This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa
File: da111c82-234c-46a2-a1ef-e848103120cb.roa (raw, json)
Hash identifier: 4tvauh1fvdFhVeEcnVQ+vW1e4yr2tPU7DCjDQUkHDWA=
Subject key identifier: 5C:87:41:9B:BB:57:AC:B2:9B:7F:64:20:B4:4B:9D:A9:AF:FE:89:74
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 144C255B4A3BD004C41EE0F812FA0627310C6605
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa
Signing time: Sun 23 Nov 2025 00:20:03 +0000
ROA not before: Sun 23 Nov 2025 00:20:03 +0000
ROA not after: Sat 21 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:110::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4c:25:5b:4a:3b:d0:04:c4:1e:e0:f8:12:fa:06:27:31:0c:66:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Nov 23 00:20:03 2025 GMT
Not After : Feb 21 23:59:59 2026 GMT
Subject: serialNumber=02b74a22afd56b420b41b83b3abc09572a60acbf764e95c3c2ef79e793d83221, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:ad:3a:39:b6:50:38:49:a0:13:af:15:3b:
9a:5a:6f:42:68:ff:ed:aa:f2:1b:c1:7d:9e:0a:d5:
ef:34:f3:25:db:f7:65:f5:82:56:0a:54:59:3e:57:
b0:8d:5b:60:48:88:98:03:a5:60:c1:9c:db:d7:15:
0e:96:d8:d5:09:b4:f1:b7:ad:ae:8a:9f:b9:80:1e:
53:3b:3f:91:aa:a9:76:cd:7a:28:b1:b8:c1:20:0f:
1b:21:b2:a7:02:b0:89:f0:00:26:d5:b2:3c:11:c6:
ae:f0:99:d0:82:47:46:7f:32:b4:3f:86:26:55:d3:
0a:4b:2f:63:f4:3b:15:1c:f7:28:b0:94:cb:ef:56:
29:ae:a5:d6:a3:e9:bb:af:05:45:a8:7c:d7:2d:93:
30:52:7c:e4:c6:25:32:98:2b:9b:be:75:ea:9e:3c:
de:c6:9c:fb:d3:41:c9:ec:ef:53:cf:f2:11:6f:24:
b7:22:1e:e4:45:70:4a:19:39:35:e3:5a:30:9d:a3:
db:37:44:9c:9f:09:2d:3c:5a:e4:0b:c9:3c:4c:e7:
16:42:10:41:f7:b6:ba:bb:fc:2c:77:3b:38:99:a2:
2a:6d:4f:cb:41:8b:54:86:0d:72:31:6c:39:88:bc:
af:70:e5:3d:5e:be:d9:41:85:1d:1f:94:90:f8:1d:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:87:41:9B:BB:57:AC:B2:9B:7F:64:20:B4:4B:9D:A9:AF:FE:89:74
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da111c82-234c-46a2-a1ef-e848103120cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:110::/47
Signature Algorithm: sha256WithRSAEncryption
18:26:2f:d0:69:45:c6:e8:5a:da:81:b1:80:e8:61:34:5e:bc:
45:62:34:0b:51:23:6e:36:e4:0a:37:22:e5:2a:2e:02:7b:5a:
ff:35:d4:45:3b:c4:84:50:02:8b:e1:7c:ce:a4:e4:41:77:26:
57:ab:92:38:42:41:46:00:65:d1:e5:23:f5:63:c4:17:b8:fd:
2e:80:21:dc:49:bf:9a:34:a9:bb:58:14:48:ca:30:ea:c2:02:
dc:a5:de:fe:3b:a6:0d:9f:fd:ae:71:f3:33:33:1c:dd:66:44:
dc:7b:7a:4f:7c:cb:6b:4b:a2:04:89:41:21:65:90:84:e4:e3:
bb:8f:f0:eb:57:84:ff:0d:86:93:c4:6d:a1:61:f4:d8:f3:80:
c4:d1:dd:c4:25:6b:8d:25:4d:f3:2d:20:46:42:d0:16:f2:ee:
dd:01:22:ad:29:df:08:38:ae:6c:b4:a1:65:77:49:75:0b:c7:
47:10:66:ef:d9:c8:c4:9c:2b:d9:a7:d1:43:3f:f5:de:06:de:
66:bd:f4:99:b3:1c:b5:10:23:6d:55:f0:44:4f:2e:5a:8a:f5:
38:9b:d1:80:52:e0:c6:c9:90:ed:20:cf:2f:e0:5c:e4:37:8c:
23:ca:0b:8c:8a:a4:1e:7a:f9:b3:9a:08:49:66:89:f5:d0:c4:
45:21:f4:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:18:08 2025 by rpki-client