This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa
File: faa66475-4425-4e85-b798-e003ebb71081.roa (raw, json)
Hash identifier: DvtxeF7Jl+NyjH3Sw9X1qgRG5nmK8bttTcyXpf3dZwY=
Subject key identifier: 66:6F:DA:A9:49:D5:91:CE:FA:A5:1A:A0:93:25:DF:79:44:69:0F:F4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 226250AEC46F0D85B8A4EC67440B054C0908312B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa
Signing time: Wed 03 Dec 2025 00:50:45 +0000
ROA not before: Wed 03 Dec 2025 00:50:45 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:ac00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:62:50:ae:c4:6f:0d:85:b8:a4:ec:67:44:0b:05:4c:09:08:31:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:50:45 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=b25f1048bfd2f8cc56012cc237c6b751b62f713ecee6f260371ea6596c37aa09, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:a6:4a:c2:16:2a:e5:1e:86:3b:75:67:04:
ff:70:2c:a7:58:af:2d:98:72:2a:0a:36:1e:a4:d5:
1d:c4:c5:91:ec:ff:d9:db:09:8d:2e:83:44:19:8f:
ea:46:f8:72:72:21:45:c0:30:f6:9f:29:93:31:8f:
7c:7c:9a:f4:d4:ee:16:b0:a4:09:ce:28:81:be:6f:
c2:14:37:e1:60:c4:bb:4b:c1:be:6e:a0:14:e5:31:
22:5d:cc:94:72:ef:df:c2:03:7a:a9:0f:75:53:4b:
e1:1e:d7:7a:03:21:b3:7e:6c:ca:7c:f3:d6:5d:e3:
41:b4:f9:8c:d9:fd:f5:b7:b3:00:f3:35:87:57:7e:
23:a8:4f:a7:07:85:1f:c0:b8:f1:d2:d8:6c:07:83:
b7:1c:79:56:6f:0d:2e:2d:46:d7:90:e9:b4:cf:e4:
d6:e5:89:e5:71:1e:e7:58:62:c2:ca:dd:7e:ca:43:
3a:2a:b9:69:50:43:f1:fe:19:48:72:ae:a1:90:eb:
d9:bd:18:65:07:a6:2e:be:3a:6d:5c:b5:62:32:04:
32:a9:14:ba:5a:71:7d:47:75:a1:05:58:ca:b3:6c:
19:af:32:3b:fe:11:70:f1:80:c2:08:72:b6:79:54:
04:30:f6:a2:1a:9b:47:b8:08:f4:42:f8:53:70:a5:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6F:DA:A9:49:D5:91:CE:FA:A5:1A:A0:93:25:DF:79:44:69:0F:F4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:ac00::/48
Signature Algorithm: sha256WithRSAEncryption
2d:3d:ce:80:a6:7f:a4:bc:00:49:22:5b:f1:af:7c:1f:40:6b:
b2:35:12:bc:7f:4c:5c:88:26:d9:97:a3:c0:23:3b:2c:86:80:
11:f4:5e:4d:80:ee:70:b7:40:14:13:b2:c9:16:56:f0:b0:57:
98:2c:f8:82:ae:3e:a2:dd:b6:9b:70:6b:91:8a:62:99:d6:4a:
01:88:03:b4:d1:b0:fa:ba:07:98:92:a9:a4:d7:14:5e:aa:c6:
0b:b6:bd:33:a2:7a:b7:c1:27:48:e7:0f:45:a2:3c:b8:35:b2:
81:5e:81:f6:bf:a7:c8:5b:14:24:c4:23:02:07:fc:bb:92:ac:
ef:cf:02:bb:21:ef:86:8e:e7:e3:c7:ea:46:f7:b3:7e:87:44:
24:06:5c:8d:36:55:7b:80:10:09:6d:68:6a:2d:7d:05:ac:48:
2a:27:aa:03:84:e4:c4:de:54:1f:a1:83:f0:38:c9:84:0a:ca:
51:ce:97:17:7e:2d:43:27:65:17:ca:f9:cb:1c:a2:c4:93:cb:
3d:19:22:a4:d8:21:3f:f0:4f:ac:e2:cc:bf:94:9b:16:e4:5e:
e5:5a:da:be:95:03:3d:d7:34:30:e0:c2:21:51:6b:2c:34:87:
fd:9c:2b:a8:ff:cf:d2:31:80:61:9a:7e:11:7f:bf:9a:c9:cd:
57:f8:19:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:31 2025 by rpki-client