This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
File: d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa (raw, json)
Hash identifier: 6xKl43Bdcw19fMiPMgi5Aaddoqbv/GOkIi9QsNIikvc=
Subject key identifier: A1:7C:6E:FC:C6:1F:27:A8:D8:23:D6:5C:E3:06:51:34:6F:CD:BD:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40206E4682E946CED8E2BBAA72E4ED75D2B2BF7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
Signing time: Sun 07 Dec 2025 00:40:38 +0000
ROA not before: Sun 07 Dec 2025 00:40:38 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f1c:c800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:20:6e:46:82:e9:46:ce:d8:e2:bb:aa:72:e4:ed:75:d2:b2:bf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 7 00:40:38 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=bfe85a923d2c7bc460d6a1bb3978c09fe897fae1d796873f86edf554655d89d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:f1:8b:ef:01:00:ba:a1:7b:e3:3c:07:b0:
d5:e0:04:4f:0d:b3:54:9d:90:c5:15:95:66:5a:56:
e4:fd:95:ea:e5:20:87:52:9e:6b:f8:c2:dd:44:d1:
9a:bf:ba:c7:68:c5:07:c2:3f:46:56:99:25:ce:51:
fa:72:b2:1f:9a:af:67:cb:85:e4:37:a3:00:d4:9c:
c7:f1:68:de:39:81:58:0f:41:d9:1c:57:54:91:ab:
26:68:4b:e0:be:2b:2e:7e:f3:29:23:62:3d:81:4b:
17:05:70:a2:e8:b3:39:c6:03:e5:26:5d:fc:eb:69:
39:d2:01:db:7a:a4:7b:67:5e:3d:07:31:7d:c7:f1:
13:63:d7:96:3d:b6:17:ff:53:4f:ab:ed:3a:c1:0f:
a3:37:f7:c2:70:53:5d:38:1d:91:49:5c:c8:2d:51:
bd:bf:ad:5e:45:2b:96:38:a3:52:3e:01:cd:3d:45:
b9:05:c6:bb:1d:24:36:e2:c2:c7:25:f8:6a:70:10:
a4:23:30:46:15:6b:0e:e1:30:eb:29:06:90:f5:9c:
5e:d6:dc:83:45:d8:ff:c0:4e:80:02:01:3b:82:c9:
76:df:c0:a4:4e:96:5c:c7:b0:97:6d:b1:d3:ed:2d:
38:a5:8c:29:d7:2a:fd:5b:ab:79:e5:95:7f:3e:5e:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7C:6E:FC:C6:1F:27:A8:D8:23:D6:5C:E3:06:51:34:6F:CD:BD:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1c:c800::/37
Signature Algorithm: sha256WithRSAEncryption
32:69:22:36:96:5c:1e:dc:78:2a:92:72:3d:28:13:32:8f:cd:
9a:e2:ed:f5:f4:bb:c0:ff:08:93:a2:72:30:b8:55:37:84:46:
4a:dd:b4:7e:89:c0:56:23:ca:08:f4:45:7b:ec:7e:e8:62:29:
ab:b6:35:fe:e1:c6:6e:8e:41:a3:98:75:1b:a2:f8:6b:29:c7:
8d:4a:16:77:4b:ac:0c:26:85:a7:66:49:3b:f4:77:3e:59:37:
4d:ca:28:d8:c2:50:2e:69:36:0a:75:a4:db:01:b4:ed:a7:7c:
bf:c6:0d:1d:d8:24:c8:15:4e:91:2c:46:78:b3:80:38:60:28:
f9:8e:e5:17:26:2c:5c:85:6a:3b:80:16:9a:bc:26:0f:af:a9:
91:c8:77:72:b4:8c:04:ea:eb:e0:ff:b8:7d:ce:39:f1:e9:c0:
f4:21:a1:b9:56:42:6a:52:d3:46:15:fd:c8:52:a3:0f:ef:1d:
d6:49:c1:5f:ce:b6:13:fe:82:b0:a5:e5:aa:89:ed:76:c2:25:
73:47:7b:b8:60:e9:15:6c:1c:e8:a8:1c:8e:01:de:81:1f:70:
6e:b2:d3:e6:9e:5b:0d:03:db:cc:b9:cd:23:44:03:38:b2:c2:
84:18:62:81:29:c6:03:24:a6:c5:06:df:4a:69:2c:af:4b:c7:
86:a4:48:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 02:58:30 2025 by rpki-client