This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
File: 8a8b863b-298e-48a9-bced-202e80d98f01.roa (raw, json)
Hash identifier: 9DPKn3EYOtuqwlwC5eUmA1dYZ84xXb1W+THdS7R3eyY=
Subject key identifier: AA:20:63:27:95:33:7C:A3:BA:54:70:87:D3:95:7A:06:72:F6:0E:E2
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 5896857CAB43F1BBC7E7640FC462BB0AF0A158E2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
Signing time: Wed 10 Dec 2025 05:10:47 +0000
ROA not before: Wed 10 Dec 2025 05:10:47 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:ee00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 19 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:96:85:7c:ab:43:f1:bb:c7:e7:64:0f:c4:62:bb:0a:f0:a1:58:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 05:10:47 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=ed383844ea91382d451c8ef68ac3534e772c4d1973fcf4a723519611de14dd3e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:00:b7:59:d0:f9:89:d6:a0:fe:c6:0a:96:
7d:5d:26:af:5c:80:ed:df:75:37:73:c8:26:b6:d1:
f1:69:9f:b2:c7:52:d8:de:45:bb:c9:c3:26:d1:63:
8f:ae:fb:b4:85:79:d2:d7:8f:a4:26:67:6d:fc:d0:
a9:89:9e:7d:5a:b0:7b:ed:43:cd:3c:af:6c:4d:73:
10:58:4a:ec:7b:a7:cb:53:34:61:cf:a1:55:24:ba:
76:38:dc:08:b7:1e:d5:ec:3b:e7:30:7c:b5:3e:81:
fc:b9:a1:41:ab:49:20:ff:38:ac:0b:5b:8a:d4:b8:
fa:1b:13:d7:6a:fd:74:d6:0a:8c:85:91:9c:29:3e:
a1:46:1f:50:41:ad:7a:08:5d:c9:f3:ae:49:57:85:
01:46:3f:32:ea:c9:06:f1:7b:8e:16:3c:6c:0d:2d:
d2:18:bf:c6:0b:70:28:6f:a7:85:9c:7e:63:e7:3b:
73:07:df:3f:2d:fc:42:ba:44:22:37:ab:2f:db:f5:
81:cf:4b:70:bf:64:39:c0:5c:5d:a4:07:1d:0b:30:
3d:f5:11:aa:3c:a6:2a:c0:ed:3c:cd:97:9a:69:bc:
61:d2:ae:8c:74:4b:c6:42:c4:22:2e:04:f9:a1:9c:
3e:ae:72:a8:0d:35:49:10:e0:0b:94:a7:e2:55:4a:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:20:63:27:95:33:7C:A3:BA:54:70:87:D3:95:7A:06:72:F6:0E:E2
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:ee00::/40
Signature Algorithm: sha256WithRSAEncryption
39:38:b8:be:e8:0a:79:ae:cd:f8:8a:8e:67:13:a8:4b:db:22:
73:e4:ed:ed:17:37:4d:cc:aa:2a:77:d4:9d:7e:9a:d0:21:1a:
50:e1:61:c9:e1:0f:ea:1a:2f:2c:45:d9:0d:f9:f6:7e:3c:fb:
98:fd:eb:32:a4:f0:e8:71:64:13:75:95:23:cd:d3:b2:a9:68:
47:f2:0e:ec:2d:8a:3d:12:ab:ed:a7:99:e4:7e:55:6b:92:d2:
47:6c:f9:6e:5d:a8:d6:8f:e3:75:40:32:32:83:6c:ea:62:6d:
bf:2a:d7:aa:44:9b:99:e3:70:62:f9:93:4f:22:8d:c9:f8:e3:
08:32:88:e1:49:35:ae:54:96:20:06:ce:68:f8:ed:05:ac:34:
33:b8:99:16:cb:38:6b:66:0b:18:83:f1:0e:66:80:ec:41:cc:
22:e3:8d:80:f6:43:e3:48:f4:a9:0a:8e:5c:59:d3:72:97:7d:
c4:7c:51:a8:c8:16:74:b6:40:d8:3e:e2:43:ca:1f:0e:fb:c9:
ef:a6:47:1d:8c:1b:a8:a0:43:4e:92:3a:7a:25:93:b5:56:5d:
04:e6:8c:80:c9:5a:f4:58:87:e7:fd:cc:be:81:19:6b:3c:b2:
52:47:29:21:b8:60:a1:84:d1:91:ab:53:08:1e:ec:a0:cb:86:
71:cc:33:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 21:51:38 2025 by rpki-client