This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3443350d-05bd-40a4-922d-986158aae51c.roa
File: 3443350d-05bd-40a4-922d-986158aae51c.roa (raw, json)
Hash identifier: LjZD7Cp5Lr80mYRqYtqn8E0szn2L46I2UWVbJJsfs+g=
Subject key identifier: FD:F7:4D:24:30:46:10:BB:C9:54:4D:02:54:0F:08:BA:C7:D9:A7:AD
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 1ED4BB4007512273A016D0F4F19321200835E159
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3443350d-05bd-40a4-922d-986158aae51c.roa
Signing time: Mon 24 Nov 2025 02:52:08 +0000
ROA not before: Mon 24 Nov 2025 02:52:08 +0000
ROA not after: Sun 22 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:1f14::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d4:bb:40:07:51:22:73:a0:16:d0:f4:f1:93:21:20:08:35:e1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Nov 24 02:52:08 2025 GMT
Not After : Feb 22 23:59:59 2026 GMT
Subject: serialNumber=e087e87c37a421306734306e9b8de24328a197232363038b713d66e6769b720b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:3b:fb:85:06:41:d9:c1:2c:96:48:a9:3b:
b8:f8:c4:84:79:ee:c4:4e:f8:6e:ba:ec:3c:f4:37:
f2:79:bb:4a:e1:bb:d8:ca:ff:19:39:58:72:e0:72:
2e:ee:3d:66:80:9f:bb:34:77:56:e6:06:2a:4e:71:
ab:fa:be:3f:67:92:9b:0b:74:ee:75:e1:00:89:83:
ad:8e:05:ad:b6:ef:cb:ce:e6:46:3c:bd:6e:9e:72:
78:e2:a6:6d:39:fe:fe:7e:26:0a:5e:bc:86:58:d4:
b7:0d:cf:65:db:dd:60:55:60:eb:ac:85:3d:f4:62:
1e:c9:c6:af:26:8b:66:14:73:0a:ba:26:f5:2c:16:
b3:05:9f:65:3b:e9:5f:37:2a:63:b6:c4:ab:ec:ab:
8a:f6:ec:75:32:d8:95:80:22:58:59:72:71:c6:72:
25:0a:cd:25:b3:dc:8f:2d:77:b7:7c:6d:63:e9:ea:
9d:ef:99:91:c7:78:52:c4:d7:e3:bc:92:0c:33:d5:
20:f1:c8:6a:03:37:40:b4:1f:e3:de:44:70:94:f5:
a2:a8:72:09:86:d2:2e:d8:97:47:a9:42:28:6f:ad:
b9:37:55:18:72:2a:fc:53:91:69:07:c2:95:5d:12:
83:2a:72:8d:b5:ac:df:01:97:86:73:ec:a7:56:3b:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:4D:24:30:46:10:BB:C9:54:4D:02:54:0F:08:BA:C7:D9:A7:AD
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3443350d-05bd-40a4-922d-986158aae51c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:1f14::/47
Signature Algorithm: sha256WithRSAEncryption
12:36:b2:dd:17:17:b7:e0:13:0a:a6:52:11:47:d7:4f:2d:ac:
c7:56:56:6a:a0:e8:d7:cc:eb:59:44:25:ec:ff:40:4d:90:42:
b3:27:1f:0c:a3:79:4e:94:af:58:23:de:2f:74:5c:aa:16:92:
7a:34:4a:6b:02:ab:49:f1:a6:95:fa:ad:57:55:74:7e:54:19:
88:bc:c6:75:62:39:bf:ec:4a:d8:66:9d:46:20:01:d5:ce:11:
f0:0d:d0:c4:6c:3f:d0:5b:0e:ce:0b:0f:fd:32:d8:17:3c:fb:
a6:45:6c:1f:87:ae:a4:bc:c7:15:30:fd:93:ee:be:1c:7e:d8:
3d:94:db:e1:87:a0:ab:1c:81:da:dd:b0:e1:cb:53:97:ba:c2:
b6:9c:51:cb:12:93:4c:6d:a9:1f:9e:06:2a:c8:08:42:8f:00:
e7:be:ca:aa:86:36:75:05:9a:24:ac:00:73:03:91:07:05:fb:
0d:df:fa:54:f5:7b:b1:9d:ac:79:b5:cc:57:96:c3:96:6f:8b:
86:df:10:42:86:4a:d1:4d:5f:d8:2f:61:74:5e:6d:c0:bb:31:
a4:74:07:82:f0:4d:5e:bd:81:70:05:f5:a6:6b:ef:c6:bb:8d:
bb:93:0e:bb:2d:a3:c3:8f:f3:30:e7:69:aa:3c:42:87:08:5d:
77:d4:f5:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:51:38 2025 by rpki-client