This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc8cd6b8-3c99-4012-820e-e55b0a7ef364.roa
File: cc8cd6b8-3c99-4012-820e-e55b0a7ef364.roa (raw, json)
Hash identifier: cbxsIOlR+FlKxvzpTDvTvVKmHbVzdi6jSXab/D+z+lw=
Subject key identifier: 38:AD:52:03:CE:2D:ED:52:F5:4D:69:44:73:B4:45:6C:58:57:8E:3E
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 6403DF6B633EA5B17A7A26E66E0C988EC6D15C87
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc8cd6b8-3c99-4012-820e-e55b0a7ef364.roa
Signing time: Tue 25 Nov 2025 14:21:32 +0000
ROA not before: Tue 25 Nov 2025 14:21:32 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:9000:3cd0::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:03:df:6b:63:3e:a5:b1:7a:7a:26:e6:6e:0c:98:8e:c6:d1:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Nov 25 14:21:32 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=42c38516a624bf26a5f73cda0d4b7f4ce01d3fea0030558ae555cf66209684b6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:9b:f6:b2:d7:b2:5e:c8:a9:0b:18:f4:e6:
43:49:11:b5:a7:65:50:d8:9b:e5:53:79:d6:ab:aa:
2b:13:74:e5:c6:72:51:45:70:7c:5b:da:cb:c1:22:
eb:ed:7e:5f:5d:33:42:70:7b:f1:9c:1c:c4:34:5c:
2b:00:1a:53:69:59:21:5b:aa:b7:93:a6:b7:89:72:
9d:4d:8c:74:a9:25:1c:05:be:ed:1e:da:6c:35:a7:
96:7c:2d:ee:11:93:71:b1:76:a6:32:ca:f4:96:0b:
f8:97:a3:52:56:04:44:aa:b2:b2:a4:be:b2:34:32:
3d:6f:44:a3:be:8e:f0:c5:ef:69:fe:11:8a:02:0c:
64:87:a7:e0:fd:86:05:91:53:7a:65:8e:1a:9c:09:
aa:4d:d9:f8:62:e5:dd:e0:90:65:1b:37:48:ab:60:
be:32:00:1d:20:1b:8f:4a:82:c9:d5:15:25:c7:fc:
0f:20:cf:fe:6c:d7:2e:de:6d:0d:1a:ed:ba:d5:9e:
7f:a3:4c:08:5e:ba:79:06:e4:cd:15:dd:3a:1d:ca:
b6:a1:1d:4e:fc:25:0e:1a:59:2d:34:9d:ed:51:93:
f0:fa:c6:4b:25:a6:c3:e8:db:68:24:8d:64:04:3d:
7d:00:21:f8:80:29:11:ab:ad:3b:35:35:90:5c:4b:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AD:52:03:CE:2D:ED:52:F5:4D:69:44:73:B4:45:6C:58:57:8E:3E
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc8cd6b8-3c99-4012-820e-e55b0a7ef364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:9000:3cd0::/47
Signature Algorithm: sha256WithRSAEncryption
68:8e:cc:41:15:2d:b0:53:2f:3b:ff:60:66:f1:c5:61:b1:79:
a6:f5:c9:4a:40:62:31:6b:87:0a:66:40:4e:ab:9c:fe:16:b5:
09:8b:42:f8:29:ca:6e:84:43:65:8c:f7:bf:35:a4:3b:97:72:
14:33:4b:7d:41:0d:9e:99:5f:7c:56:43:5d:65:4f:9a:f0:24:
94:f7:50:39:1a:60:5e:bd:2a:c6:34:dc:8d:da:af:ac:4d:53:
29:b8:2c:ec:05:7a:fb:9a:8d:5f:97:0a:0c:7d:8b:89:c8:26:
d9:17:97:fe:f1:c1:d4:24:27:07:05:d7:07:35:6e:69:96:32:
a2:d4:d2:b8:f7:a3:2f:d2:33:ac:09:dc:7a:97:05:b4:74:c6:
dc:10:d4:84:a8:bd:bc:1b:77:5c:00:cb:3e:0e:21:a2:e9:b3:
37:c1:5d:ec:b3:6e:c7:ed:6e:0d:4b:50:9d:d5:76:42:45:81:
8a:f4:02:f6:56:b3:68:b1:e8:68:5c:ed:cb:ba:4c:34:f4:f9:
9c:63:60:6f:b4:c5:75:ba:03:e4:ae:5f:e1:a5:ac:38:ad:d8:
b6:d4:eb:42:ae:98:48:88:ed:45:99:66:85:18:af:ae:ad:69:
42:e8:1a:26:8a:ef:56:bb:f1:3d:ba:df:33:47:a5:cc:d7:97:
e9:8f:b1:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:45:49 2025 by rpki-client