This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f284346d-f84a-4c28-9b1d-0891707d2923.roa
File: f284346d-f84a-4c28-9b1d-0891707d2923.roa (raw, json)
Hash identifier: pbOmyNvoL1zleD0bGILd078jrpLwRTlzKwbT/wZoes0=
Subject key identifier: B6:92:FC:9D:7A:57:6D:D6:71:70:BD:85:A2:EA:1A:2C:B4:52:DC:34
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26EAAD432B591FB2BD831E1C53D9A27AD7F76317
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f284346d-f84a-4c28-9b1d-0891707d2923.roa
Signing time: Wed 03 Dec 2025 01:41:40 +0000
ROA not before: Wed 03 Dec 2025 01:41:40 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ea:ad:43:2b:59:1f:b2:bd:83:1e:1c:53:d9:a2:7a:d7:f7:63:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 01:41:40 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=850657ec7d51df75f9ff01ac8cf45f08023b00bed461bf0891d519e5eb54a3d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bb:e9:8d:70:fe:72:7e:a1:75:64:79:34:96:
28:86:8b:7e:dd:bf:71:0b:ef:57:bb:43:9e:32:5d:
ff:93:bf:3f:a9:2b:f3:3d:b1:72:60:97:50:93:4f:
20:e3:6e:46:1e:e2:0e:f4:96:fc:98:a0:63:f6:b1:
7f:2b:48:84:b2:16:f3:db:dc:1a:5e:6a:84:aa:3a:
ed:80:2c:82:68:a6:38:91:20:7a:4c:f9:ef:d7:09:
7e:ab:7d:46:7b:02:24:53:1a:e8:a0:da:c3:98:be:
39:88:2c:b2:b5:dc:b0:13:db:32:15:04:5b:0b:c6:
43:aa:55:be:d0:74:a4:34:77:a8:07:cf:18:bc:45:
97:28:32:27:8a:fb:26:e3:91:14:8a:8f:87:5f:94:
51:24:0b:ea:4d:36:95:e0:92:68:b7:c1:4c:4c:77:
b4:48:82:48:25:d4:3c:83:1b:6f:cb:09:37:af:75:
b6:59:cd:b7:12:44:ad:ed:20:7d:0d:97:cf:fb:e1:
32:66:8d:78:0c:73:d9:41:ff:f4:81:df:59:f3:28:
80:eb:99:4f:c7:36:45:d4:62:ba:a8:70:73:67:34:
91:60:f4:58:b6:55:f5:50:df:b5:16:9a:7e:f6:14:
f0:dd:70:e9:80:a2:de:14:5f:de:f9:50:fe:d9:5d:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:92:FC:9D:7A:57:6D:D6:71:70:BD:85:A2:EA:1A:2C:B4:52:DC:34
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f284346d-f84a-4c28-9b1d-0891707d2923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.108.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:64:5b:63:9d:9d:aa:3c:f2:53:3f:60:6a:f6:fa:7d:51:83:
3d:c5:73:b8:e3:34:41:86:34:d5:5d:5d:7d:fd:75:50:a2:93:
e1:ca:f5:71:85:08:f4:bb:d7:aa:ce:c3:d4:d8:cc:5c:23:d0:
20:d4:2c:b7:5a:5e:00:ba:b7:1b:e3:a3:50:35:bf:7c:ec:91:
bb:94:83:74:c5:e1:9e:f7:4b:7c:2f:46:2c:af:61:89:c5:8d:
60:7b:e1:5e:e2:c5:68:0a:08:35:8c:1a:8c:08:a2:40:a0:20:
e4:79:15:39:5f:52:41:c3:45:55:f9:3b:b7:5e:da:98:09:14:
80:0b:3b:8c:af:57:a8:e2:fc:53:3d:2f:5f:f5:be:a1:ff:eb:
b2:a1:43:f4:89:09:c5:e4:3d:e9:a6:71:38:28:10:fe:97:30:
b0:26:50:c5:17:ba:94:8b:c5:00:6f:b6:27:25:44:93:51:23:
79:ef:40:0b:57:3a:ec:da:7b:ae:86:9a:e2:3c:68:89:06:91:
95:a2:81:e3:93:f3:e6:b2:25:0a:06:6d:41:13:65:0d:e2:a7:
ac:e4:d1:b3:69:4b:2a:68:c4:0c:24:59:b9:2d:71:d5:7f:9c:
f9:45:d1:6d:50:c4:46:b5:b2:29:1f:d0:d1:cd:d1:b2:45:ef:
d1:32:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:16:41 2025 by rpki-client