This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/59b63ffd-a0c1-4006-9040-edbf822eebd1.roa
File: 59b63ffd-a0c1-4006-9040-edbf822eebd1.roa (raw, json)
Hash identifier: RaYGayK8jwWVLFyCI1/GVdp84o7MxNkXks0dnksHf5E=
Subject key identifier: 3F:AA:B8:3C:4E:37:63:88:B8:F0:7C:66:99:93:CB:98:DF:7B:F8:36
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 608723345819F60A06D28837A29DCE1D9A7002CD
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/59b63ffd-a0c1-4006-9040-edbf822eebd1.roa
Signing time: Tue 25 Nov 2025 19:40:06 +0000
ROA not before: Tue 25 Nov 2025 19:40:06 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2606:8140:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:87:23:34:58:19:f6:0a:06:d2:88:37:a2:9d:ce:1d:9a:70:02:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 25 19:40:06 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=2ed01892ecbbc52662ee4e5eafb84db5eb81df417d61302ac9d4577a504bd12a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:60:09:c0:ac:42:f1:9d:ab:7f:c5:af:8e:
1a:f7:12:ed:db:27:be:2a:45:d2:b1:de:b9:7c:a5:
15:ef:cc:ec:79:0d:3f:b1:5b:5f:89:a4:5d:bc:27:
11:07:1d:7b:0f:69:cc:44:0f:78:8b:d1:ec:14:a3:
28:ed:0c:a7:1e:0e:32:cc:25:6b:85:86:e7:f5:8e:
e2:fd:0a:eb:42:58:1b:19:36:97:e3:f9:c2:e9:84:
94:3b:33:73:ef:e5:6a:5c:ee:f8:af:c7:31:a6:19:
24:29:72:78:7b:50:57:bd:ff:03:93:d5:ca:00:66:
8d:32:50:e5:05:15:54:e1:d2:d1:4a:cb:88:80:72:
3d:7c:b6:d9:80:cd:60:5b:20:21:c2:73:d9:b6:49:
3c:71:0e:5a:ba:16:ac:e6:d2:43:86:95:87:c4:56:
5a:bc:a8:de:f6:b4:44:8d:37:72:70:3e:d4:57:38:
15:71:f0:66:12:6e:68:21:f5:fa:53:91:8e:b6:47:
19:22:1e:9f:07:0b:1a:02:67:a9:1e:61:38:74:61:
88:04:17:21:7b:05:53:00:63:06:2d:9e:57:ea:a0:
91:9e:b0:47:b6:cf:ff:fc:cf:e4:a3:2a:40:97:80:
d0:85:35:9d:47:bd:57:35:59:b9:ae:f6:c8:71:61:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AA:B8:3C:4E:37:63:88:B8:F0:7C:66:99:93:CB:98:DF:7B:F8:36
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/59b63ffd-a0c1-4006-9040-edbf822eebd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:8140:500::/40
Signature Algorithm: sha256WithRSAEncryption
2f:19:a1:77:48:bf:79:1a:f1:0a:15:26:cd:91:2a:41:d7:7d:
10:be:dc:7e:bd:34:3b:8c:fb:5d:40:fe:b1:20:a8:98:5f:70:
bd:b2:af:8a:2d:23:50:1e:e7:f0:2f:60:1f:f6:69:78:33:13:
1c:34:b2:bf:25:2b:bc:69:93:6c:e4:d0:1e:b8:0e:4c:c8:30:
6d:d1:71:d5:82:de:c2:4b:b2:8e:04:76:37:5a:64:79:53:7f:
06:0a:48:ef:54:4e:e3:0d:fa:eb:1b:d0:c6:eb:b1:95:eb:5e:
c3:92:60:45:0e:8c:39:c7:79:a6:d2:c1:d8:d9:36:8b:88:f8:
86:e1:8e:79:42:6a:6d:f2:4c:48:ad:58:65:46:ca:b9:01:ce:
2c:b7:48:13:bd:c3:b1:b3:14:3e:cc:76:f4:bd:f9:ba:5b:cb:
ac:48:b6:bc:7e:17:9c:74:4d:8e:37:fb:10:56:1d:c0:7c:69:
2b:00:28:8e:61:0b:b9:6d:78:4b:7a:c7:2c:d4:69:70:91:38:
67:65:d7:b1:ef:6f:d3:de:21:a9:61:53:83:5e:05:1b:21:bc:
f0:20:d6:a9:ac:91:13:e9:b9:76:54:95:11:c0:46:98:a3:98:
be:5e:86:ef:35:7d:58:dd:00:53:80:a5:a4:fc:23:97:3e:d9:
99:46:d8:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:49:58 2025 by rpki-client