This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3720b08-99f6-4690-a4ae-55aae1b75988.roa
File: d3720b08-99f6-4690-a4ae-55aae1b75988.roa (raw, json)
Hash identifier: OJv8Vpzfo4T2k690F7syipnfg6nkLIjZ7T+0i5OWJ6A=
Subject key identifier: 5A:24:7B:7F:BB:35:7C:F4:BC:AC:FC:A1:45:51:A3:82:15:7B:29:6B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 208EF6085C4E8B0C27A0574AA07B562970123C90
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3720b08-99f6-4690-a4ae-55aae1b75988.roa
Signing time: Sat 22 Nov 2025 01:00:05 +0000
ROA not before: Sat 22 Nov 2025 01:00:05 +0000
ROA not after: Fri 20 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff5:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8e:f6:08:5c:4e:8b:0c:27:a0:57:4a:a0:7b:56:29:70:12:3c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 22 01:00:05 2025 GMT
Not After : Feb 20 23:59:59 2026 GMT
Subject: serialNumber=0f1d24f936a0fd3f79d2383474d134dd362aee3fb6098204d4d6ae573797e75c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:39:81:8e:7e:e9:63:fc:a4:ca:4c:9d:96:
bc:d2:e0:1b:70:5c:a2:e1:61:e2:91:40:e5:85:84:
2f:aa:a8:57:21:a8:bb:56:9d:3c:28:84:b3:0b:11:
d7:9b:43:a1:d6:91:6b:c6:42:5a:38:6f:77:ee:73:
9f:1b:2b:b6:4e:4a:96:51:02:99:49:14:46:e6:00:
16:21:82:88:b8:d4:75:48:40:98:be:77:c2:aa:95:
91:e0:e5:df:27:21:0f:7c:2d:60:ec:91:19:ba:ac:
2e:58:9e:be:65:92:ed:c4:9e:79:2b:7e:0f:ac:d5:
9f:19:8d:92:a7:a7:8d:a2:c2:0f:10:36:2c:92:39:
5d:69:e9:74:d5:a2:68:61:dd:1b:ad:fa:46:b6:67:
ee:14:42:4e:02:4b:dd:8a:8a:93:a3:96:8b:47:a5:
49:9b:5d:71:b1:b6:5b:21:c9:42:e2:31:d1:e1:8c:
84:d2:79:48:34:8e:45:2a:ee:b8:19:60:f9:b4:28:
48:12:28:8b:69:7b:29:76:7a:65:bd:fd:7c:51:00:
b9:4c:47:0c:50:a9:1c:a4:1d:63:c9:b2:b2:97:9c:
44:cf:c1:38:a1:15:1d:16:82:55:98:95:bf:26:51:
a3:df:bc:3b:fb:7d:04:b6:05:a3:90:dc:7b:31:2b:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:24:7B:7F:BB:35:7C:F4:BC:AC:FC:A1:45:51:A3:82:15:7B:29:6B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3720b08-99f6-4690-a4ae-55aae1b75988.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff5:6000::/40
Signature Algorithm: sha256WithRSAEncryption
74:a8:13:09:a5:71:43:5f:1f:ad:de:33:e2:61:b2:0e:81:fc:
f1:1d:7e:b7:67:5f:30:c2:c5:a5:5a:90:21:cb:ea:f2:4d:1c:
4b:55:ae:86:07:e7:7b:1d:23:66:b0:04:cd:73:aa:3d:a6:d4:
e6:7f:47:95:1c:ef:1b:d7:2b:15:15:c5:83:38:44:5b:40:bb:
a4:a5:fb:54:fe:8c:e5:cc:6d:a5:1f:b3:b3:48:4d:5a:c2:5e:
30:aa:d5:f4:7f:68:a0:d2:0a:6e:31:c2:7d:fc:22:56:2a:b2:
cb:e0:2b:21:41:13:36:1d:60:fd:ad:b8:32:6f:58:80:8f:9c:
37:55:cb:93:26:65:da:8b:9d:eb:76:5c:31:16:76:5f:bd:ed:
46:53:87:01:ff:00:85:f0:93:ab:e4:97:67:39:d9:7a:e8:d7:
ee:64:db:ae:8e:a5:c3:e3:93:1a:bb:95:30:c7:08:3d:f6:84:
fb:f8:fd:66:c4:48:85:99:aa:40:50:dd:57:46:50:cf:55:43:
b5:21:95:c0:f8:9b:29:a5:b3:88:51:d4:a3:e8:9e:e4:b8:f7:
36:91:24:77:f2:2a:bf:b3:65:ae:1e:f2:01:08:04:09:1e:76:
6f:fb:7e:6c:b3:19:f3:ce:b2:8b:52:3e:41:7d:57:d6:50:7d:
a5:13:62:32
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUII72CFxOiwwnoFdKoHtWKXASPJAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDEwMDA1WhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZjFkMjRmOTM2YTBmZDNmNzlkMjM4MzQ3NGQxMzRkZDM2
MmFlZTNmYjYwOTgyMDRkNGQ2YWU1NzM3OTdlNzVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZlTmBjn7pY/ykykydlrzS4BtwXKLhYeKRQOWFhC+qqFch
qLtWnTwohLMLEdebQ6HWkWvGQlo4b3fuc58bK7ZOSpZRAplJFEbmABYhgoi41HVI
QJi+d8KqlZHg5d8nIQ98LWDskRm6rC5Ynr5lku3Ennkrfg+s1Z8ZjZKnp42iwg8Q
NiySOV1p6XTVomhh3Rut+ka2Z+4UQk4CS92KipOjlotHpUmbXXGxtlshyULiMdHh
jITSeUg0jkUq7rgZYPm0KEgSKItpeyl2emW9/XxRALlMRwxQqRykHWPJsrKXnETP
wTihFR0WglWYlb8mUaPfvDv7fQS2BaOQ3HsxK5CxAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUWiR7f7s1fPS8rPyhRVGjghV7KWswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QzNzIwYjA4LTk5ZjYtNDY5MC1hNGFlLTU1YWFlMWI3NTk4OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/1YDANBgkqhkiG9w0BAQsFAAOCAQEAdKgTCaVxQ18frd4z4mGyDoH8
8R1+t2dfMMLFpVqQIcvq8k0cS1Wuhgfnex0jZrAEzXOqPabU5n9HlRzvG9crFRXF
gzhEW0C7pKX7VP6M5cxtpR+zs0hNWsJeMKrV9H9ooNIKbjHCffwiViqyy+ArIUET
Nh1g/a24Mm9YgI+cN1XLkyZl2oud63ZcMRZ2X73tRlOHAf8AhfCTq+SXZznZeujX
7mTbro6lw+OTGruVMMcIPfaE+/j9ZsRIhZmqQFDdV0ZQz1VDtSGVwPibKaWziFHU
o+ie5Lj3NpEkd/Iqv7Nlrh7yAQgECR52b/t+bLMZ886yi1I+QX1X1lB9pRNiMg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:08 2025 by rpki-client