This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c519af15-33bf-4884-a6c5-459c9023ad53.roa
File: c519af15-33bf-4884-a6c5-459c9023ad53.roa (raw, json)
Hash identifier: U+gI0MW2aNbpv0IU7jc59syp+p+2tZ2VhKr0HdDMen4=
Subject key identifier: 87:8C:4E:91:97:F7:89:21:CA:BE:04:DF:F8:57:45:2F:7F:42:71:F7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 78000A2A7C0A1387C8F1413559D7E423FAABCF85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c519af15-33bf-4884-a6c5-459c9023ad53.roa
Signing time: Wed 19 Nov 2025 00:30:13 +0000
ROA not before: Wed 19 Nov 2025 00:30:13 +0000
ROA not after: Tue 17 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 199.61.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:00:0a:2a:7c:0a:13:87:c8:f1:41:35:59:d7:e4:23:fa:ab:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 19 00:30:13 2025 GMT
Not After : Feb 17 23:59:59 2026 GMT
Subject: serialNumber=1f88d04b601f7cd331d583397fc857e6616f550a089dff4828d88a1f5683a636, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:11:c9:36:60:d8:39:75:6e:e0:a0:63:fe:
8d:f3:9a:30:6a:e0:92:e7:45:3c:fc:f2:ef:ef:d6:
3a:49:87:69:d2:e5:27:94:fd:da:48:a7:81:aa:4b:
f0:78:5a:4f:ca:be:59:94:e7:8a:9a:ca:06:bc:f1:
b4:78:20:04:9f:d6:6f:b1:03:b1:06:13:92:54:6f:
de:44:86:a1:ee:40:26:c6:92:71:a4:27:7f:ff:a2:
9b:93:66:84:97:7f:08:a2:76:e6:82:7f:e0:e0:51:
bd:d9:a5:84:fa:61:6f:dd:86:39:6a:14:ff:67:2b:
22:9f:36:9f:0b:fa:c5:cb:74:3b:a6:83:d5:60:90:
e6:b5:98:32:9f:ae:4c:d6:0b:b8:37:4b:c1:62:36:
f8:c8:8f:2a:0d:bb:f2:af:b4:a9:dd:02:38:65:51:
ee:ca:6c:03:75:30:22:14:be:5d:ae:57:d0:d6:08:
75:bf:51:7b:87:68:a2:17:5b:90:d7:e6:39:8d:3b:
eb:b2:8e:d3:5b:7f:58:13:01:e3:75:36:cf:36:43:
12:93:d6:a0:01:15:ac:80:b4:0f:09:64:7c:fd:e6:
af:bd:47:90:09:ca:23:3f:d3:d3:cb:fa:fa:95:83:
04:14:f9:b6:79:c6:14:aa:9f:ba:4d:74:c4:4f:f3:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8C:4E:91:97:F7:89:21:CA:BE:04:DF:F8:57:45:2F:7F:42:71:F7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c519af15-33bf-4884-a6c5-459c9023ad53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:e6:29:89:31:df:37:0d:dd:dd:b3:70:d1:21:52:33:9c:3f:
68:65:d2:0d:d6:a5:09:20:28:2b:45:26:d5:78:6e:f4:80:bf:
06:88:96:18:5b:c9:0a:a0:39:5b:5e:65:01:70:aa:ad:c2:f6:
b4:50:77:ea:b9:d1:8b:3f:cc:6d:52:b8:c9:ec:d8:9b:22:d0:
76:3b:d3:50:f7:86:a8:3e:08:d9:f9:e0:66:3f:b0:ba:9d:91:
7d:7f:e8:41:93:fe:1b:e1:1b:dd:87:30:0c:d8:66:09:e3:5e:
99:78:5c:9e:bd:7e:4e:72:bc:4e:9c:de:98:7a:50:96:f5:e5:
8c:da:c2:66:ae:c0:b5:41:9c:79:cb:2f:d2:82:bc:28:3a:c6:
7f:ef:f5:c1:b8:86:e3:23:1f:21:1c:72:54:ad:d3:67:eb:fd:
5c:03:0c:ac:a7:16:a8:45:86:da:93:30:d3:0c:bb:4f:00:40:
76:24:fc:9d:40:99:60:14:10:95:bd:b8:ec:ae:78:67:7b:1a:
a0:6e:95:d1:cf:5c:57:ea:1b:f7:62:27:85:e4:ea:b1:70:63:
2a:b1:8d:db:fc:37:b4:97:9a:20:97:31:b7:92:eb:9c:2f:b2:
eb:ce:cd:26:88:cd:4c:bd:e7:09:2c:4d:bd:0c:68:11:5f:a9:
82:b4:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:25 2025 by rpki-client