This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/129ff053-6817-4682-9422-3e282012d02b.roa
File: 129ff053-6817-4682-9422-3e282012d02b.roa (raw, json)
Hash identifier: BMkhzwfvuiBRIfdVDqTmBeLGQVWk0BCOrZWxaxUMnKU=
Subject key identifier: EC:B8:19:32:76:6B:2D:BF:5F:81:B1:C3:40:54:6F:FE:A2:8F:6E:37
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 4108DD1586A04B54F688CB5FDDAF5B878C7620
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/129ff053-6817-4682-9422-3e282012d02b.roa
Signing time: Tue 25 Nov 2025 13:40:48 +0000
ROA not before: Tue 25 Nov 2025 13:40:48 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:2f8c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:08:dd:15:86:a0:4b:54:f6:88:cb:5f:dd:af:5b:87:8c:76:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Nov 25 13:40:48 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=abab5dd0cd125da6aa370ec5206326a0a335dd7a9ece23141e3bcb2360c08fe0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:59:8a:d9:ae:90:6c:52:cf:70:2c:58:dd:
46:57:e4:f6:1e:35:1f:ae:90:cd:00:86:b0:31:e3:
59:42:5d:cb:86:b1:50:32:e3:b7:2c:9d:c3:72:f7:
11:83:08:49:36:e2:cd:73:1d:22:de:2c:e7:0e:3b:
1c:65:43:5b:f9:84:15:70:8c:b0:89:c6:d4:68:2e:
dc:a5:30:a2:49:5a:85:e8:cd:50:8d:a1:d2:be:ee:
c6:e3:a4:c5:e1:1c:d5:a6:a1:5c:c9:c0:c0:4b:6f:
54:3d:56:15:16:7f:eb:90:91:bc:b7:15:99:a0:e0:
13:e2:6d:e5:5a:71:79:ba:71:8c:2c:72:73:73:d0:
3c:bf:5b:11:ab:b2:5a:0b:3f:da:39:0d:be:27:02:
8e:81:04:6b:db:cc:da:ac:46:44:4e:aa:51:29:15:
5e:ba:78:39:3b:c6:36:bd:56:82:98:92:c7:4c:ca:
c0:79:75:c5:30:e7:35:85:bd:d8:72:dc:3f:ba:cd:
95:3a:5a:66:1f:c6:3c:f8:5f:bc:24:0b:ec:18:44:
d6:64:bb:a6:69:c6:c1:9b:b6:de:bf:1e:22:31:f4:
ea:2c:e3:e3:41:5e:d8:b0:98:3d:9b:6b:77:02:e6:
16:81:7a:ce:bf:72:16:8e:2c:df:ca:bc:52:af:a3:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B8:19:32:76:6B:2D:BF:5F:81:B1:C3:40:54:6F:FE:A2:8F:6E:37
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/129ff053-6817-4682-9422-3e282012d02b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:2f8c::/46
Signature Algorithm: sha256WithRSAEncryption
c2:2d:7b:5b:d1:d2:71:84:d0:de:f5:c3:b6:4b:d3:ef:85:fa:
fb:6d:6e:ae:60:75:03:bf:35:a0:9f:e6:a8:da:56:95:32:80:
68:a9:fa:ef:e9:d1:ea:39:92:85:79:13:1f:18:40:16:f4:0a:
73:3e:12:a2:af:b2:0b:2e:3d:54:ac:16:15:d2:0d:80:9a:c4:
10:29:ef:d1:8a:6d:6e:e7:1d:26:6c:69:c4:d2:0f:cd:de:06:
c4:ca:cd:3b:a3:b1:ac:c8:78:43:f8:6d:6e:9e:99:6d:1a:41:
c7:d8:68:ab:89:d4:d1:b4:a5:d8:14:79:c9:58:7a:5e:37:2d:
2b:80:00:65:ca:39:c5:7f:3b:fd:c7:cf:ac:53:52:b3:18:b8:
c4:9c:9c:bf:f3:9c:42:86:8d:a4:cf:aa:8d:4e:11:d6:e7:25:
6d:b8:94:c1:ce:6b:76:22:a7:c9:e6:71:d5:35:c2:54:a7:aa:
bd:fd:16:06:40:e4:23:38:da:a0:82:5d:eb:f6:e4:74:50:5a:
49:52:f1:bf:64:b7:31:4a:33:33:bc:72:43:ef:cf:58:96:31:
3c:f4:ee:c7:18:a2:4d:50:f5:44:d7:bb:1e:ba:d3:6d:0d:5b:
c9:70:48:c5:3b:61:03:55:fd:b2:b6:3f:1e:64:22:b4:7d:ab:
4c:79:d0:68
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgITQQjdFYagS1T2iMtf3a9bh4x2IDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1
YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTExMjUxMzQwNDhaFw0yNjAyMjMyMzU5NTla
MHoxSTBHBgNVBAUTQGFiYWI1ZGQwY2QxMjVkYTZhYTM3MGVjNTIwNjMyNmEwYTMz
NWRkN2E5ZWNlMjMxNDFlM2JjYjIzNjBjMDhmZTAxLTArBgNVBAMTJDlmMjMwZmE5
LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK50WYrZrpBsUs9wLFjdRlfk9h41H66QzQCGsDHjWUJdy4ax
UDLjtyydw3L3EYMISTbizXMdIt4s5w47HGVDW/mEFXCMsInG1Ggu3KUwoklahejN
UI2h0r7uxuOkxeEc1aahXMnAwEtvVD1WFRZ/65CRvLcVmaDgE+Jt5VpxebpxjCxy
c3PQPL9bEauyWgs/2jkNvicCjoEEa9vM2qxGRE6qUSkVXrp4OTvGNr1WgpiSx0zK
wHl1xTDnNYW92HLcP7rNlTpaZh/GPPhfvCQL7BhE1mS7pmnGwZu23r8eIjH06izj
40Fe2LCYPZtrdwLmFoF6zr9yFo4s38q8Uq+jk6sCAwEAAaOCArQwggKwMB0GA1Ud
DgQWBBTsuBkydmstv1+BscNAVG/+oo9uNzAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3
oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5
MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw
NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy
YjZlNjA1MDUvMTI5ZmYwNTMtNjgxNy00NjgyLTk0MjItM2UyODIwMTJkMDJiLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt
Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHAiYAkAAvjDANBgkqhkiG9w0BAQsFAAOCAQEAwi17W9HScYTQ3vXDtkvT74X6
+21urmB1A781oJ/mqNpWlTKAaKn67+nR6jmShXkTHxhAFvQKcz4Soq+yCy49VKwW
FdINgJrEECnv0YptbucdJmxpxNIPzd4GxMrNO6OxrMh4Q/htbp6ZbRpBx9hoq4nU
0bSl2BR5yVh6XjctK4AAZco5xX87/cfPrFNSsxi4xJycv/OcQoaNpM+qjU4R1ucl
bbiUwc5rdiKnyeZx1TXCVKeqvf0WBkDkIzjaoIJd6/bkdFBaSVLxv2S3MUozM7xy
Q+/PWJYxPPTuxxiiTVD1RNe7HrrTbQ1byXBIxTthA1X9srY/HmQitH2rTHnQaA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:55:02 2025 by rpki-client