This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa
File: 3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa (raw, json)
Hash identifier: RwgZjTwpZCeUNX0lfQBPReRimP8GuwP+HiLPCDqUoeg=
Subject key identifier: E2:1D:60:A9:26:8D:B8:30:EB:32:62:FE:6B:40:18:76:D4:E2:38:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F2F225F96E88BBB826B94D34DE537B6054AB830
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa
Signing time: Mon 08 Dec 2025 00:10:42 +0000
ROA not before: Mon 08 Dec 2025 00:10:42 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:8060::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2f:22:5f:96:e8:8b:bb:82:6b:94:d3:4d:e5:37:b6:05:4a:b8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 8 00:10:42 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=8f7ef960f2e42d4497b04eef116d9f358b5afb49eb638a882e5fc5b075b807bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:fb:20:65:1a:d1:ee:34:f1:76:76:4b:2f:
e8:0a:ff:f8:c8:d8:2b:5e:7f:5b:20:eb:b7:d3:04:
67:bf:4c:04:bb:16:77:2e:7a:1f:fd:6f:57:44:29:
b4:ba:7c:22:9d:db:70:0d:26:61:4e:a5:3a:9b:1c:
a1:23:c1:c1:75:a3:8a:9c:f1:da:a3:17:c4:91:99:
61:2b:40:f3:ec:4f:78:5d:9f:5f:7b:60:c2:8a:b3:
ce:3b:7b:79:b5:4a:4b:a4:3d:f7:db:f9:8d:4b:dc:
1a:55:70:5f:52:21:37:a8:2b:01:71:f5:99:04:44:
06:61:d4:77:a2:f5:fd:9d:3f:8d:8f:a8:21:8d:73:
7f:bf:ba:b9:ee:1b:6b:86:62:92:09:95:44:76:70:
13:af:0e:90:2b:86:8d:b0:9d:e2:a6:22:08:52:02:
50:86:22:80:2a:9e:bb:24:d6:75:78:3b:ef:4e:da:
8f:2d:bf:5e:b9:de:68:88:aa:44:da:f7:89:05:d8:
27:38:e5:55:cd:6e:40:d4:cb:6e:73:55:26:a7:d4:
36:57:0a:30:89:15:a7:1a:c2:c4:23:33:96:9f:be:
d7:f2:b7:e0:37:5c:82:9e:88:9d:f3:5f:d3:3d:35:
1c:6f:11:26:f7:96:c3:e7:87:c3:91:35:60:c0:26:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1D:60:A9:26:8D:B8:30:EB:32:62:FE:6B:40:18:76:D4:E2:38:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3be2c317-0f0c-41ce-ab95-2faad6db3ac5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:8060::/46
Signature Algorithm: sha256WithRSAEncryption
86:b5:e3:a6:fc:7b:46:a8:4d:6b:e2:1a:7e:87:96:39:03:d9:
07:a6:53:26:32:35:1e:92:d1:27:09:1c:c7:5d:53:a5:bf:e8:
9d:06:59:b8:1c:74:f9:19:dd:e2:bd:e8:2d:ee:6c:16:c1:b7:
43:b8:74:e9:df:c4:f5:7a:34:6e:44:81:1e:a8:78:83:de:76:
81:4b:4b:57:9e:87:14:ff:2f:05:dd:1e:93:ea:44:43:94:4f:
7b:e9:4f:34:38:6b:d7:f7:1a:cb:93:75:16:81:28:ad:8d:58:
91:4f:cf:9d:a0:98:27:68:7b:6f:8f:94:cb:2b:ef:b3:9f:9a:
a3:89:b5:36:16:9a:45:c5:8d:a1:eb:d9:5c:c4:18:b8:38:a0:
06:0c:1c:54:d4:06:15:92:63:5a:a3:0f:3c:95:bb:14:c0:30:
6a:1c:b1:ad:01:bf:37:53:38:f6:62:3e:3a:f5:36:1f:ec:f7:
f7:2f:b2:93:19:fb:e7:56:d4:04:9b:d3:28:0c:9a:aa:5c:98:
c4:4d:d6:3c:54:de:f3:52:f4:c7:26:a7:5e:25:c1:80:df:03:
0c:df:4e:1d:7a:c7:99:49:d9:6e:91:28:63:87:9f:05:a1:26:
46:3f:2a:f7:17:04:61:ab:1a:da:e8:4c:19:dc:57:ee:25:63:
5c:d7:b6:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:34:01 2025 by rpki-client