This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f840e6a0-882e-4f7b-abfc-d51f6cfaacd2.roa
File: f840e6a0-882e-4f7b-abfc-d51f6cfaacd2.roa (raw, json)
Hash identifier: aSL2zr6UNOX0Ez0viPDct29TfqJphaK+V/zBvH+zOZ0=
Subject key identifier: B2:B2:9F:6C:D8:CC:B6:04:7E:B9:67:2B:CA:1C:D5:A0:4C:3D:0B:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4AE592D8192794F1EB8DFFE9FB17B37B75C9DFB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f840e6a0-882e-4f7b-abfc-d51f6cfaacd2.roa
Signing time: Sun 23 Nov 2025 00:41:40 +0000
ROA not before: Sun 23 Nov 2025 00:41:40 +0000
ROA not after: Sat 21 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e5:92:d8:19:27:94:f1:eb:8d:ff:e9:fb:17:b3:7b:75:c9:df:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 23 00:41:40 2025 GMT
Not After : Feb 21 23:59:59 2026 GMT
Subject: serialNumber=c71b747abc317468b066e4805773cad4481f619199616b8d876293a6804d7655, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:d6:91:6d:57:e5:e1:ef:03:e7:9c:7b:a0:
7f:4b:02:c8:bb:22:a9:87:96:86:cb:f4:03:c2:73:
aa:28:58:aa:43:4b:f2:94:7c:4d:fd:66:34:9c:fc:
89:42:ea:9f:88:0b:9a:8f:21:e4:e0:dd:fa:e0:95:
df:ab:b1:db:80:3b:9f:bc:34:cb:17:bc:f7:4a:03:
44:7a:16:5d:7d:b0:00:cb:cd:2b:a8:bc:ff:28:44:
dd:df:fb:dd:48:86:5b:80:5a:13:73:34:74:d8:78:
74:84:20:ec:ee:73:75:c3:1a:20:1f:11:25:98:75:
3e:6a:c1:49:65:be:29:ec:25:37:9d:96:ca:b4:01:
12:a8:d8:b5:40:97:0f:b0:c5:62:79:6b:4a:25:3e:
07:6a:c2:0a:49:fd:ea:a5:2f:ff:4b:8c:05:8c:9f:
c3:64:d5:2e:ba:41:ae:8f:d3:ee:df:cf:55:ee:39:
e4:0b:d3:e1:96:80:35:87:8d:41:ef:95:dc:e7:f7:
e2:61:cd:dc:19:16:5f:83:52:38:3a:d2:5f:44:5e:
db:fb:e7:6f:eb:46:4f:b5:14:0e:66:7c:06:43:10:
7f:27:8e:57:31:ed:df:70:e1:3f:af:db:b9:d5:0e:
b2:a3:1d:f6:78:1d:ba:05:a9:54:93:7e:93:2d:7d:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B2:9F:6C:D8:CC:B6:04:7E:B9:67:2B:CA:1C:D5:A0:4C:3D:0B:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f840e6a0-882e-4f7b-abfc-d51f6cfaacd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:2000::/40
Signature Algorithm: sha256WithRSAEncryption
ce:cc:65:a9:e8:ca:7a:d8:e8:15:42:42:78:9c:86:42:ef:77:
ff:34:ae:8a:8f:c5:79:8c:4f:41:a3:d4:97:c5:94:ef:0d:62:
5e:03:7f:b8:5d:80:b8:b7:b3:48:85:ab:0b:43:8f:2b:5e:4a:
b9:62:5b:db:7f:93:02:7e:b4:07:3f:eb:fd:81:97:5c:e9:13:
85:17:43:a2:6f:76:5a:f1:a2:58:9b:45:e0:39:d8:8c:bd:62:
1a:29:1d:53:50:20:af:7a:33:7e:14:2b:ed:cf:91:fd:f2:b6:
79:16:f1:d2:70:6a:4f:28:bf:74:07:9b:5a:48:88:b3:61:b2:
9a:46:74:9f:5f:c3:6c:63:0f:71:76:c1:ea:71:d8:43:78:ea:
3b:8d:22:bb:eb:e4:fb:8c:c5:4a:33:b4:d8:a1:ae:f7:b3:d3:
d2:17:d6:81:d6:0a:f5:05:4f:0c:e3:e9:75:54:f8:67:1d:54:
fe:cc:25:67:54:c3:9b:54:0a:8c:dd:92:bc:54:2a:f1:cd:cd:
48:fa:30:d7:e0:e0:e6:22:5b:f7:15:67:28:b0:8e:55:09:9d:
74:e7:b3:a1:c4:be:67:1f:e8:85:bb:17:1f:17:3e:9d:b0:a3:
63:8b:c0:6e:0e:03:0d:a0:21:07:71:ff:60:be:29:f1:fc:3b:
d1:3c:a4:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:27 2025 by rpki-client