This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddd7f531-58ac-44ff-acae-8c4e40bfb198.roa
File: ddd7f531-58ac-44ff-acae-8c4e40bfb198.roa (raw, json)
Hash identifier: IR0jzRd5HVm9623RB/Dz4d6WkKktM2SMYhO2d+C1qcE=
Subject key identifier: 1E:DC:D1:7D:C4:5B:FC:91:77:86:A9:D4:26:F3:72:60:FE:24:24:AA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12881EB13E23662FCD658A3924D2030862E9B7AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddd7f531-58ac-44ff-acae-8c4e40bfb198.roa
Signing time: Wed 26 Nov 2025 00:10:12 +0000
ROA not before: Wed 26 Nov 2025 00:10:12 +0000
ROA not after: Tue 24 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:7400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:88:1e:b1:3e:23:66:2f:cd:65:8a:39:24:d2:03:08:62:e9:b7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 26 00:10:12 2025 GMT
Not After : Feb 24 23:59:59 2026 GMT
Subject: serialNumber=c124841a834f5e9529ca38687ba3b844fb56d4ec9c37b88da1b10a1511a7b730, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:76:18:3f:1e:e2:f3:c4:ce:10:62:d6:0b:
13:87:2d:37:30:b4:3e:04:90:86:9e:0d:38:4a:7b:
c0:44:5f:26:e6:bd:c5:24:da:59:cb:3e:65:60:ea:
c4:5c:ea:20:54:2e:f2:d8:58:02:a6:4f:b7:e1:00:
bf:ee:60:f4:ed:eb:c2:bb:a6:3f:12:77:1a:19:e6:
7b:71:a4:2c:8c:33:e2:b7:3a:dc:0a:97:5c:8c:df:
ed:79:3d:13:d9:1f:89:34:4c:5e:60:d9:d1:e4:f1:
09:ae:34:88:d2:7f:1c:4f:f8:8b:3c:3b:ec:9e:a1:
12:1a:df:41:05:1f:37:3f:18:d0:20:f9:63:68:8a:
89:fb:4c:d0:16:03:17:2d:ec:47:b0:78:a6:fc:51:
76:e0:d5:f6:46:33:76:4c:44:9c:c9:3c:52:a1:3c:
04:0a:0d:bc:87:4b:99:4a:e1:56:0c:5d:27:19:e9:
c0:90:7f:ed:c9:58:6f:2c:cb:d9:bd:7e:5c:97:4e:
01:a8:3f:02:47:9c:4e:f2:e5:f2:ff:2a:ae:21:8b:
1e:27:5e:00:8f:60:ca:11:0e:72:65:47:eb:5c:c7:
46:d1:cc:f5:94:69:c5:0d:57:ca:6a:69:75:4a:5d:
aa:9d:ab:57:d0:77:6a:e4:85:ba:25:ea:6b:c2:a0:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DC:D1:7D:C4:5B:FC:91:77:86:A9:D4:26:F3:72:60:FE:24:24:AA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddd7f531-58ac-44ff-acae-8c4e40bfb198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:7400::/40
Signature Algorithm: sha256WithRSAEncryption
3a:6f:70:68:49:79:96:28:4f:90:c2:d1:4c:58:55:2e:10:ba:
42:6b:34:87:2f:af:32:b7:74:14:51:1f:eb:ad:f1:04:62:46:
e9:04:c4:ae:1c:28:d2:dc:45:3b:63:49:99:15:07:4e:28:3c:
3c:9a:41:97:7e:5d:9d:aa:f7:9a:9f:b5:b8:80:1d:6b:da:f3:
b0:78:bd:ab:8c:7c:5b:df:ca:0b:ed:56:d2:31:92:db:f0:ce:
e8:3d:20:0b:09:8c:0b:bd:88:97:3b:c3:66:bd:76:11:c0:58:
10:51:f4:d8:cd:db:a3:cb:c0:84:27:48:65:86:da:52:2d:2e:
b9:17:42:6a:df:66:6c:f0:fc:bc:b9:08:b2:05:13:e5:a2:af:
08:89:c3:38:21:38:ac:f8:d5:95:aa:41:22:3d:b6:31:aa:f8:
6b:99:3b:18:73:29:85:eb:bf:e2:ca:4d:04:2c:cc:9a:91:e2:
98:b4:3d:e7:50:5c:79:d3:1d:b1:af:27:c0:15:8f:19:3c:d4:
5e:68:be:6e:b1:0b:25:0b:3e:8f:3a:a3:d5:4f:5e:e5:a8:38:
dd:59:e0:73:45:21:b2:c1:d3:c3:f8:12:f8:7d:28:a4:da:9a:
10:51:de:69:a6:24:9a:cf:cf:c9:2b:5c:97:5f:99:55:63:19:
de:e0:12:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:17 2025 by rpki-client