This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ccdb48-826d-4c3f-94b4-f88f3768cabf.roa
File: f6ccdb48-826d-4c3f-94b4-f88f3768cabf.roa (raw, json)
Hash identifier: 32eeVn9fd0N5MSh1LyaGHQSKwAJ8cKlW18+JJ3XFBQw=
Subject key identifier: DB:3A:C1:AD:5D:5E:79:57:10:05:6D:A5:58:79:78:35:B9:1B:11:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33BBE01EA85C3552A604F00D95AE62BAE83FAF69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ccdb48-826d-4c3f-94b4-f88f3768cabf.roa
Signing time: Wed 03 Dec 2025 01:31:46 +0000
ROA not before: Wed 03 Dec 2025 01:31:46 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:bb:e0:1e:a8:5c:35:52:a6:04:f0:0d:95:ae:62:ba:e8:3f:af:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 01:31:46 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=6fa1e5a78091ae4db2e1a6cf47fcb68685b7365aa974c598ed3961b7e6bc6bdd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:8f:15:95:2e:7e:ad:5f:dc:a1:4a:89:1d:
cf:20:08:1c:ce:ed:92:25:82:33:1d:e2:38:ff:31:
64:7f:07:f0:a1:b4:cb:9f:b2:23:04:24:bb:1d:d5:
d9:26:20:30:0c:cb:aa:9f:ee:c9:5e:41:25:f6:fd:
16:b0:e4:50:40:c2:80:37:2d:2c:73:98:8a:74:89:
d3:04:dc:88:cc:99:93:07:a0:01:5b:73:a6:02:00:
82:ca:1d:08:96:5a:d2:8f:34:e8:44:0e:06:be:c6:
ff:98:aa:8f:1b:d0:c7:6c:60:44:3b:a1:f5:14:b2:
72:04:9c:10:6b:d2:a9:92:98:ee:28:de:00:10:eb:
e2:47:2c:be:d4:62:07:4c:ce:b9:0e:d8:33:e8:3f:
1e:fc:21:6f:83:b6:82:64:59:ec:da:0e:f5:cc:a5:
8f:b5:87:27:ef:e9:6a:28:99:9f:04:b1:f0:8f:ac:
b9:bc:38:43:1d:cc:20:bb:10:74:e0:35:3a:99:23:
8b:a4:f1:7d:e2:22:a0:6c:c5:88:74:59:78:7c:a4:
40:ec:27:e6:44:84:3d:88:3c:2f:59:c8:75:df:69:
a5:b4:ad:11:cf:cb:ec:8e:91:a2:78:93:1e:ea:43:
5f:ca:1f:2a:27:bb:33:f4:9d:c2:17:b0:36:dc:40:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3A:C1:AD:5D:5E:79:57:10:05:6D:A5:58:79:78:35:B9:1B:11:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ccdb48-826d-4c3f-94b4-f88f3768cabf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ad:3f:15:63:00:d5:d6:3a:df:02:09:b6:9c:c5:a2:b6:62:
63:1d:3b:c8:d6:8b:ad:7b:d9:4e:84:dc:3e:47:4f:18:b4:1b:
af:d4:1a:ba:7c:b6:ef:10:4c:f8:70:b7:df:49:69:08:50:0d:
42:f3:d2:24:a6:51:e3:1f:ec:90:05:70:fb:fc:c9:d7:ac:cf:
cb:0f:63:a5:f5:8c:11:c1:28:47:71:c4:88:6c:92:ae:db:0e:
97:d9:09:ca:d8:5c:99:eb:f9:63:c7:e4:55:ed:0c:9e:71:6b:
36:b5:d8:71:55:e6:91:4f:43:4a:ea:f3:68:55:ef:1f:dc:eb:
da:49:d9:bd:b4:0b:f9:4f:a0:77:40:c9:4d:db:51:92:40:54:
fa:0a:ae:de:8d:d7:ba:21:f6:53:ea:b8:b0:0f:1a:7b:6a:b7:
c9:4d:2a:ad:36:6b:d7:9d:7b:ba:3f:d6:2f:b1:f5:5a:2c:ae:
49:00:e5:74:80:54:25:33:b3:a6:ce:8c:80:ac:a2:9c:23:a1:
aa:c2:9d:72:3e:e7:d7:13:5a:4d:7b:5e:c7:c1:8f:df:7d:91:
f9:eb:47:f1:27:be:73:5a:ca:51:56:23:e3:46:89:09:53:b9:
48:05:88:05:a7:0b:c7:19:c3:c2:fa:49:84:3a:cf:4e:9a:0f:
25:20:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:29:50 2025 by rpki-client