This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4c38ee-7dc9-4045-ad81-060fd7e9d6b0.roa
File: bb4c38ee-7dc9-4045-ad81-060fd7e9d6b0.roa (raw, json)
Hash identifier: KwzpALPkzWbCOSjgFIo8vidhPPQry7yLs9ahRHSuoFg=
Subject key identifier: 26:B2:95:36:8E:F3:4E:70:E0:4B:5E:05:8F:5F:DE:60:B4:24:0F:68
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 323EFC06499B109694E4FAF5A8B3CF3D9C566403
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4c38ee-7dc9-4045-ad81-060fd7e9d6b0.roa
Signing time: Wed 26 Nov 2025 00:11:01 +0000
ROA not before: Wed 26 Nov 2025 00:11:01 +0000
ROA not after: Tue 24 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:4120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3e:fc:06:49:9b:10:96:94:e4:fa:f5:a8:b3:cf:3d:9c:56:64:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 26 00:11:01 2025 GMT
Not After : Feb 24 23:59:59 2026 GMT
Subject: serialNumber=1b5687d8c485e21deae9ed94ab98f4789ae5d1dff2117262d626b7ef5c6829ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:f3:86:ef:cd:90:cd:cb:5f:68:31:7e:8e:
a1:72:19:36:0c:0b:8b:a4:28:01:95:e6:2d:01:b9:
0e:58:c6:79:84:5d:f7:60:12:3b:ae:27:fd:cf:5c:
54:94:8f:f7:24:6c:f7:1d:5f:60:67:3c:8a:21:b1:
55:8f:75:25:19:6d:02:b2:87:8d:4d:dc:10:23:c5:
5c:91:ca:01:1b:77:8c:40:45:02:ba:f6:d7:b3:f8:
34:db:6f:b9:fe:60:9d:0a:4a:fa:22:80:9e:51:0f:
13:fb:5f:44:2f:7b:fb:9b:44:1e:20:6c:c2:c3:f9:
f1:01:15:5a:9d:da:4b:4d:2a:f6:3f:ca:2c:40:ff:
10:9e:68:47:36:70:11:0d:71:53:2a:d1:98:ce:08:
3c:0c:cc:2d:2b:e2:69:20:a4:c5:5a:5f:f4:d3:a5:
16:88:ef:0b:fe:79:b1:b0:f7:c8:a2:44:6d:0e:e8:
52:8f:0c:86:aa:70:9b:a9:af:2e:d2:31:2e:3e:dc:
34:6a:f8:12:67:48:fc:13:fc:23:d7:2a:ec:de:61:
1c:3f:8d:ce:a4:94:41:71:96:0d:8a:3a:2d:b4:4d:
3f:e7:b0:2d:38:25:69:73:5c:d2:10:3e:0b:72:41:
df:e1:b5:fe:be:3a:15:e0:82:aa:7a:40:ed:31:75:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:95:36:8E:F3:4E:70:E0:4B:5E:05:8F:5F:DE:60:B4:24:0F:68
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4c38ee-7dc9-4045-ad81-060fd7e9d6b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:4120::/48
Signature Algorithm: sha256WithRSAEncryption
12:63:1a:73:f9:b6:64:92:b7:2f:b9:1e:30:ed:0c:e7:8e:b2:
18:47:3c:be:09:ce:5f:88:d3:6b:7f:55:26:4e:4e:02:f1:3d:
64:35:ca:35:82:f2:b0:da:69:23:ad:41:c5:df:08:87:b6:64:
05:f4:e3:a4:fa:3f:f4:d1:1c:ad:79:67:8e:65:df:29:1d:70:
04:75:7f:32:a3:74:34:aa:f0:2a:9b:59:81:e7:4a:60:0e:77:
53:d5:91:75:12:7d:91:62:64:62:50:79:5c:68:a7:f4:63:27:
c8:e9:f1:44:fc:43:d7:58:c2:0d:28:27:c9:9d:72:b6:73:09:
9c:8b:f9:5b:f1:3e:bc:6c:64:08:48:51:0b:77:dc:5a:42:ba:
75:b3:7b:b8:5c:f1:32:fb:39:ba:ff:3a:9f:fe:b8:7b:23:ff:
50:78:65:67:1e:e4:2d:7e:7d:cb:e2:bf:74:d7:c6:7b:9f:0d:
e6:06:db:46:18:11:f8:0d:60:fd:a9:90:24:48:38:db:59:f7:
83:d1:1b:7c:b8:c0:1b:24:68:56:b4:c8:e7:87:72:2d:b8:71:
cd:ac:5b:e5:d1:9b:4b:53:00:5f:68:6f:0d:67:8a:5d:78:a5:
1c:31:78:cd:4c:d1:df:7f:72:e9:4b:00:26:87:24:9e:01:8d:
9a:f1:b6:13
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMj78BkmbEJaU5Pr1qLPPPZxWZAMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI2MDAxMTAxWhcNMjYwMjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYjU2ODdkOGM0ODVlMjFkZWFlOWVkOTRhYjk4ZjQ3ODlh
ZTVkMWRmZjIxMTcyNjJkNjI2YjdlZjVjNjgyOWNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5Q/OG782QzctfaDF+jqFyGTYMC4ukKAGV5i0BuQ5YxnmE
XfdgEjuuJ/3PXFSUj/ckbPcdX2BnPIohsVWPdSUZbQKyh41N3BAjxVyRygEbd4xA
RQK69tez+DTbb7n+YJ0KSvoigJ5RDxP7X0Qve/ubRB4gbMLD+fEBFVqd2ktNKvY/
yixA/xCeaEc2cBENcVMq0ZjOCDwMzC0r4mkgpMVaX/TTpRaI7wv+ebGw98iiRG0O
6FKPDIaqcJupry7SMS4+3DRq+BJnSPwT/CPXKuzeYRw/jc6klEFxlg2KOi20TT/n
sC04JWlzXNIQPgtyQd/htf6+OhXggqp6QO0xdSU/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJrKVNo7zTnDgS14Fj1/eYLQkD2gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JiNGMzOGVlLTdkYzktNDA0NS1hZDgxLTA2MGZkN2U5ZDZiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AQSAwDQYJKoZIhvcNAQELBQADggEBABJjGnP5tmSSty+5HjDtDOeO
shhHPL4Jzl+I02t/VSZOTgLxPWQ1yjWC8rDaaSOtQcXfCIe2ZAX046T6P/TRHK15
Z45l3ykdcAR1fzKjdDSq8CqbWYHnSmAOd1PVkXUSfZFiZGJQeVxop/RjJ8jp8UT8
Q9dYwg0oJ8mdcrZzCZyL+VvxPrxsZAhIUQt33FpCunWze7hc8TL7Obr/Op/+uHsj
/1B4ZWce5C1+fcviv3TXxnufDeYG20YYEfgNYP2pkCRIONtZ94PRG3y4wBskaFa0
yOeHci24cc2sW+XRm0tTAF9obw1nil14pRwxeM1M0d9/culLACaHJJ4BjZrxthM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:18:28 2025 by rpki-client