This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a97dda-c5c3-4c46-af3d-ed1aa9612cc0.roa
File: e9a97dda-c5c3-4c46-af3d-ed1aa9612cc0.roa (raw, json)
Hash identifier: zSQYBx8jHwvsJAbgFZsc0R7faBq8J/S4JLIqHXURSNI=
Subject key identifier: A0:C3:A7:8E:37:94:FC:6C:64:B2:41:3F:66:0D:6A:BC:E6:3D:06:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5A9048E46421D3A19912B67681AA7A62FA159A9C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a97dda-c5c3-4c46-af3d-ed1aa9612cc0.roa
Signing time: Sat 06 Dec 2025 01:10:42 +0000
ROA not before: Sat 06 Dec 2025 01:10:42 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 121.91.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:90:48:e4:64:21:d3:a1:99:12:b6:76:81:aa:7a:62:fa:15:9a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 01:10:42 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=b45e7a9735a56abb35acd6e42b23e00cb46cab5f0f05ae97114dd6dcc89c6bba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:61:31:eb:9a:fd:f9:5a:54:ad:fe:93:da:
6d:06:1a:66:43:dd:ef:3e:dd:78:46:ca:2e:51:ec:
ee:85:82:80:8e:e1:49:84:87:8e:7e:2e:a8:80:99:
f8:2b:0b:53:69:bd:89:3d:d8:fd:ff:90:b5:dc:28:
43:0e:b3:85:0d:5f:41:bc:2e:fa:ac:58:f9:7f:57:
a6:cd:b9:9f:24:20:f4:2a:ac:eb:49:05:17:9a:f2:
26:d8:aa:34:73:36:fc:7a:52:12:1f:23:da:8c:70:
da:54:1c:2e:70:8c:05:16:c0:45:1e:15:03:5b:2a:
92:d7:7a:86:a5:32:91:18:b6:7d:dc:76:68:4d:de:
77:d6:0d:ba:e9:51:c5:33:9b:ff:67:fa:c7:7f:ec:
b3:cc:11:5d:c2:46:87:b4:21:30:b7:4d:3f:cf:4f:
7b:ad:e2:a6:e9:e8:6e:cf:d7:ab:d6:3e:42:f4:55:
9f:f3:e9:c4:ad:b7:e1:e3:41:8e:a7:99:bb:dc:82:
31:d0:2e:14:b2:40:63:b2:c7:dd:9c:9d:9d:e8:c1:
37:26:4a:bd:7b:7c:43:c3:7f:64:f0:c0:46:da:0d:
fb:57:88:24:05:cf:8e:4f:19:0f:9c:c0:f1:f8:54:
9a:88:dd:87:e5:20:6b:dc:ee:18:00:4b:ce:27:98:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C3:A7:8E:37:94:FC:6C:64:B2:41:3F:66:0D:6A:BC:E6:3D:06:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a97dda-c5c3-4c46-af3d-ed1aa9612cc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.91.144.0/21
Signature Algorithm: sha256WithRSAEncryption
ca:23:1e:86:c8:5f:ad:30:06:d0:7e:c3:88:aa:60:8b:06:53:
82:e7:c7:6d:f4:80:e8:c6:ba:c7:d6:1d:d2:4c:3f:4c:dc:51:
d6:8c:6d:51:25:f2:35:4a:7a:19:ca:bf:17:00:ff:95:44:3d:
41:2d:30:1b:25:b5:a3:98:aa:ae:9b:03:91:4d:57:48:02:a7:
3a:c5:c2:65:a6:1a:f2:86:76:56:f7:7c:e8:85:26:8e:b7:03:
b4:da:cb:e7:eb:5f:71:f7:1c:16:aa:f8:3a:57:ce:96:16:6e:
2e:35:ea:3d:5c:59:74:c3:18:6d:16:dc:cc:e8:f5:4d:eb:9d:
fe:79:27:77:bd:1b:c0:62:6c:98:fb:e9:0f:cc:43:f3:e5:cd:
f7:13:99:ee:88:c8:c9:3c:a1:37:88:a4:f2:6a:24:92:ac:7c:
87:09:70:a5:17:8f:13:6a:ac:49:5e:30:0e:5e:71:f0:7a:e8:
25:8f:f1:95:9c:b2:05:99:5a:24:51:d6:1d:05:b7:7d:eb:eb:
c7:97:f0:a3:dd:69:4a:1a:9f:6d:c6:19:0b:6e:2f:7f:ba:df:
a2:53:15:07:fc:49:3d:ad:d6:2f:85:4d:66:39:23:43:3c:b3:
f3:77:8a:24:e3:f4:e8:07:99:ac:ac:eb:4c:a9:bf:77:5c:4f:
08:ba:dd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:00:27 2025 by rpki-client