This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa
File: 2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa (raw, json)
Hash identifier: yFC6+BjJjXtpDJAKP2Z8hiIAXsTpNMPG8bXlgcCEbvs=
Subject key identifier: 46:7C:05:84:58:AC:55:3C:44:D6:3E:53:D8:12:9D:12:4B:14:80:3B
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7C19C3372073F6B9951F1FC01499D7AE15DE980F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa
Signing time: Tue 02 Dec 2025 01:30:11 +0000
ROA not before: Tue 02 Dec 2025 01:30:11 +0000
ROA not after: Mon 02 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f1:80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:19:c3:37:20:73:f6:b9:95:1f:1f:c0:14:99:d7:ae:15:de:98:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 2 01:30:11 2025 GMT
Not After : Mar 2 23:59:59 2026 GMT
Subject: serialNumber=53f25f03c4758ea71b595487a45ae8af4e83389fedf88a247882c3fbc3ca71ee, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:70:23:a8:44:18:7f:a2:55:db:71:aa:e6:bb:
ce:ca:82:b3:b4:58:71:68:63:87:87:d9:da:fa:98:
6e:37:1a:13:e2:f7:e6:ea:72:4d:ad:ff:a3:e0:df:
58:d1:63:e2:3d:20:0f:12:c3:6e:10:a2:8e:9b:d1:
8b:fb:b8:de:dd:ac:01:96:cb:9e:4a:a6:10:72:b5:
c4:0d:96:c1:39:cd:5f:67:38:d2:2b:3e:be:3c:66:
cc:d4:86:e8:86:e2:37:ed:94:1c:23:e0:54:85:a3:
57:d6:fa:93:90:90:ab:8a:00:05:fa:87:6d:5e:25:
51:f9:d9:fe:ae:e6:74:86:d2:22:65:5f:2e:2a:8e:
ea:d0:42:6c:fd:81:f9:bb:2c:06:41:e3:b5:10:f9:
de:41:57:94:d7:ee:03:09:b3:f2:20:22:50:f5:ea:
ad:fb:09:69:2d:99:4e:97:0d:9c:44:36:88:cb:a2:
61:0f:ea:4d:13:b4:e0:09:d4:d1:8a:ad:41:2a:fc:
99:8e:a9:4b:1d:96:fd:ab:97:3b:5c:fd:73:42:b1:
9f:19:a6:79:f7:51:60:d5:a1:f7:2c:76:9b:37:0a:
55:d4:e5:8a:09:9a:09:4e:ea:00:4e:80:53:ab:13:
cb:f2:24:73:b2:24:b4:5c:aa:61:ed:de:5c:97:03:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:05:84:58:AC:55:3C:44:D6:3E:53:D8:12:9D:12:4B:14:80:3B
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:80::/44
Signature Algorithm: sha256WithRSAEncryption
45:15:59:81:cc:58:59:b7:99:cf:b4:aa:d1:7a:a2:dd:70:3d:
23:32:3a:4d:11:c7:38:7e:d8:49:29:d3:bc:a7:db:6c:7d:63:
d8:e9:74:5c:c0:1c:96:ac:73:13:4c:d2:b9:7c:6d:ad:7b:fc:
98:87:a3:2a:c8:18:21:f5:40:11:1a:6b:29:95:70:47:df:88:
61:2f:ee:f9:9f:4f:06:be:6f:db:d2:63:d9:37:f9:65:55:bc:
bb:6b:c0:62:81:34:05:e5:08:89:93:d9:6c:55:ce:01:9a:e5:
be:1e:64:00:49:6b:15:a1:17:10:28:30:53:83:ae:80:38:2f:
0b:2f:9c:56:64:aa:9c:dc:bc:be:c0:57:bf:b1:40:02:70:1e:
1a:f4:35:26:57:b5:a9:8e:ff:3c:3e:fa:38:66:82:f8:01:23:
33:7c:b4:8e:91:67:0c:6c:6c:81:77:23:0e:bb:54:32:b8:87:
b2:43:fa:35:f8:5a:6f:5f:68:7b:85:ec:bf:ba:a4:b9:67:82:
91:45:ce:3d:94:c1:a2:b8:c7:cf:b7:28:a1:6a:92:a0:83:eb:
af:2e:bd:56:fe:05:9b:97:99:f6:c1:5f:73:33:06:38:57:40:
34:81:b1:e4:89:00:27:bc:67:e8:e4:05:be:4d:6b:8b:54:73:
fc:1f:9b:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:26:26 2025 by rpki-client