This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dca812da-36d9-435b-8f78-661a0902e7e2.roa
File: dca812da-36d9-435b-8f78-661a0902e7e2.roa (raw, json)
Hash identifier: n2pJiCYOsPmyPm3CkSMb3qem5BuYzdrtXe0njlJDK8A=
Subject key identifier: BB:A0:33:F0:67:64:41:62:FC:42:C1:9B:DF:76:D9:03:4D:41:8C:B0
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 63D210B1B454D8D3610D4E8807090B4704423C89
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dca812da-36d9-435b-8f78-661a0902e7e2.roa
Signing time: Tue 18 Nov 2025 00:30:14 +0000
ROA not before: Tue 18 Nov 2025 00:30:14 +0000
ROA not after: Mon 16 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2606:8140::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d2:10:b1:b4:54:d8:d3:61:0d:4e:88:07:09:0b:47:04:42:3c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 18 00:30:14 2025 GMT
Not After : Feb 16 23:59:59 2026 GMT
Subject: serialNumber=f8d07236636b7db8e508a8007819211d81dd0c5e5354f238e358dbed6ee02e5e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:64:35:a1:93:02:6c:47:b5:24:dd:42:27:
46:0c:90:a8:0a:61:ed:3f:28:b1:54:5e:80:9b:3b:
c0:37:0a:51:be:75:ab:6a:8f:b2:f9:5d:3a:6e:50:
f3:30:28:51:7e:5e:1a:34:f6:d9:44:dc:2b:ed:de:
92:e9:b7:18:02:ac:d9:99:19:c0:7c:60:ed:17:95:
c5:db:bb:8d:b0:80:6f:42:07:89:61:27:8d:39:52:
77:db:c3:c0:d9:56:5e:dd:ea:13:ac:e5:8e:5d:49:
bf:fe:e8:cb:0f:7c:ef:dc:37:83:22:06:21:b6:6b:
0f:3d:b1:04:b6:f0:2d:3b:91:61:dc:2b:4d:dd:a9:
4b:ab:b5:41:7c:73:08:5d:1e:57:08:0c:64:d8:1d:
c6:db:3e:cb:ab:4b:41:0f:ef:7a:fe:fa:76:8c:e5:
af:fe:f4:e9:47:11:5d:b5:34:2e:df:32:a9:6a:b8:
1b:bc:66:b3:47:73:cb:3f:f1:e3:77:21:1b:a3:95:
fb:e3:ff:21:40:88:b4:66:a4:99:e8:c9:b1:23:f9:
ec:22:e7:8e:71:88:78:08:0e:b2:6d:d9:ee:f6:58:
90:33:65:48:82:90:b1:cc:d2:5a:2f:85:03:1d:fd:
43:9b:79:fc:c2:ca:8b:7c:d1:74:5f:1b:f5:d3:e0:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A0:33:F0:67:64:41:62:FC:42:C1:9B:DF:76:D9:03:4D:41:8C:B0
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dca812da-36d9-435b-8f78-661a0902e7e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:8140::/32
Signature Algorithm: sha256WithRSAEncryption
07:ec:e1:f4:0b:fa:18:e9:fb:84:50:28:d5:f9:cd:72:b6:69:
f5:cc:b4:f8:d3:fa:fd:c0:5d:88:dc:2b:85:f6:48:3f:45:1a:
9e:82:6a:82:14:b4:e1:7d:5d:36:93:5f:23:e1:02:14:ad:ca:
94:63:c4:2e:db:af:bf:b2:1b:fa:95:19:9d:b1:a5:9e:26:43:
ab:5b:b4:97:59:60:3a:38:2a:ab:8e:2a:21:53:86:9e:d0:8c:
52:77:f9:7f:70:dd:3a:08:ae:13:5e:39:72:7f:f4:a6:a1:34:
fe:f5:b8:e5:7b:54:14:fa:b3:28:1a:43:b4:ce:65:bf:3b:81:
76:f8:ff:2e:6b:26:7c:02:aa:77:09:cc:cc:d6:0e:aa:ce:c1:
69:59:db:12:78:54:13:02:4e:ef:5d:db:66:3b:86:f5:4d:57:
06:85:b1:ff:e2:46:62:da:07:6e:ae:28:66:21:d0:93:8c:f7:
62:01:36:6f:c2:43:19:09:ae:b7:1e:07:bb:e9:d1:82:4d:8b:
39:75:de:e8:77:20:a8:ed:5f:0b:99:7c:38:75:51:0e:81:d5:
59:fa:ab:65:0e:43:ce:4d:ae:b8:5f:bb:28:45:f9:e8:a9:24:
6a:92:e2:fa:e7:64:b7:d5:36:23:34:04:53:9b:69:fa:8a:04:
fe:27:4b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:19:34 2025 by rpki-client