This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ac9ca8-0963-4f1d-bfa5-5b4e3bc63606.roa
File: d3ac9ca8-0963-4f1d-bfa5-5b4e3bc63606.roa (raw, json)
Hash identifier: mUAmJ1jj9wk3jIi7AXGs3DV95/IEKsIOLTOdamnCeRA=
Subject key identifier: F3:11:4E:54:8E:E4:09:00:C0:A7:09:32:77:89:35:C0:BE:3F:7B:60
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BC774E7FF3CDA8CEE6C7A3DC99DBE0CD29145C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ac9ca8-0963-4f1d-bfa5-5b4e3bc63606.roa
Signing time: Tue 25 Nov 2025 01:20:54 +0000
ROA not before: Tue 25 Nov 2025 01:20:54 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.82.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c7:74:e7:ff:3c:da:8c:ee:6c:7a:3d:c9:9d:be:0c:d2:91:45:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 25 01:20:54 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=33dffb4af21ef1978b2ed0145ef24a35d8fa267703c37f82cc8037265882c19c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:1a:88:f8:f5:a4:de:bd:e7:a1:fe:1c:b6:
0f:fc:9a:8c:e7:ca:cc:2b:dd:cf:2f:8a:ec:4e:01:
f0:dd:b8:d4:c2:59:a7:e4:37:b5:d9:d2:bf:67:17:
22:f3:05:34:4c:c2:d7:d4:7b:f2:b6:7d:13:01:54:
72:17:87:be:d1:a7:d9:32:9a:b7:58:63:aa:cb:b9:
b8:cb:be:ba:79:17:6c:41:89:3d:45:36:5b:bf:d9:
0c:82:e7:bd:34:8b:5a:7e:3d:82:09:a7:1d:01:63:
1a:1f:dc:16:69:fd:9e:67:cd:e8:fa:6b:26:17:64:
63:f6:a6:94:40:00:1a:ef:4f:c8:b9:76:54:cf:37:
0c:4e:9e:05:b2:97:24:71:15:52:4a:6a:bf:4f:e2:
cb:1d:83:b1:23:66:13:e1:21:07:2c:97:e2:5f:03:
78:ac:f5:3d:23:9b:18:d4:57:e9:f5:69:cc:2b:af:
1a:be:a0:6c:4c:00:38:1d:7b:f5:25:4e:14:9f:dd:
68:77:af:77:77:6d:81:c4:13:7c:53:bd:87:77:e5:
0e:2d:7f:46:65:49:c4:3a:20:99:f3:10:0b:18:7f:
8f:62:8a:18:ed:8b:20:82:32:e4:66:4b:72:c4:a6:
e4:77:39:42:44:a0:c6:f5:83:90:21:39:1b:a6:34:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:4E:54:8E:E4:09:00:C0:A7:09:32:77:89:35:C0:BE:3F:7B:60
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3ac9ca8-0963-4f1d-bfa5-5b4e3bc63606.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.158.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:05:fc:ae:3d:0c:64:50:66:85:6a:60:78:c2:24:3e:c3:12:
be:99:a8:56:d0:82:02:11:51:68:6f:97:ae:7f:bd:43:7b:de:
d0:c5:41:11:bf:95:e4:40:0e:ec:c3:e5:d0:01:2d:14:3b:30:
31:fb:a0:12:50:73:c6:a6:c6:44:09:5d:9a:0a:f5:9a:21:cb:
1c:58:6e:c2:6b:de:6e:c0:5a:77:1f:fe:99:ae:73:03:72:00:
18:2d:bf:c6:bb:70:89:af:0c:90:34:73:41:1e:21:c6:5b:a5:
e7:33:5d:dc:c3:0c:ed:5c:eb:83:b2:69:0c:e0:2c:0e:52:5d:
02:60:da:cd:ba:65:ed:aa:de:23:58:82:cd:61:cc:0e:62:01:
45:12:7b:25:75:68:15:46:15:e9:a7:e7:ce:b9:38:27:13:0c:
33:69:66:64:95:23:39:89:1d:0d:0f:6d:02:55:19:a0:96:06:
3e:f6:c8:3f:80:35:2e:39:83:74:44:59:73:fa:cd:87:4f:35:
40:bd:82:d1:ab:e9:b9:9c:ee:04:2a:48:7c:f8:93:2d:24:f5:
d2:1d:7c:ee:8c:73:09:3b:5d:b4:db:ef:d1:d7:82:94:a7:55:
3e:ac:12:9c:22:20:62:56:f8:5c:27:a3:5e:6e:d8:7d:52:4e:
9e:79:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:45:18 2025 by rpki-client