This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cca3dd2e-e256-4ecc-b4fb-b212de3e5681.roa
File: cca3dd2e-e256-4ecc-b4fb-b212de3e5681.roa (raw, json)
Hash identifier: tNOyCFOV0PYpIbWcXmyzPVtcCVuKpcoZd3d28W8rQ5E=
Subject key identifier: 12:4B:02:08:1B:A8:1E:FE:92:87:A6:8C:00:7A:E5:B7:39:6E:C3:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 28D21A0660FE90EA7E7D5BC0B31DE3C7F14B7452
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cca3dd2e-e256-4ecc-b4fb-b212de3e5681.roa
Signing time: Sat 22 Nov 2025 00:40:06 +0000
ROA not before: Sat 22 Nov 2025 00:40:06 +0000
ROA not after: Fri 20 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 216.215.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d2:1a:06:60:fe:90:ea:7e:7d:5b:c0:b3:1d:e3:c7:f1:4b:74:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 22 00:40:06 2025 GMT
Not After : Feb 20 23:59:59 2026 GMT
Subject: serialNumber=779209400b3231abbb1f9088c494c48ef7d5e57620bce5d39958c0b9220b3aff, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:0e:b0:33:10:12:2c:2b:b5:8b:ae:3b:88:
51:49:04:18:4c:95:96:32:cf:72:17:2a:fa:75:1d:
11:9a:97:b5:96:1a:2f:02:af:c8:64:d1:26:3b:9b:
0b:d8:4e:a8:3d:e2:23:50:89:35:ba:f6:86:b8:60:
12:06:1f:d2:15:56:97:34:05:d7:71:4a:7d:c5:63:
4c:0b:00:c6:71:9d:b7:cc:ff:f6:27:0e:39:50:62:
d3:f6:8a:1d:7a:06:e9:ea:60:c5:01:65:53:bc:4e:
4a:7c:61:2b:8c:8e:5c:c1:b4:fd:c5:d3:85:5c:e5:
c9:53:00:0b:b0:6e:34:a0:15:ff:66:fa:21:a7:9c:
3d:00:5c:2c:5f:d1:45:fb:b8:e9:1e:4e:9d:d7:45:
36:6a:40:f9:e0:2e:7f:d7:fa:0a:ea:48:ca:75:31:
45:21:93:92:b4:8a:09:fe:de:2b:29:6a:9b:53:79:
4f:c1:a6:c7:61:36:c9:e7:cc:8d:59:10:66:b4:e3:
bb:92:d4:35:61:cf:2f:b9:20:6e:64:da:92:1a:9b:
60:d0:92:77:93:ea:71:80:f2:69:27:55:12:6b:b4:
05:a9:f0:8a:f8:d0:3d:6e:d1:ca:b0:24:32:34:f1:
f9:ca:48:f8:98:47:24:84:e6:64:20:b6:09:5d:6e:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:02:08:1B:A8:1E:FE:92:87:A6:8C:00:7A:E5:B7:39:6E:C3:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cca3dd2e-e256-4ecc-b4fb-b212de3e5681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.215.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8f:b1:10:f7:ec:85:14:59:ce:58:eb:e2:84:27:18:2c:25:9f:
3d:97:73:61:cb:77:9b:46:a3:09:f7:57:f8:58:f3:76:06:ac:
04:48:91:35:67:ca:4f:a7:a6:62:83:c1:32:8f:49:14:54:82:
cf:66:71:d7:2b:7a:86:ca:49:40:5f:81:24:53:e5:18:6f:75:
e4:a8:c4:6e:7b:36:53:c2:16:1d:92:5a:0d:69:4a:19:b9:26:
94:6d:15:98:da:1d:1b:eb:2f:f5:61:60:f9:07:79:cc:62:3f:
64:98:3c:96:85:25:1f:94:ed:47:9a:41:f3:f0:b2:39:d9:48:
ab:01:fc:28:e4:e6:70:2d:02:4e:8c:1e:b3:33:40:98:31:f7:
d2:d0:3f:f8:d6:b5:67:fb:80:d9:f2:43:0b:0b:ff:b2:c5:57:
74:c0:11:48:91:1f:16:af:9e:32:36:97:d7:63:15:78:48:6b:
aa:e0:d8:f7:2b:1c:99:4b:c9:df:2a:49:fe:a5:30:e2:93:7f:
47:8a:90:57:cf:1f:d4:87:2a:37:27:b4:6b:c1:4a:6a:a5:34:
80:dc:73:3d:ea:48:90:5c:d2:7c:ad:25:0e:67:26:e3:3f:db:
0b:13:69:27:c1:9b:75:0b:be:2f:cc:8a:1a:68:74:ad:95:12:
8a:15:0a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:23:23 2025 by rpki-client