f8:35:48:ac:ed:8b:dc:12:43:6d:ec:fa:af:93:
ea:cf:ea:c6:9c:00:ee:f6:e9:16:56:0d:f6:11:2a:b9:f2:4d:
55:c7:d8:d5:d3:b1:bd:c0:6a:cd:e4:7c:85:14:83:9a:89:9f:
14:2b:0c:56:16:33:2a:58:51:c1:be:88:ad:11:35:8c:6c:6e:
18:31:10:8f:4d:70:79:71:87:ab:96:ba:bb:e7:00:04:70:c2:
08:16:9a:03:d2:d3:9e:ad:66:44:5b:0a:26:db:aa:f7:55:59:
7f:50:9a:30:45:ed:84:9f:fa:a2:c8:cb:59:de:bc:94:2b:89:
aa:56:d4:11:f0:ae:d7:e2:a9:0f:3b:91:1c:30:a0:fe:ac:d5:
f6:5a:77:9e:be:fa:e4:4b:4b:d8:9f:18:a4:3e:e0:85:38:9f:
95:d0:01:18:cc:6c:37:63:5a:ef:15:a9:41:4f:dc:76:3b:18:
7a:dc:f4:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:32:12 2025 by rpki-client