This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8948d3c-891f-4adf-9ab1-30923302cc28.roa
File: e8948d3c-891f-4adf-9ab1-30923302cc28.roa (raw, json)
Hash identifier: gDrvYqTih+To3dRziTvXBTfQDI36YOLBmFXbnfvFgrE=
Subject key identifier: D0:47:4C:DB:C8:A9:7C:E3:60:A7:66:A5:6F:5F:68:26:AA:32:F5:32
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0553588467CEE7ECA0871C44978FBBC0B4676B99
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8948d3c-891f-4adf-9ab1-30923302cc28.roa
Signing time: Sat 06 Dec 2025 02:20:43 +0000
ROA not before: Sat 06 Dec 2025 02:20:43 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:80e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:53:58:84:67:ce:e7:ec:a0:87:1c:44:97:8f:bb:c0:b4:67:6b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 02:20:43 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=5c1cec9691112240bd50e2fa4c93afb1b3e2519a144c4df9e3e8075362de32e7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:36:60:98:a1:ba:61:92:48:a2:fa:33:41:0d:
e4:d1:c3:8f:4a:26:d4:f6:a4:35:08:95:d8:aa:b4:
1e:92:28:8a:76:ec:92:05:44:ab:bd:17:1e:9d:f6:
2c:82:be:be:d1:b8:4b:5a:f6:d8:f9:bf:b3:db:35:
e0:cd:c9:0e:ec:dd:94:30:98:24:6b:4a:87:df:dd:
e9:dc:19:b0:f4:9c:22:6d:40:78:b0:13:18:d1:a1:
8f:e3:37:02:75:bb:12:17:00:4e:d8:c1:34:e0:e0:
8e:da:b8:2f:6f:fe:e9:fd:bc:fb:75:d4:1e:f1:3b:
c3:ab:91:0f:2d:7c:5f:48:cc:3a:87:50:78:82:57:
65:8b:d0:b3:f2:b0:1b:01:08:2f:6b:3a:13:aa:5c:
b7:1f:76:fb:69:cf:16:1d:c1:83:ca:cd:1f:50:90:
21:b1:8a:8a:cb:01:f4:2e:bb:13:9a:3b:b1:9e:6b:
38:e9:3e:b4:97:fe:6a:0e:5b:fe:34:9b:d5:48:59:
32:a2:a4:17:88:65:1f:f1:3b:43:da:c7:f3:83:3b:
99:17:d9:d1:01:79:15:2a:53:6b:bd:27:63:76:e2:
9e:45:b3:9d:7b:4c:be:d9:d3:c6:4f:71:37:5c:7e:
fa:a3:f3:5d:d2:88:4e:d5:b7:44:12:43:03:f9:82:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:4C:DB:C8:A9:7C:E3:60:A7:66:A5:6F:5F:68:26:AA:32:F5:32
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8948d3c-891f-4adf-9ab1-30923302cc28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:80e0::/48
Signature Algorithm: sha256WithRSAEncryption
38:cc:40:2d:24:14:a1:02:83:46:24:83:cb:c3:8f:38:e4:27:
e9:cd:51:93:b7:2c:4e:3d:44:97:e9:67:e9:90:ae:68:b2:f7:
f8:38:38:2a:cd:a7:9b:97:a3:9c:0a:e3:88:00:9b:8a:67:eb:
2e:da:67:07:d2:48:d2:b1:0c:a5:42:e9:d7:14:04:0a:4a:96:
5f:0a:81:13:84:65:36:90:c0:30:c1:5c:c7:ea:a0:98:64:35:
53:1a:43:6a:a8:5c:7b:8b:8c:58:50:a2:e9:7f:30:e0:74:65:
56:52:b4:ce:38:5e:28:85:99:2d:c0:1f:b6:35:ed:e6:99:ed:
dd:d9:49:43:05:76:93:ab:24:9c:89:8b:ad:34:63:db:a1:0c:
bf:5e:fa:d8:58:42:48:dc:14:32:6d:34:61:72:06:25:24:f3:
7f:8b:52:e1:4c:c2:3e:7a:b9:2b:d9:47:d6:a7:d5:40:35:28:
c2:7a:8a:c1:18:ad:07:37:f4:04:0b:1a:78:22:a6:34:29:bd:
d9:8d:72:c5:e8:60:1c:59:91:41:30:89:41:af:b5:56:28:68:
c2:c8:19:7d:23:6d:c2:de:b0:60:58:aa:a8:02:80:54:b3:b2:
98:22:ed:37:04:1d:a1:56:d8:11:6d:62:69:8a:4e:c8:ee:60:
a4:5c:a9:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:20:06 2025 by rpki-client