This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e77575c1-2389-4702-b309-87544c125944.roa
File: e77575c1-2389-4702-b309-87544c125944.roa (raw, json)
Hash identifier: rd/Ded1eO4gYKU63M/r+/ONih4KkCpwVfEpFtG/9kWA=
Subject key identifier: 89:5B:17:F5:9E:2E:53:0A:55:EF:8C:79:1C:1E:EB:23:8B:CF:C8:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7313D194210F02D23AAFA81B26789A3D21F0E4F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e77575c1-2389-4702-b309-87544c125944.roa
Signing time: Tue 02 Dec 2025 00:40:37 +0000
ROA not before: Tue 02 Dec 2025 00:40:37 +0000
ROA not after: Mon 02 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:13:d1:94:21:0f:02:d2:3a:af:a8:1b:26:78:9a:3d:21:f0:e4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:40:37 2025 GMT
Not After : Mar 2 23:59:59 2026 GMT
Subject: serialNumber=1ddd3c85f95d43a27fa893270c6db080f7a7618ff8871632cab61a14ba418af7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:d7:a3:e7:ff:18:d4:bb:d8:bb:e5:31:c5:
aa:90:61:16:3b:78:ca:78:d7:8c:2f:9d:f8:26:99:
7c:85:17:a3:9c:5d:d4:43:bb:1d:93:3a:89:6f:ad:
f8:b5:04:f4:5a:92:1a:6f:fa:c0:48:af:5f:d8:6b:
8d:32:f9:3b:74:c2:0b:35:b9:06:b4:bf:90:18:5b:
fa:98:d8:d6:96:36:2d:e4:5d:51:99:80:a6:e8:13:
7f:be:ff:a3:d2:d0:b5:5d:28:38:60:34:ac:fb:4e:
b3:6c:4c:ef:87:82:36:87:d2:5c:1a:0c:44:c7:fc:
84:37:94:75:2a:ff:1d:58:42:a1:b8:ce:8c:11:ca:
df:d2:f5:98:de:aa:42:85:0b:18:e4:83:80:d4:04:
8d:fe:59:7f:27:b9:f6:c3:82:10:36:7f:b2:9e:b0:
aa:05:c2:ba:61:a3:9e:34:ef:a8:4e:82:2d:63:54:
aa:44:ba:27:4a:e9:e4:c2:d2:d3:4f:2f:e5:62:be:
3d:67:56:07:86:39:f4:b6:15:ec:ab:f4:51:50:df:
f8:22:7d:2d:d7:61:9e:54:e1:a5:05:50:c7:48:14:
f1:fd:53:96:b0:96:27:2a:dd:57:0c:63:9b:cf:35:
5e:33:f2:b5:0e:dc:4b:b8:3a:ff:5b:bd:c7:41:6d:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:17:F5:9E:2E:53:0A:55:EF:8C:79:1C:1E:EB:23:8B:CF:C8:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e77575c1-2389-4702-b309-87544c125944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:98:3f:7d:76:d5:4a:42:08:a5:77:d6:16:29:2d:a4:1c:d1:
46:00:1f:65:b7:00:a6:f7:10:58:ce:58:1b:6f:ce:d9:af:2d:
40:6e:ac:63:62:4f:b3:b9:f4:43:35:dd:94:f1:05:a3:96:01:
76:0b:c3:f8:f5:d0:38:8f:35:e0:5b:45:59:df:d3:2e:c0:73:
4d:46:d3:34:fd:ed:db:e9:13:e0:cc:12:1b:f6:2c:b3:2d:3c:
3d:de:74:f8:a1:1f:7f:19:c7:46:f5:d4:24:f0:92:6d:29:d9:
01:f3:7e:53:23:cb:cd:e5:79:c6:62:26:13:92:2e:7c:2c:a1:
6f:f0:76:64:71:0a:ae:58:98:43:ca:a4:35:18:fd:36:be:f8:
e8:d5:d8:ed:ea:13:34:09:08:f7:0e:e1:8f:fd:5a:15:cb:d7:
f3:e0:ba:8e:cb:1b:df:31:fa:9a:5e:0f:97:6f:c4:14:55:50:
f4:f3:06:3e:8f:58:93:a0:07:3c:07:8c:69:62:03:7c:13:06:
df:af:62:8f:53:e3:dc:7e:93:96:22:23:7d:68:6e:de:26:ec:
f4:2e:84:e5:98:90:e7:cb:0b:83:79:75:e0:4e:d6:8b:24:a9:
00:be:51:3e:f9:5e:de:37:8d:7b:5c:58:97:79:a6:7a:d5:83:
f9:11:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:24 2025 by rpki-client