This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf14a324-d913-47f6-aa3f-93fe68605e17.roa
File: bf14a324-d913-47f6-aa3f-93fe68605e17.roa (raw, json)
Hash identifier: ycCiMbdabO/jxFwi/7+PE5HVy7rQ9LLXgRMNOsi3+Zs=
Subject key identifier: 7B:DF:C7:29:DB:D8:F0:CA:5D:EE:13:DE:4C:4E:1B:6E:08:C6:98:29
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2FA9AC49AD2ED1D6DC0510435D1EBD91A73CFF1E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf14a324-d913-47f6-aa3f-93fe68605e17.roa
Signing time: Sun 23 Nov 2025 01:00:49 +0000
ROA not before: Sun 23 Nov 2025 01:00:49 +0000
ROA not after: Sat 21 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:3440::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a9:ac:49:ad:2e:d1:d6:dc:05:10:43:5d:1e:bd:91:a7:3c:ff:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 23 01:00:49 2025 GMT
Not After : Feb 21 23:59:59 2026 GMT
Subject: serialNumber=141ec4457ef88d24fb6cf5792f441d3554cc60088eaba6699f9fce8e2b25a3fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:5a:5e:eb:d9:49:5f:e9:a4:5c:3c:d3:80:
32:0a:03:c9:ef:a3:22:71:ec:5a:ad:6c:3f:c9:6b:
e9:32:aa:46:af:78:80:f7:4b:dd:85:c5:82:71:62:
fb:fa:cb:08:86:57:58:19:96:e1:cd:99:fd:60:80:
02:08:dd:d9:5c:e4:ec:69:89:40:1c:04:02:ee:9d:
6f:69:a0:b3:70:87:9d:15:ed:e2:44:de:4f:a4:dd:
ec:32:65:8b:b3:77:a2:03:04:37:1f:4f:d1:c1:72:
2b:21:7a:ac:0d:19:e1:36:fc:61:fb:bd:65:50:21:
a7:2c:9d:27:01:6d:be:3a:ad:93:ba:79:a2:98:d5:
98:c5:b8:4e:c6:d8:b3:5d:fa:67:70:bf:cd:77:4d:
7f:5b:fb:d8:9c:ac:58:97:77:9f:d6:5b:95:46:d3:
b7:5c:b0:1a:64:ef:4a:66:35:27:2c:cc:72:a3:ad:
31:9b:fc:be:58:0f:f0:00:f1:0e:cc:50:36:07:10:
bf:e1:83:0c:d9:4d:18:a2:61:e0:ad:39:2b:01:18:
f8:31:98:e6:a4:ea:13:21:b5:0d:8d:db:70:ed:11:
97:ac:dd:35:c5:c3:5a:97:32:9c:dd:ca:f1:3f:37:
74:d7:b5:94:9e:a4:5d:45:ca:34:8f:29:62:83:96:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DF:C7:29:DB:D8:F0:CA:5D:EE:13:DE:4C:4E:1B:6E:08:C6:98:29
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf14a324-d913-47f6-aa3f-93fe68605e17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:3440::/46
Signature Algorithm: sha256WithRSAEncryption
cc:1a:bc:72:67:67:ae:a6:42:af:4e:28:63:f8:ac:dc:35:84:
72:ae:f7:21:40:24:74:4d:a1:cc:e0:29:c5:03:d9:69:f6:f0:
d9:be:9f:21:98:89:e1:1f:89:d3:39:30:41:1e:66:9a:0a:0d:
8d:d3:5b:89:27:55:e9:d8:e0:9e:c1:4f:dd:97:f9:e6:62:7a:
13:80:72:91:87:06:94:e1:1e:f4:f4:96:7c:a6:a9:29:80:84:
e0:dc:8d:30:44:d5:4e:ee:a0:63:2f:3c:27:eb:c0:67:3b:12:
6e:64:cb:96:44:b9:f0:2e:df:02:95:b7:1e:74:d1:7c:cf:59:
ee:e5:50:b6:ca:fd:a6:90:f4:e8:92:d1:1b:ea:44:ce:d3:ed:
f0:58:49:62:18:fa:08:28:59:74:21:86:d5:c9:f9:ea:34:79:
93:44:30:b4:c3:64:68:52:e2:02:2d:d7:ec:da:4c:30:3e:64:
75:48:b1:22:31:1b:17:df:fb:a2:86:b0:32:75:39:df:02:aa:
45:e8:a5:9d:e0:12:14:2c:64:a1:2b:14:d0:78:49:c2:37:51:
8d:4e:5f:ae:36:90:67:ff:bc:c8:55:7b:c3:27:3c:d1:0d:20:
7e:a1:79:b9:ef:2a:79:a3:e3:ca:73:b4:47:d3:2e:12:fa:39:
7e:9d:48:e1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUL6msSa0u0dbcBRBDXR69kac8/x4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIzMDEwMDQ5WhcNMjYwMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNDFlYzQ0NTdlZjg4ZDI0ZmI2Y2Y1NzkyZjQ0MWQzNTU0
Y2M2MDA4OGVhYmE2Njk5ZjlmY2U4ZTJiMjVhM2ZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC83Fpe69lJX+mkXDzTgDIKA8nvoyJx7FqtbD/Ja+kyqkav
eID3S92FxYJxYvv6ywiGV1gZluHNmf1ggAII3dlc5OxpiUAcBALunW9poLNwh50V
7eJE3k+k3ewyZYuzd6IDBDcfT9HBcisheqwNGeE2/GH7vWVQIacsnScBbb46rZO6
eaKY1ZjFuE7G2LNd+mdwv813TX9b+9icrFiXd5/WW5VG07dcsBpk70pmNScszHKj
rTGb/L5YD/AA8Q7MUDYHEL/hgwzZTRiiYeCtOSsBGPgxmOak6hMhtQ2N23DtEZes
3TXFw1qXMpzdyvE/N3TXtZSepF1FyjSPKWKDlg2ZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUe9/HKdvY8Mpd7hPeTE4bbgjGmCkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JmMTRhMzI0LWQ5MTMtNDdmNi1hYTNmLTkzZmU2ODYwNWUxNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/zNEAwDQYJKoZIhvcNAQELBQADggEBAMwavHJnZ66mQq9OKGP4rNw1
hHKu9yFAJHRNoczgKcUD2Wn28Nm+nyGYieEfidM5MEEeZpoKDY3TW4knVenY4J7B
T92X+eZiehOAcpGHBpThHvT0lnymqSmAhODcjTBE1U7uoGMvPCfrwGc7Em5ky5ZE
ufAu3wKVtx500XzPWe7lULbK/aaQ9OiS0RvqRM7T7fBYSWIY+ggoWXQhhtXJ+eo0
eZNEMLTDZGhS4gIt1+zaTDA+ZHVIsSIxGxff+6KGsDJ1Od8CqkXopZ3gEhQsZKEr
FNB4ScI3UY1OX642kGf/vMhVe8MnPNENIH6hebnvKnmj48pztEfTLhL6OX6dSOE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:31:03 2025 by rpki-client