This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d33bfeb9-0b50-443e-8a06-3a81baa27766.roa
File: d33bfeb9-0b50-443e-8a06-3a81baa27766.roa (raw, json)
Hash identifier: 2a7oGHM2sbs7CZ94BLZCwFHliEINMZVmnX+IGZkzf34=
Subject key identifier: 0B:03:2D:99:52:D8:82:9F:D3:A1:B1:7B:4E:C1:A7:A6:23:93:F2:2B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F5F629BEBA9BDB30D64E9F184A23E629D2C3FB5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d33bfeb9-0b50-443e-8a06-3a81baa27766.roa
Signing time: Sat 29 Nov 2025 00:10:05 +0000
ROA not before: Sat 29 Nov 2025 00:10:05 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5f:62:9b:eb:a9:bd:b3:0d:64:e9:f1:84:a2:3e:62:9d:2c:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 29 00:10:05 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=7d76303046abbd0745036c9447e948a829cfe01f79d061b47cc7f7d701ca557b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:16:2b:69:aa:8e:c4:99:6f:fd:1e:8b:7f:
c9:cc:8c:d7:da:81:ac:17:a4:30:9d:9a:0b:3b:41:
81:92:5b:c1:4d:b7:81:b9:94:32:62:16:f1:54:b2:
1b:2a:12:29:d0:0f:5f:41:cf:bb:a4:04:bf:33:c7:
e2:b9:1a:25:d6:e0:4f:0f:8d:73:5b:30:4a:47:dc:
31:f4:cf:a0:e5:82:6f:63:85:7d:ce:a5:91:7d:3e:
70:8a:62:de:7c:45:6f:80:46:2e:db:04:e7:02:56:
a7:8a:d4:1f:26:2c:6c:b8:14:3f:41:6f:a8:04:35:
48:24:4e:b0:e4:45:2f:31:5c:fe:6d:b1:10:12:39:
ed:f8:4f:fc:63:af:c1:b6:8f:fb:6c:e8:74:41:64:
ac:79:4a:1a:c4:94:bc:d8:b9:73:c3:27:27:e4:10:
84:42:26:3f:e2:19:44:35:c0:5d:88:14:29:cc:2e:
72:a8:b2:77:52:c0:e3:42:2e:a4:3c:74:3c:51:cd:
c4:f9:58:6f:8c:bf:e5:2e:e0:45:23:0e:e1:80:da:
86:f4:8c:e7:61:2d:f2:74:a8:6a:1a:9d:ff:0c:56:
92:f0:95:5e:e9:6e:f2:a4:7f:93:03:d9:d0:ed:71:
9f:ac:11:79:92:86:35:80:73:1e:52:79:64:c0:41:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:2D:99:52:D8:82:9F:D3:A1:B1:7B:4E:C1:A7:A6:23:93:F2:2B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d33bfeb9-0b50-443e-8a06-3a81baa27766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:c000::/40
Signature Algorithm: sha256WithRSAEncryption
50:95:df:3d:ea:30:2f:1b:36:9e:1e:9f:5d:46:94:6d:d2:a0:
26:f2:6a:c3:f3:0f:19:4d:ec:37:bc:43:bb:7c:6f:92:d7:54:
ec:1b:7b:e9:7d:83:99:3a:94:e5:6a:03:7f:17:9d:48:6c:ca:
e0:f3:e9:9c:bd:4e:50:78:55:a9:f6:8a:36:ab:c2:26:a5:a7:
ff:1e:79:16:e0:af:1a:bb:67:5e:fd:7c:c1:23:1a:fd:c1:3d:
d6:78:54:9d:3d:5d:bd:f1:63:70:83:fa:22:64:b0:1f:04:10:
61:47:09:fa:f2:62:ef:5b:e9:af:93:19:bc:77:c2:fe:a7:db:
49:02:8a:7d:73:28:07:2e:fe:39:0a:3b:1f:ce:38:fd:36:4a:
14:b3:3c:df:7a:1c:02:eb:0c:b8:83:4d:bf:ba:6d:93:95:da:
6a:84:3b:e9:77:36:32:9e:7b:5f:20:98:1d:6e:68:76:e9:ee:
37:18:f2:27:d5:16:ed:46:55:af:04:f4:25:3e:36:da:fd:77:
8b:da:81:c4:1f:9d:68:c1:c4:98:73:63:4c:bf:6d:1b:1a:63:
eb:7e:09:6c:ee:aa:ad:5e:29:48:e0:3a:d7:bb:5b:af:5e:af:
b6:4a:07:40:37:c3:74:87:96:47:a4:60:47:65:55:e8:19:29:
f7:1e:e4:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:28 2025 by rpki-client