This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/796c70f8-9f34-44b3-8a4b-26d8a656fe19.roa
File: 796c70f8-9f34-44b3-8a4b-26d8a656fe19.roa (raw, json)
Hash identifier: kj0HruHy06gJ1ZIrXUTNzynn9WWePzRzN7yghrkNVYY=
Subject key identifier: 95:1B:AB:79:11:1D:0B:9C:64:2A:D7:F8:D2:A9:0A:E4:84:2D:27:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53296EF6BA5A401CA387C20E86794FA097F9A6F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/796c70f8-9f34-44b3-8a4b-26d8a656fe19.roa
Signing time: Sun 07 Dec 2025 02:30:18 +0000
ROA not before: Sun 07 Dec 2025 02:30:18 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f68:7400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:29:6e:f6:ba:5a:40:1c:a3:87:c2:0e:86:79:4f:a0:97:f9:a6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 7 02:30:18 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=5dbd553b7839c103dba597a1ddfffeddfc659291b98e04e72b8f4752f38661cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:06:00:5d:dd:6c:09:46:29:85:22:18:28:2e:
70:6f:6b:18:e7:6c:1f:66:94:fb:65:8e:b8:aa:5a:
49:a7:3c:1b:6f:c7:47:12:48:3a:6f:91:cc:57:19:
0a:76:23:c6:d1:3a:5b:0d:f3:b9:f3:ea:74:34:cb:
d4:46:6a:b2:e7:d4:f5:5b:bc:a0:2e:78:96:84:93:
2a:fb:d5:d4:c5:e3:e7:66:65:07:af:be:1b:fc:20:
0a:28:b5:8f:7f:54:8d:88:12:36:b3:60:47:a0:0a:
82:a4:79:d6:72:7c:30:5b:6c:dc:a4:ba:6a:c8:bb:
f2:bb:3d:59:ac:b4:ad:f3:1d:2d:4a:e3:c4:0e:10:
db:36:d5:52:65:fd:76:5e:ba:bc:44:e0:85:2d:4c:
dc:c0:b1:f6:57:ff:da:aa:70:e2:95:4a:9e:07:31:
da:2d:dc:e3:3d:b4:13:bd:0f:76:b7:66:74:ec:ca:
5f:76:dd:88:f8:02:ea:15:8b:88:db:23:88:a8:b0:
b7:af:29:21:2c:c7:3e:c1:8b:c2:8b:07:0a:05:e8:
60:b1:9b:42:a5:cd:a5:bc:2a:f6:bb:82:86:57:29:
d5:7b:47:c9:b6:55:a0:34:44:27:c5:40:bd:52:53:
1c:23:3e:82:37:89:cc:13:ac:15:dc:fc:16:44:6c:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:AB:79:11:1D:0B:9C:64:2A:D7:F8:D2:A9:0A:E4:84:2D:27:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/796c70f8-9f34-44b3-8a4b-26d8a656fe19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f68:7400::/40
Signature Algorithm: sha256WithRSAEncryption
d4:78:82:75:d6:f7:06:8c:cf:82:a8:44:55:21:b9:b8:22:77:
ca:4d:e8:92:14:11:0d:3f:48:0d:ce:ee:0b:aa:96:f3:ae:8c:
ed:7a:1d:61:26:7f:d6:70:b6:ed:19:ae:01:0b:1e:70:ae:cd:
50:e4:d4:2f:28:8f:ff:4f:b1:b9:ad:3a:6a:67:cf:d7:13:4f:
06:c7:da:c3:66:d5:78:3f:6e:30:f9:f6:b0:a9:75:dc:b2:a1:
2d:37:15:94:b1:8b:50:2b:66:20:62:02:28:84:a9:3b:09:99:
2a:75:7d:a2:21:f0:4f:d2:52:14:9d:4d:df:1e:5c:07:07:bd:
8e:12:ee:b7:70:8e:31:27:3a:c1:87:f2:18:d4:49:45:51:da:
ee:1d:4e:49:ea:21:3b:39:e9:eb:c4:2e:b3:8c:36:f3:63:08:
48:63:04:9f:65:c6:ee:01:a1:bf:5f:18:0b:c6:01:5f:43:ea:
6c:d7:6a:7f:b4:a9:8c:e4:f3:2a:a9:a2:31:3f:37:72:63:0e:
95:eb:b5:ab:c5:8f:3d:89:80:43:b1:bf:b0:19:ed:6f:d6:0b:
58:c4:14:98:25:4d:7e:94:47:dc:a7:8b:8f:b9:fb:68:77:57:
11:2b:28:9a:9d:a1:d9:2c:5c:6a:3c:ec:0d:bd:1f:43:9f:05:
9b:70:02:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 13:15:44 2025 by rpki-client