This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f6fff0-b02c-4852-9d36-8f9ebf538470.roa
File: d9f6fff0-b02c-4852-9d36-8f9ebf538470.roa (raw, json)
Hash identifier: vyi6rHJMi5QkGA7Gd7aqU1LU6ON6Jn2JpbzfKgRBJOM=
Subject key identifier: 93:90:DA:B6:AA:0B:29:CB:BE:AD:B9:42:0E:D3:86:38:FA:B7:13:DA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B188F66065E8F1DCF5B0F1F909A18F0B8D8A829
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f6fff0-b02c-4852-9d36-8f9ebf538470.roa
Signing time: Tue 25 Nov 2025 00:31:41 +0000
ROA not before: Tue 25 Nov 2025 00:31:41 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:ec40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:18:8f:66:06:5e:8f:1d:cf:5b:0f:1f:90:9a:18:f0:b8:d8:a8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 25 00:31:41 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=d4b66e935c27d2685d655309b5890807002fbcff888817b0a27060810df67a4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:ce:c4:e9:a0:c5:e0:44:e1:8b:aa:44:17:
c9:22:c8:64:9f:a4:b1:90:28:04:8b:a7:4e:df:7a:
17:6a:ae:ea:62:a4:27:23:2c:f3:ad:b8:a0:0d:be:
77:86:5c:f9:84:c6:00:05:7d:71:a8:24:1e:19:2c:
58:65:7a:79:ee:be:69:bc:e4:c7:56:6e:0f:4d:61:
f2:d8:dd:be:3f:bf:6e:81:25:21:58:66:45:17:90:
de:bb:0f:2f:1a:7a:c1:a0:44:1c:bd:12:d1:ff:db:
dd:1b:81:67:65:c9:b8:c7:76:e0:6d:b5:13:8b:2f:
6d:58:9c:6f:ad:ba:c1:37:4d:42:af:7b:99:f9:75:
fe:d6:9f:13:19:ea:90:b1:58:2a:c0:56:e0:f0:f9:
b0:06:53:60:f9:7b:52:84:bb:81:24:70:88:d0:a6:
66:7a:07:8c:b2:be:c7:3a:bf:ce:ae:5a:55:b1:95:
55:14:1e:c2:d7:67:e5:ed:70:9e:57:a9:3a:04:27:
c3:e2:f7:28:99:68:85:fa:6c:be:32:04:8b:fb:50:
c6:a2:af:81:e2:76:06:88:91:97:c0:17:94:02:4a:
7f:72:f5:77:ac:c8:67:5c:c3:2d:8b:0f:4e:66:9c:
7c:8c:53:e8:65:50:dc:fb:22:e6:00:78:d4:11:07:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:DA:B6:AA:0B:29:CB:BE:AD:B9:42:0E:D3:86:38:FA:B7:13:DA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f6fff0-b02c-4852-9d36-8f9ebf538470.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:ec40::/48
Signature Algorithm: sha256WithRSAEncryption
a9:9d:17:79:15:62:63:5f:ff:5d:fb:34:97:8e:27:23:7b:5a:
2d:0f:ca:1e:e9:df:b4:6e:74:07:ae:33:a2:82:33:ec:02:ff:
14:1f:29:01:9d:84:1b:46:d4:95:8b:72:a7:ba:3b:54:7d:87:
33:a0:83:5b:08:e3:5b:2f:34:4b:81:61:26:8a:85:ea:60:14:
c8:fe:c9:14:e4:cb:58:90:3c:53:c6:7d:49:d8:8d:62:7b:0a:
00:b6:7d:72:8a:3c:50:7b:4b:21:78:9f:e3:ac:c5:f7:c3:f0:
89:d4:3e:3f:bd:0e:09:e7:ba:c5:45:a6:db:93:7c:c2:d6:69:
75:29:aa:a5:7d:96:22:6d:fc:4c:3d:11:0e:bb:22:27:34:14:
73:45:76:4e:4c:b1:bd:af:34:83:29:99:c3:37:7c:4a:5f:9e:
0a:ce:e8:60:94:1d:96:11:c8:0c:66:37:16:98:fe:7c:32:89:
38:9d:c2:bf:e1:ce:9f:d4:01:e5:1d:f1:5e:c2:02:29:e6:c1:
57:20:69:e4:2d:dc:be:7b:d7:3e:4a:a7:f3:36:89:23:7e:96:
51:15:88:c9:49:8e:cf:01:4a:04:0d:4c:4c:bf:ad:f0:3b:92:
79:c7:e8:71:6f:7d:0c:ea:76:6a:e4:9f:81:d9:c7:51:66:9c:
15:88:55:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:57:44 2025 by rpki-client