This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4b04bc90-cc5c-48b6-be4f-8c1e0fa64617.roa
File: 4b04bc90-cc5c-48b6-be4f-8c1e0fa64617.roa (raw, json)
Hash identifier: IXSh/kEE9AUQyIAF90g0XC+TyzAMp8Ct5iWcTwuEh2k=
Subject key identifier: 67:65:60:78:60:79:7C:29:17:F7:89:88:8B:56:12:44:E2:A1:72:9F
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 329622949D4F943275203C7D5A419509D6150601
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4b04bc90-cc5c-48b6-be4f-8c1e0fa64617.roa
Signing time: Wed 19 Nov 2025 00:10:06 +0000
ROA not before: Wed 19 Nov 2025 00:10:06 +0000
ROA not after: Tue 17 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f1:8b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:96:22:94:9d:4f:94:32:75:20:3c:7d:5a:41:95:09:d6:15:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Nov 19 00:10:06 2025 GMT
Not After : Feb 17 23:59:59 2026 GMT
Subject: serialNumber=15712dc84560834de56d3bcd34661037b5fbfe114c8d109e46fa5ed51d4c7444, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:42:62:fb:aa:d3:05:87:06:f6:3a:ab:dd:
a9:bb:d3:2d:8b:bb:38:d8:9a:22:6e:bd:0c:2d:0d:
9e:b8:ee:03:8a:85:e0:99:28:93:f7:68:70:46:33:
8f:d0:fb:c7:1d:bd:0a:af:29:17:53:01:e6:6c:1a:
61:69:82:c9:e6:85:17:18:2b:38:91:ac:2f:4c:3c:
16:44:06:00:e9:e7:a2:52:1f:1d:99:97:56:06:45:
49:17:3f:2c:3b:9b:58:e5:e3:03:90:89:92:fc:64:
55:3e:78:3f:ac:ea:75:ff:e9:ca:16:da:a0:24:6a:
71:35:f1:1a:72:fc:5d:fa:63:f4:c2:3c:ef:f0:b7:
ba:8c:2b:97:51:92:fa:2c:3b:81:cf:60:62:d8:da:
0e:87:12:c8:6f:17:ce:3e:69:92:bd:eb:e7:a1:d5:
6e:33:d9:23:74:70:55:8b:0b:50:60:d6:3a:97:5a:
f0:7b:b6:e5:a5:e5:14:1f:aa:b8:14:19:56:07:21:
76:6f:b5:31:63:05:71:45:23:aa:83:f5:af:81:54:
a9:9f:8a:78:f1:8c:23:08:32:05:9c:f3:d6:a8:7d:
78:ff:fa:f1:b7:99:e5:c6:4c:d3:77:45:ef:f4:24:
2e:86:d4:d2:54:d4:f8:1a:85:46:fe:a2:bc:86:09:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:60:78:60:79:7C:29:17:F7:89:88:8B:56:12:44:E2:A1:72:9F
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4b04bc90-cc5c-48b6-be4f-8c1e0fa64617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:8b00::/40
Signature Algorithm: sha256WithRSAEncryption
42:49:4a:de:29:cc:f9:e1:9a:3a:15:20:97:07:80:50:36:38:
36:0b:96:a9:37:8c:88:f6:83:5e:c1:b4:24:f4:31:94:10:84:
64:0d:26:23:a0:ce:8f:7c:90:00:99:42:33:d9:2c:0d:6d:af:
90:a8:a9:5c:ef:4f:74:3f:dc:45:d0:bc:83:56:2d:43:4e:bb:
e1:2e:74:62:30:cd:b2:d6:32:d8:ff:a4:ae:e7:86:0f:14:75:
65:e2:9f:3e:6d:75:3c:d6:85:e4:e7:4e:d5:fe:21:90:6b:3b:
bf:a9:36:ed:97:13:77:85:85:0a:e4:77:07:5a:9f:69:02:ad:
da:50:25:35:d5:20:12:9f:41:0d:aa:e2:11:64:27:72:7c:2c:
57:f4:40:47:f8:61:ea:f7:f8:36:2f:12:42:d3:fd:4b:0c:39:
5d:cc:d5:01:0a:c9:81:fc:c4:69:22:29:2e:b2:37:55:f1:12:
aa:68:ae:bd:c6:f3:53:ea:9d:b0:30:cb:26:40:c0:37:e2:9d:
35:b9:13:7e:36:02:99:21:40:1b:f5:8c:87:a3:3a:28:35:34:
34:62:65:1e:62:d9:96:28:1d:9a:2f:e3:8b:3b:f2:cc:33:f9:
c9:ba:95:ce:ad:bb:18:7b:c6:84:89:b1:3f:e5:49:d4:53:25:
a1:c1:6b:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:11:23 2025 by rpki-client