This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa
File: 43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa (raw, json)
Hash identifier: ApQD3xvyk0Rz9kaKCJIcDoAxp7w8X9b3PulxliNKS1Y=
Subject key identifier: B5:64:FE:AB:56:6F:F6:7C:73:53:A0:E2:56:57:D2:21:F8:A6:08:FB
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 38087583EFBC8C3DE4B8C80C98318B55E85540F7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa
Signing time: Sat 29 Nov 2025 02:40:08 +0000
ROA not before: Sat 29 Nov 2025 02:40:08 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:08:75:83:ef:bc:8c:3d:e4:b8:c8:0c:98:31:8b:55:e8:55:40:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 29 02:40:08 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=e3ad3319fa4d9e0c925c6055a6c31fe3e40015085ffba68f0b427f5c67977911, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:58:aa:02:f4:b3:f0:24:b5:56:ac:a1:56:
6c:9c:71:df:2b:bd:96:5b:45:e2:a5:0d:5c:cd:03:
a7:f9:db:6d:99:8d:66:15:6f:a7:aa:26:89:df:bc:
2a:5f:45:11:98:b5:26:2e:9c:9a:aa:0d:d2:c1:d3:
ba:03:71:83:82:7f:4d:c0:8d:b1:66:62:1c:f8:d1:
aa:23:9e:ee:cf:8f:74:0e:d2:8b:b3:55:22:19:00:
f6:9f:bd:14:11:83:4b:b8:20:46:6e:e0:d0:85:7f:
4d:b7:d2:5f:6d:1d:02:fe:7d:29:26:59:66:b4:8a:
b8:a0:8b:8a:31:88:d3:32:4d:ec:bc:41:14:e7:cc:
dc:7b:67:ab:46:6b:54:52:5a:e2:f1:84:3f:d3:b9:
d0:ba:09:89:9f:ca:c2:1f:33:b6:5e:c8:10:ea:49:
5f:9a:eb:53:1a:37:e5:ea:05:96:c4:34:6d:22:cc:
01:cd:dd:07:62:88:b9:51:66:bc:19:e4:f1:05:22:
fe:4f:fb:eb:84:57:bb:0d:c5:38:13:f5:21:75:29:
3c:da:22:6e:01:47:15:0b:ed:63:1b:59:5f:89:1a:
e6:c1:3e:ed:e8:bb:06:54:be:f3:27:31:67:84:9a:
53:db:7b:4a:0c:82:8c:57:5b:46:43:d8:a7:0f:93:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:FE:AB:56:6F:F6:7C:73:53:A0:E2:56:57:D2:21:F8:A6:08:FB
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c1a::/48
Signature Algorithm: sha256WithRSAEncryption
ad:d9:96:8e:b3:e1:cf:d9:1d:7c:34:69:2a:a8:20:40:40:8b:
c9:c3:17:6b:de:b5:a8:2d:6f:78:89:36:94:e8:07:bb:f4:ae:
5b:5e:9c:f7:43:30:df:f7:8c:67:9e:5c:c2:51:2c:d5:43:d7:
cc:31:23:e6:60:21:53:d6:c9:25:df:f4:20:7f:96:bd:f7:73:
63:6d:c5:ea:81:46:33:c1:74:0d:5f:46:8d:5b:52:6c:37:17:
36:80:28:f0:6c:8d:8f:fe:85:2a:2f:f0:30:df:69:28:74:eb:
c3:b0:7e:f5:84:85:89:7c:d7:6f:46:a2:22:15:ee:09:15:a9:
a4:ea:1c:e4:da:c1:77:79:04:d2:6e:f7:65:80:b2:7e:28:9d:
33:a9:b5:d9:c4:c7:3f:2c:20:3b:7c:c3:74:67:c3:d1:3e:0e:
7a:07:29:25:5d:9a:dd:c8:8a:58:da:38:a0:32:28:41:f6:ba:
5f:34:0e:ed:c7:fe:4c:77:50:06:0b:b2:e4:1d:51:0c:07:b4:
d3:ac:87:14:84:85:3a:4a:95:43:87:1f:f8:e7:5a:97:c1:57:
a7:ec:81:87:a9:e4:8d:f2:9e:07:18:7f:e9:bd:88:ba:7a:8a:
f1:73:27:30:54:f7:1b:8a:b9:e0:6a:c2:3e:ca:2c:73:6d:60:
02:ab:bd:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:52:16 2025 by rpki-client