This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa
File: 4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa (raw, json)
Hash identifier: H2iKDGrO8QakowHy12GfDCrSeMNcl2NQoVPnvB6bLr8=
Subject key identifier: FC:47:E8:60:5D:10:51:A7:74:2A:B5:C0:95:30:EF:86:CE:3D:91:11
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 0A87DA23F32938FA9CBF9BBD06D288843241F594
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa
Signing time: Tue 25 Nov 2025 00:10:07 +0000
ROA not before: Tue 25 Nov 2025 00:10:07 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2606:f40:fffc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:87:da:23:f3:29:38:fa:9c:bf:9b:bd:06:d2:88:84:32:41:f5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Nov 25 00:10:07 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=0740f21ba6b95d854f5407c93234b6e1ff519872e916de297e66d9b82a21b135, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:69:4c:d4:19:6a:76:e8:bf:59:72:46:38:
13:15:a8:5a:82:96:fa:6c:8b:20:3a:5f:ac:ce:5e:
0b:44:b6:36:fc:8e:f7:d8:28:ed:be:22:c9:90:a5:
c1:d3:74:7a:be:70:fc:94:53:22:c8:26:5d:20:0c:
0c:1d:54:82:95:d2:5b:78:92:a9:5f:37:ba:ab:3a:
bb:f0:42:37:bf:a0:dc:79:94:c6:fe:00:af:6c:53:
22:4d:9d:9f:1a:4e:c0:61:b3:e5:ef:03:e2:d7:e6:
fc:51:7f:5a:eb:56:51:34:c4:72:29:f9:3b:48:0b:
36:20:92:94:fc:63:f0:c8:eb:8d:87:2b:c7:28:1e:
bd:1f:54:f6:f0:d7:a4:18:9a:ad:11:99:ca:d6:79:
2f:24:36:8c:7a:ec:55:66:04:b1:9a:d9:34:2e:a0:
98:90:c4:b5:63:0c:26:5e:9b:9e:2c:e4:b8:7b:d7:
6c:32:a5:f5:04:8b:3f:99:65:bc:26:ec:bf:2c:bc:
df:d5:11:24:c4:bc:76:29:17:a3:e5:a8:e0:5f:d7:
68:1f:67:52:cf:09:3d:35:79:6f:1d:8d:e2:a0:69:
33:f1:b8:30:ed:a0:ca:5b:bc:6b:8c:62:24:59:c7:
7f:1f:86:98:b1:ed:51:5b:fe:39:2b:e7:20:5b:9a:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:47:E8:60:5D:10:51:A7:74:2A:B5:C0:95:30:EF:86:CE:3D:91:11
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:f40:fffc::/48
Signature Algorithm: sha256WithRSAEncryption
27:7d:49:23:fc:f4:0f:d7:2c:30:85:2d:de:d9:a4:b1:2c:00:
da:c6:37:78:7d:37:3f:c5:6a:4c:70:39:03:a3:63:8b:5f:a6:
36:a5:23:30:3d:58:e2:47:bf:8d:9b:33:dc:8a:e1:b8:fc:72:
84:f6:05:1d:0b:ea:5f:da:18:39:73:75:ed:7f:ff:9c:6f:0d:
bf:3b:e8:e0:04:f6:5c:f8:50:d4:4a:62:eb:62:a1:75:6c:b2:
f5:39:d7:83:7d:14:13:b1:09:cb:da:5f:7d:7b:16:e1:b5:5a:
f8:57:3e:c2:71:0a:ef:af:93:44:d0:b7:c4:9d:fe:10:6f:55:
b9:21:92:c5:47:02:69:db:dc:30:8e:a2:d0:2a:1b:d1:c7:31:
2b:86:81:d3:4f:22:24:81:b5:fe:90:ce:4d:1e:f1:b4:09:c8:
ee:0d:98:36:f2:d4:d6:84:6a:60:40:0f:ed:8c:b9:47:bb:9a:
e8:71:5c:51:ef:9d:76:68:8a:f0:80:00:63:79:a6:75:5d:e7:
ff:e5:fc:26:3f:6d:84:35:bd:cf:5b:bc:5d:21:06:a1:5c:73:
e0:f4:1a:fa:bf:20:15:8f:d4:08:08:82:16:f1:7f:4e:15:aa:
41:de:f4:71:83:0f:14:dd:f9:8d:58:74:54:7f:78:6a:e0:fa:
17:ea:60:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:08:44 2025 by rpki-client