This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa
File: f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa (raw, json)
Hash identifier: oOaZtiknQf3TDkQsb5WR9pUMgiHnjL+NRGuFjw2MG6s=
Subject key identifier: 45:7B:97:29:BF:AF:F5:34:32:DB:F8:3E:CB:32:75:0D:4D:58:4D:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C5885B74A921BDA74C02E4672D4BFA1CCFE40C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa
Signing time: Sun 07 Dec 2025 02:00:39 +0000
ROA not before: Sun 07 Dec 2025 02:00:39 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f16:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:58:85:b7:4a:92:1b:da:74:c0:2e:46:72:d4:bf:a1:cc:fe:40:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 7 02:00:39 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=739543be3a1e601fa3192a8603cec0f7cb387d9e16c725e0f93325ffa0f9b429, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:27:88:d6:73:a0:c7:08:f5:df:15:65:b3:
9a:be:f1:d0:b0:4f:a3:7b:b7:82:3b:7f:11:8f:c5:
dd:c7:aa:8b:cd:2b:a0:90:a0:af:b8:01:8a:8b:51:
c7:52:c3:7c:a2:ba:02:32:13:c0:f9:e3:f8:63:06:
25:a3:03:a0:b8:f4:ab:fa:8d:47:dc:8a:0d:18:24:
ff:cb:49:35:bf:f2:ce:0d:43:7b:1a:63:fb:fb:b0:
66:04:44:75:ea:fb:b2:c3:18:2e:85:45:a4:72:9f:
cb:9b:ea:4c:ce:62:9a:54:0d:53:63:07:1b:d6:9a:
b5:eb:a2:68:10:b5:c6:cb:d6:0b:07:37:b4:88:24:
8f:c0:b5:23:ab:af:08:62:b6:ad:13:e6:e9:65:e5:
61:dc:8c:e5:f4:c8:ca:26:49:30:e3:6d:18:04:5e:
12:51:41:5c:0e:5b:55:0e:21:73:6c:b7:58:44:29:
a0:e1:7a:15:de:af:f0:b0:73:c5:6d:cb:d5:41:2d:
9f:15:fb:17:c9:a5:87:33:43:7b:be:a9:b7:18:0a:
2d:31:aa:14:cb:85:1f:d5:00:68:a6:b9:f2:67:b1:
15:f5:59:0c:e1:2a:21:2f:45:8a:57:14:13:37:6c:
19:f0:39:65:8d:6b:aa:63:86:51:16:03:9d:fa:de:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:97:29:BF:AF:F5:34:32:DB:F8:3E:CB:32:75:0D:4D:58:4D:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68dd099-aa8e-4399-88fc-6d8848cf3dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f16:c00::/38
Signature Algorithm: sha256WithRSAEncryption
54:be:b2:39:a2:90:3b:30:17:cd:1d:9f:52:f3:92:3f:a1:16:
2e:28:f6:3b:38:a2:bc:17:d4:4d:b6:0d:6d:64:f4:93:17:b9:
4a:38:b3:d1:b6:1d:68:cb:13:80:65:73:2f:05:76:8f:f0:e3:
04:bc:81:bd:2e:03:9c:91:b6:ce:13:a7:56:c0:7c:5b:c4:08:
99:12:a7:b6:a8:e7:a2:8e:c4:24:ea:75:a0:0a:9d:20:74:9e:
17:52:cd:d5:34:6f:82:c0:72:52:31:f6:98:7d:4b:26:c5:6a:
85:cb:35:06:78:3b:98:12:8f:c8:3f:11:f2:6c:cb:78:62:9f:
a3:30:70:ba:ad:c5:67:70:c9:aa:13:e8:4d:52:69:1c:a2:0a:
c7:65:22:74:02:1d:b4:44:6f:2e:95:55:04:1a:43:30:03:5e:
37:f5:b6:82:89:22:b9:9e:41:da:44:cd:4e:b4:5c:af:78:18:
05:95:b1:a1:57:1f:6e:c6:2b:6c:06:0d:d4:15:50:5e:20:c9:
41:9a:22:29:c6:7a:b9:76:4c:bf:91:29:1c:27:06:f3:5e:9a:
2f:b2:dd:80:c0:74:81:50:92:80:0c:d8:6d:66:32:03:9b:7c:
77:8a:80:55:a6:de:78:ad:2a:17:93:0e:bc:0e:a6:b5:f0:93:
9c:13:90:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 21:58:57 2025 by rpki-client