This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff1a08ba-07d4-454f-bb58-b0503ad24592.roa
File: ff1a08ba-07d4-454f-bb58-b0503ad24592.roa (raw, json)
Hash identifier: hqFnyAmsorKW44cdfg15UF+Kq/TybH+IMv831aMPZC0=
Subject key identifier: 38:43:62:AB:52:61:CC:E4:C4:2D:05:80:C7:CE:E8:FB:46:19:B5:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 36F13E6B048C969D9875368DB9B7370CC5EE993C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff1a08ba-07d4-454f-bb58-b0503ad24592.roa
Signing time: Sat 06 Dec 2025 02:31:11 +0000
ROA not before: Sat 06 Dec 2025 02:31:11 +0000
ROA not after: Fri 06 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 138.34.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f1:3e:6b:04:8c:96:9d:98:75:36:8d:b9:b7:37:0c:c5:ee:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 6 02:31:11 2025 GMT
Not After : Mar 6 23:59:59 2026 GMT
Subject: serialNumber=b3d0eafab25a1752744c06fd53523e6351e4727d0b1b64503f719c00eeecbd56, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:2d:40:36:8c:d5:fb:27:50:52:42:f3:d2:
e6:81:d4:49:37:69:bc:8f:4d:df:c0:00:c2:d1:9f:
38:6d:b2:e6:f7:10:83:6b:80:89:bd:f0:4e:6f:68:
64:ba:fd:04:47:f3:58:af:79:79:77:c1:c5:fb:fb:
41:5b:9b:8b:16:03:a0:a0:dc:4c:c5:e1:f0:c9:f8:
f2:bb:a8:4a:c2:df:11:d0:3c:4c:4b:e9:ea:ff:29:
dd:44:30:9f:86:f6:6a:a8:57:b7:ea:9a:d3:47:28:
f2:4e:ec:8c:08:33:c8:3f:d8:e3:c0:c5:1c:d1:e1:
50:56:18:9a:b2:a7:b0:dc:7a:71:90:16:47:45:57:
3f:87:67:4b:a9:bc:8f:88:8c:81:08:bc:c0:12:91:
18:4b:69:e1:88:bf:24:95:21:85:60:a1:0b:67:ba:
0b:86:e5:a1:a2:ee:93:ba:22:76:5e:8b:13:95:81:
f0:b2:dd:7d:a2:20:d0:ac:e4:4a:09:ff:29:d0:a3:
86:7f:39:bb:02:27:70:ae:8f:4a:b5:d6:ef:56:86:
87:89:e0:b5:00:25:f2:00:24:10:93:74:0d:04:3e:
22:8e:00:c6:c0:4d:8e:88:d6:c0:5f:9a:61:7b:3a:
e1:c0:19:1a:21:3a:6b:33:c2:15:9b:40:4c:dc:80:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:62:AB:52:61:CC:E4:C4:2D:05:80:C7:CE:E8:FB:46:19:B5:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff1a08ba-07d4-454f-bb58-b0503ad24592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:ee:0f:e6:93:3c:aa:ed:77:55:9c:d1:80:1d:70:61:42:03:
b2:0d:0f:d9:2f:ed:b2:25:f0:24:a9:ab:00:21:cc:de:6c:90:
8c:33:60:06:84:64:bd:41:bf:f9:c9:aa:a9:0a:94:ad:17:9c:
4d:b7:31:70:7f:d6:32:35:bf:b6:07:8e:a2:28:19:f3:60:01:
cf:6b:af:31:e5:50:2a:f6:e5:d5:71:75:17:95:4e:6a:23:0c:
1c:3d:2b:a7:b4:0b:b4:7c:1d:8e:8d:1f:34:6b:72:60:ef:83:
2a:1d:3c:71:dc:83:d6:22:d8:0a:8d:a9:d9:e0:4c:97:f8:05:
e5:19:ba:55:47:f9:b4:3f:0a:db:05:59:6e:28:04:a8:bc:b4:
29:fe:c8:82:1e:de:6f:dd:04:02:03:6b:1b:f5:54:bd:99:4a:
13:e6:1b:1d:aa:e7:b0:cc:aa:b9:2c:11:8e:cf:20:dd:c3:27:
b8:20:06:be:14:ed:f3:78:d6:59:00:2f:c4:e5:0e:22:80:ef:
16:09:a8:b3:01:b8:71:00:83:88:9c:ef:8b:af:e5:da:eb:e7:
6d:df:8d:44:05:2c:33:fc:1f:35:6e:45:d7:23:09:fc:31:f9:
23:d7:1d:2e:b4:71:80:6b:77:e2:61:7a:ec:79:c6:57:50:75:
ae:75:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:16 2025 by rpki-client