This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a38998ad-414a-46f1-b26f-6f47ac7f2cd1.roa
File: a38998ad-414a-46f1-b26f-6f47ac7f2cd1.roa (raw, json)
Hash identifier: eDYkd9Ee4sjFVai/cnf0XfHGbo6dEa+PE4SafeIZv/E=
Subject key identifier: 84:A5:0C:68:3F:DF:32:FD:13:10:BA:1A:49:A0:21:CF:A4:99:5A:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 122BB69FA6E7C509C8A86C3F7CE2C0D6F281F145
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a38998ad-414a-46f1-b26f-6f47ac7f2cd1.roa
Signing time: Tue 13 Jan 2026 19:53:12 +0000
ROA not before: Tue 13 Jan 2026 19:53:12 +0000
ROA not after: Mon 13 Apr 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:4020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 18 Jan 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:2b:b6:9f:a6:e7:c5:09:c8:a8:6c:3f:7c:e2:c0:d6:f2:81:f1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 13 19:53:12 2026 GMT
Not After : Apr 13 23:59:59 2026 GMT
Subject: serialNumber=808c6e273df4b57f6e5a26f70d98cd8e5c426acac3ca3f13894001a46b57c1fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:fd:6e:bb:5b:6b:cb:4f:7f:0f:84:28:a4:
36:3c:31:73:1a:2c:b4:63:a5:37:da:fb:03:4b:05:
42:02:c6:08:a0:85:a3:02:be:b0:b3:d2:ec:ff:95:
85:bf:e5:ba:6a:b5:86:96:8c:85:38:8d:c6:e8:c3:
9d:fa:6d:a8:71:37:74:2f:fd:5e:d9:b6:3b:85:4b:
99:4e:f3:68:cb:d6:d9:7b:5b:ed:e1:11:8e:13:29:
40:58:44:f4:8e:b7:ad:90:53:a4:a7:72:47:5c:d3:
08:bc:1c:e5:03:00:ba:55:8f:40:95:c7:ba:6f:e9:
ad:cf:29:8f:46:04:4b:9e:24:e0:de:9b:38:eb:cd:
61:14:c9:49:21:b8:bf:be:ca:a8:98:36:b0:cc:fd:
f7:05:36:9d:4e:67:e8:3c:7f:ef:5a:f4:b9:1d:f0:
22:60:22:28:b7:3f:c5:34:2f:a5:7c:7c:f2:33:a1:
88:b4:0d:4a:a0:4f:3b:26:bb:53:6e:d8:c0:d7:27:
49:36:89:94:6c:cc:93:29:6f:77:5c:fc:ab:0a:23:
9d:24:5f:dd:c5:ae:bb:b0:8b:28:df:de:12:86:ab:
db:31:8f:ff:ee:bf:f4:78:2a:e8:37:c6:30:db:23:
6b:99:8d:87:e6:dd:a6:cd:87:2a:82:b8:43:cf:3f:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:0C:68:3F:DF:32:FD:13:10:BA:1A:49:A0:21:CF:A4:99:5A:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a38998ad-414a-46f1-b26f-6f47ac7f2cd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:4020::/48
Signature Algorithm: sha256WithRSAEncryption
0f:9a:b5:52:2e:e6:38:19:4d:11:9e:ed:9f:23:9f:ac:fe:25:
9a:39:00:c0:61:fe:b3:3b:67:2c:e4:9d:51:c6:67:67:01:d4:
dc:96:49:c5:9b:f6:e4:76:90:37:97:8b:7a:a5:02:69:8c:8e:
5a:39:40:0e:d7:7d:5e:03:24:42:13:76:29:31:99:a6:c3:3e:
1c:94:30:bc:a3:ec:b5:41:8c:0f:88:6a:c4:43:d1:49:df:bc:
5b:4b:60:72:e9:dc:16:e5:43:5f:29:eb:11:26:42:c2:18:6a:
5c:24:36:7d:65:dc:23:8a:21:4c:72:af:83:d9:4f:3c:4a:93:
45:41:24:2d:27:43:9e:e4:37:89:f5:c3:17:92:d3:7c:b7:7a:
36:69:be:0c:25:38:ed:c4:e4:59:87:4f:44:ef:40:71:c1:ff:
a8:83:97:a7:05:76:cf:d5:04:7c:e5:61:e9:6e:9f:e4:4a:39:
59:96:40:19:d8:65:3d:78:39:4b:74:35:0c:57:12:ee:9a:42:
62:46:bd:19:fb:8c:4d:b4:39:ab:9c:79:a8:c4:0f:64:f6:f5:
e9:f6:5b:61:cc:52:4b:79:01:6b:f2:97:5a:cc:a0:ac:7b:e3:
47:16:40:fa:97:3b:7b:c3:ea:09:dc:cb:51:48:46:5c:f0:51:
6b:c3:77:77
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEiu2n6bnxQnIqGw/fOLA1vKB8UUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMTEzMTk1MzEyWhcNMjYwNDEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4MDhjNmUyNzNkZjRiNTdmNmU1YTI2ZjcwZDk4Y2Q4ZTVj
NDI2YWNhYzNjYTNmMTM4OTQwMDFhNDZiNTdjMWZjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDUnf1uu1try09/D4QopDY8MXMaLLRjpTfa+wNLBUICxgig
haMCvrCz0uz/lYW/5bpqtYaWjIU4jcbow536bahxN3Qv/V7ZtjuFS5lO82jL1tl7
W+3hEY4TKUBYRPSOt62QU6Snckdc0wi8HOUDALpVj0CVx7pv6a3PKY9GBEueJODe
mzjrzWEUyUkhuL++yqiYNrDM/fcFNp1OZ+g8f+9a9Lkd8CJgIii3P8U0L6V8fPIz
oYi0DUqgTzsmu1Nu2MDXJ0k2iZRszJMpb3dc/KsKI50kX93Frruwiyjf3hKGq9sx
j//uv/R4Kug3xjDbI2uZjYfm3abNhyqCuEPPP5gPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUhKUMaD/fMv0TELoaSaAhz6SZWrMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzODk5OGFkLTQxNGEtNDZmMS1iMjZmLTZmNDdhYzdmMmNkMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/rQCAwDQYJKoZIhvcNAQELBQADggEBAA+atVIu5jgZTRGe7Z8jn6z+
JZo5AMBh/rM7ZyzknVHGZ2cB1NyWScWb9uR2kDeXi3qlAmmMjlo5QA7XfV4DJEIT
dikxmabDPhyUMLyj7LVBjA+IasRD0UnfvFtLYHLp3BblQ18p6xEmQsIYalwkNn1l
3COKIUxyr4PZTzxKk0VBJC0nQ57kN4n1wxeS03y3ejZpvgwlOO3E5FmHT0TvQHHB
/6iDl6cFds/VBHzlYelun+RKOVmWQBnYZT14OUt0NQxXEu6aQmJGvRn7jE20Oauc
eajED2T29en2W2HMUkt5AWvyl1rMoKx740cWQPqXO3vD6gncy1FIRlzwUWvDd3c=
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:45:59 2026 by rpki-client