This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e1122b-e590-46ca-8737-991bed4a2254.roa
File: 43e1122b-e590-46ca-8737-991bed4a2254.roa (raw, json)
Hash identifier: bYOWUHvfzxpdHUdmAIlwD/r6bqhT0b9kCE/LP5ej5uQ=
Subject key identifier: CF:54:8F:FF:7C:8F:F3:B8:65:D5:F8:61:D3:68:1A:1C:F0:01:05:AC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07F2CE8B6A30593F2ABAA83A632BD304283D8EE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e1122b-e590-46ca-8737-991bed4a2254.roa
Signing time: Thu 13 Nov 2025 00:20:08 +0000
ROA not before: Thu 13 Nov 2025 00:20:08 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff3:8020::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f2:ce:8b:6a:30:59:3f:2a:ba:a8:3a:63:2b:d3:04:28:3d:8e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:20:08 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=5e1eecf827d576d3bcff4c1450d1b24f6370bf58af99c9370c2e7f3441f4934f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:59:86:15:84:34:3e:da:0e:62:b9:a1:ed:
07:d0:b3:2b:20:cf:a1:6c:3c:73:cb:0c:ac:7d:c6:
12:b2:78:05:24:fe:d7:9f:0a:5a:26:73:23:ee:04:
18:33:ae:2e:f9:16:e0:af:5f:51:06:76:3f:18:a0:
26:83:bf:8c:eb:18:a8:9d:00:74:9d:28:e9:6a:93:
fc:2e:7c:a8:bb:91:34:b4:87:a2:24:19:88:49:9a:
c7:69:ea:8e:76:04:f0:3c:90:cf:ad:f2:8c:3e:84:
b1:8c:68:b1:95:a9:0e:e6:91:25:dc:a4:bc:12:b4:
4c:b7:8c:12:35:62:49:0d:22:4b:14:e9:ed:a9:02:
82:be:77:41:e6:95:92:a9:af:9f:6a:93:46:d9:e3:
7f:bc:8f:3c:dc:8a:51:d3:65:ac:27:7f:44:2c:1d:
56:0d:22:1b:be:54:5a:b5:11:2d:44:d8:b7:6d:f5:
fb:4b:11:81:ad:5c:d4:48:d7:b4:d0:57:a1:49:84:
db:63:e9:5d:50:e8:d5:2a:3d:3f:68:b2:ca:cf:b4:
19:50:fa:45:29:d8:db:17:a2:5f:95:f5:11:65:f2:
25:fd:d5:62:f0:dd:3a:eb:23:10:fb:b9:1b:22:be:
05:bf:62:33:28:1d:7d:1f:40:75:c2:eb:13:20:18:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:54:8F:FF:7C:8F:F3:B8:65:D5:F8:61:D3:68:1A:1C:F0:01:05:AC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e1122b-e590-46ca-8737-991bed4a2254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:8020::/46
Signature Algorithm: sha256WithRSAEncryption
72:bd:6d:4d:ed:74:9e:0f:f2:0d:00:13:e7:dc:6c:8b:7f:67:
86:60:46:2c:e3:4c:68:ae:27:d9:fe:25:4c:b1:93:52:c5:12:
2e:63:c1:b4:e3:17:57:b6:7e:f3:b2:f6:52:09:e6:de:fa:83:
de:3e:d4:ed:5b:fd:fd:22:fd:80:f3:52:86:28:bb:87:ce:75:
5c:cf:20:19:37:75:ee:c0:ca:65:e3:0f:8f:41:4e:ca:75:60:
fc:52:37:d2:db:c8:27:f4:66:08:7d:30:53:91:58:19:12:1a:
10:27:db:ad:ec:00:a3:b3:66:b7:9d:0a:50:09:9b:6c:98:21:
ee:ee:f2:8e:3e:8b:a9:3c:a5:63:72:bc:88:92:9b:07:77:01:
33:fa:1d:a9:96:9e:4d:6d:d6:f6:67:5f:3d:a7:66:de:70:c2:
fe:a9:1e:9a:ef:72:7d:3b:a8:f3:0d:3f:05:b1:b8:16:5d:f8:
e1:72:81:21:ab:33:e1:c0:b4:4b:1c:02:82:8b:ca:7d:52:7f:
f1:4e:86:a2:71:8b:be:1c:25:a8:6f:8e:6b:b4:4d:46:55:d8:
cd:46:3e:e1:46:73:31:85:df:6d:7e:96:c2:28:83:51:e9:28:
03:95:a6:7d:c5:ca:4a:24:67:b3:c7:a7:40:d6:63:30:47:6f:
c9:11:7c:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:35:06 2025 by rpki-client