This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa
File: b6c99ca5-333b-4905-96bb-8272aaedfc25.roa (raw, json)
Hash identifier: 7A5iMvRnDDKYgIHDKoAOemvrzVYKRptDeUYsqSR5ubA=
Subject key identifier: EF:EB:00:E2:96:CF:35:E2:F1:18:3E:85:14:C8:B5:19:84:3E:8B:3B
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 664ADFA9DBAA03BC1266EF34CD11786C1AE636A1
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa
Signing time: Sat 15 Nov 2025 04:50:36 +0000
ROA not before: Sat 15 Nov 2025 04:50:36 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:397::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4a:df:a9:db:aa:03:bc:12:66:ef:34:cd:11:78:6c:1a:e6:36:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 15 04:50:36 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=14b751623e429fec05d5c0783174ec48db51720670807cf98d4ffc7a3e52592e, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:a3:94:a9:98:82:df:0f:a1:12:6d:ee:87:
e5:19:4d:ca:77:dd:db:87:ea:26:f1:9b:36:f9:6e:
2e:ce:95:3d:f6:9e:49:19:13:f3:10:75:54:e0:99:
1a:ca:78:99:4e:cd:4e:51:18:62:eb:4c:26:15:a4:
d6:56:5b:b1:7e:40:9d:8f:4d:ff:7c:10:a9:79:6e:
6d:e2:f2:29:b5:dd:09:66:c9:ff:60:f8:a2:55:f4:
2e:56:93:dc:95:2b:00:86:63:2c:1e:aa:e6:b3:58:
01:0c:67:3d:d4:cf:2c:29:c1:c1:f5:ee:73:25:8c:
7a:95:b4:13:35:64:85:c6:6c:0c:66:ec:55:9d:4b:
71:0a:9b:a7:37:37:ed:47:21:c1:dd:59:2e:68:6c:
76:9f:8a:7a:6d:f9:fc:34:7a:85:93:67:a3:33:29:
49:85:74:da:92:10:ba:a3:a3:29:88:0e:ff:12:4b:
cf:3a:65:92:fc:bf:a3:95:dd:14:a2:32:d7:06:07:
6e:f2:11:f4:fc:08:be:f6:e7:73:20:c4:84:06:17:
13:2d:27:91:da:82:f7:ce:63:28:9c:de:83:28:73:
39:3d:92:9c:ca:f0:85:4e:2e:b5:9f:16:df:b9:d1:
ec:f7:44:06:6d:34:56:ff:34:64:4f:37:ac:ce:f4:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EB:00:E2:96:CF:35:E2:F1:18:3E:85:14:C8:B5:19:84:3E:8B:3B
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b6c99ca5-333b-4905-96bb-8272aaedfc25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:397::/48
Signature Algorithm: sha256WithRSAEncryption
09:4c:7f:a0:2b:c7:fb:e6:fb:f0:1f:39:d3:e5:74:f0:63:7f:
9f:fa:d2:7f:a9:6e:d0:b0:e3:34:97:ba:88:2c:fb:52:31:23:
d6:f0:fa:5b:55:ae:a7:95:30:1e:b5:d5:e4:e5:02:b2:9d:7e:
7a:20:0e:90:8b:12:4f:59:27:30:9e:ca:15:36:c5:c1:d7:1d:
d6:79:12:88:c1:63:e3:58:5a:e6:c6:65:50:8f:45:20:70:db:
46:4e:8b:13:8f:b8:86:bf:b0:20:7b:71:e7:08:87:31:09:d3:
de:d5:7c:06:fc:b9:39:84:b9:69:1d:ea:56:24:6a:90:95:ce:
87:19:6c:b8:77:ad:4f:e8:76:22:f6:09:ea:ab:84:d5:91:f6:
29:c5:5d:fb:9f:73:e5:7e:a1:c4:ff:0b:78:71:d6:e9:6b:30:
4d:4f:7d:10:7b:e2:41:e3:78:e3:f5:9a:60:b0:6b:8e:71:da:
be:a9:ff:0e:7e:3a:84:a1:fd:b5:c8:7a:d4:fe:c0:ec:63:5d:
89:33:2f:bf:c1:ec:a7:75:a3:45:73:15:43:0d:b0:38:18:a5:
24:63:b4:a0:9c:11:cf:93:8d:25:43:62:c1:3c:bf:fd:ec:9c:
d5:f7:3b:d4:9a:ed:7f:53:51:d2:79:1e:7d:92:8a:a8:fb:6c:
03:39:c3:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:51:31 2025 by rpki-client