This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3dc9780-ee42-4415-930a-4d78bbb4e531.roa
File: a3dc9780-ee42-4415-930a-4d78bbb4e531.roa (raw, json)
Hash identifier: Z54+f07VeXuRdauvjJrrUF+mRdXrLUCZuuAjEeVlDmw=
Subject key identifier: 02:2E:A7:03:5E:A8:2A:A1:9A:5A:89:B3:72:13:20:41:FD:5C:D9:CA
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 3D69EF87E28F0DEDAF94A08DAD852D5807C32D35
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3dc9780-ee42-4415-930a-4d78bbb4e531.roa
Signing time: Tue 25 Nov 2025 19:30:42 +0000
ROA not before: Tue 25 Nov 2025 19:30:42 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:69:ef:87:e2:8f:0d:ed:af:94:a0:8d:ad:85:2d:58:07:c3:2d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 25 19:30:42 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=0e0412435aed58305cdc910b44127a00741696473c10a4bfd392ea41592af56b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:43:2a:d4:74:23:a4:72:21:1d:c9:39:0e:6b:
bc:5c:97:5d:5f:05:dc:25:aa:d6:d9:5c:6e:79:93:
7e:f0:95:d1:f3:c5:63:82:00:db:2c:73:4d:f7:37:
a0:c0:b2:b5:5a:89:2a:f5:32:2d:dd:6b:97:6a:05:
6f:c7:da:71:11:ec:e8:65:99:3b:c1:62:09:92:de:
c8:5a:ec:8f:a9:0f:15:8d:6f:f0:a9:e2:fd:27:4b:
50:e6:4f:3d:8b:a8:50:8d:b7:49:74:4e:02:5b:e5:
a3:f1:10:eb:27:f0:17:fe:80:e6:83:da:e5:b2:0f:
1c:c6:16:3a:df:80:c2:fc:f4:c3:17:55:ed:f6:0b:
ca:ba:12:51:6b:ab:44:1b:8c:64:bb:61:f3:be:a6:
56:95:cf:8b:8e:56:64:b0:8e:40:e9:90:05:90:3a:
bd:3c:31:bc:e1:d0:a9:f3:e2:77:8c:ba:01:99:a1:
31:b4:6e:45:18:e6:ed:61:a5:6e:43:48:fc:1a:ff:
4f:33:92:a2:f0:27:56:14:76:fd:c5:84:74:82:e6:
63:73:99:15:5c:89:1d:d0:96:53:0c:ef:81:27:3b:
a4:cb:d4:fb:fa:db:84:a3:ed:f3:09:3b:20:8f:8e:
11:73:31:6d:ac:98:80:17:b8:41:24:28:fd:45:ce:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2E:A7:03:5E:A8:2A:A1:9A:5A:89:B3:72:13:20:41:FD:5C:D9:CA
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3dc9780-ee42-4415-930a-4d78bbb4e531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c02::/48
Signature Algorithm: sha256WithRSAEncryption
58:09:a5:09:3c:f8:8f:27:b8:66:4b:66:79:30:ab:60:6e:3e:
fd:2a:bc:12:f0:5b:67:10:5e:70:fd:69:4d:f0:03:0e:67:18:
6f:b7:d3:52:a5:ad:13:5d:63:b3:a5:01:96:88:ba:5d:7e:6d:
ea:88:6d:3f:39:c2:d6:4e:aa:ef:a0:cb:71:ba:8b:70:03:46:
64:66:48:d4:f6:9a:6a:04:b7:4e:a1:ea:b0:89:fb:1b:4c:a9:
95:7b:4a:26:65:8e:89:5c:05:66:35:d3:e2:31:7c:2a:28:87:
36:32:ba:95:f9:a4:b3:a0:38:85:15:28:f9:6f:84:26:fb:6f:
16:85:27:60:1e:d8:9d:f4:a7:07:d7:dd:69:27:8d:64:df:2e:
a0:37:8b:3f:05:bc:d4:43:84:f0:0b:48:e2:6b:d8:1f:b9:95:
3f:e9:0f:91:6e:9c:8c:d2:37:87:27:67:15:ba:95:0f:80:be:
4d:f8:c1:e2:b9:86:ce:ac:4f:15:99:db:d7:1c:7b:69:c0:03:
e1:f3:87:be:e8:25:29:31:74:44:3d:ef:c6:64:e8:34:5c:7a:
39:de:0c:64:8e:1f:9f:14:72:c6:15:bf:8b:51:a1:36:f8:95:
09:01:60:79:42:91:c0:04:aa:50:63:3c:97:b7:4a:f8:41:b0:
93:30:b9:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:57:52 2025 by rpki-client