This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa
File: 8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa (raw, json)
Hash identifier: x9Zp4yEeFRJ6eNSJCSlUqf9zxPuEWZqMH2MqIvpFyIc=
Subject key identifier: 7A:37:F6:4B:35:80:48:88:A5:9B:3B:37:B0:5A:DA:CD:B5:56:18:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F41E1DB2FA8A8EE9BBFACF72A12196BA0C55EBF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa
Signing time: Tue 11 Nov 2025 01:30:12 +0000
ROA not before: Tue 11 Nov 2025 01:30:12 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f38:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:41:e1:db:2f:a8:a8:ee:9b:bf:ac:f7:2a:12:19:6b:a0:c5:5e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 01:30:12 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=3abf0c6ad13ef083d43041bc341b66de6ba183e522a496faf88d7190e7776b49, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:d7:0c:29:5d:10:d0:1d:a8:d6:07:14:30:
bb:cb:b7:ab:9c:a0:86:6e:bc:13:e8:63:ca:e0:af:
4e:e4:20:ff:5c:e1:10:c0:e3:1d:b0:54:a5:fd:5e:
6e:d7:b0:a7:a6:0a:cf:35:90:e8:1b:fa:69:30:b2:
c9:22:34:ca:ba:49:7a:af:07:45:03:83:9c:b5:17:
9d:14:e1:3b:d9:c7:e5:19:e5:33:2f:f2:9d:78:2d:
fd:2f:2b:d9:ed:db:73:9c:fa:de:63:ad:a3:ee:e1:
ce:30:d4:01:eb:73:51:05:41:5a:83:3d:57:31:17:
3e:cf:66:7f:13:7a:4d:1c:39:52:61:ce:d0:cf:44:
b4:ae:28:c9:b1:97:b0:10:08:af:84:36:ca:fc:3e:
f0:1c:2d:1b:02:99:94:af:9e:89:91:12:2a:a9:9f:
5a:65:64:7a:1a:f6:3b:a1:8f:40:17:2a:49:40:f6:
3c:c3:93:74:75:99:5c:1f:b0:01:a6:2a:70:94:b2:
4f:8f:3d:45:29:4d:52:87:6d:ee:35:fd:d6:61:18:
3d:c1:2e:5f:3a:99:14:99:0c:00:73:59:f3:27:4e:
96:c1:46:5c:7c:83:f0:ec:eb:7c:54:61:24:d8:aa:
09:de:7a:58:6c:93:bc:4d:eb:0c:13:a9:3e:a2:5a:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:F6:4B:35:80:48:88:A5:9B:3B:37:B0:5A:DA:CD:B5:56:18:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:5000::/40
Signature Algorithm: sha256WithRSAEncryption
b9:06:67:2f:cd:7b:93:97:09:51:a7:b7:43:75:74:89:c4:16:
db:80:58:d0:1b:76:40:08:bc:c4:95:a2:12:1f:96:9e:75:41:
42:24:8b:df:c4:57:53:f7:6a:cf:cc:a2:d7:01:1a:c2:c0:e3:
09:1c:be:75:91:10:9a:f0:e5:a7:55:a5:09:0b:2d:f0:5d:f3:
f5:d7:c9:b5:a0:a4:2b:1d:ba:50:1a:b0:c1:7e:e8:ba:e7:58:
b6:a0:ba:82:7c:8a:28:c8:2d:98:90:1a:83:79:d8:ed:9b:f4:
6e:0a:52:f3:32:a6:1b:6d:25:3f:77:28:8f:39:22:a0:76:63:
fd:a6:33:e6:32:b8:f3:14:0c:2f:0e:24:47:5e:59:85:4d:f9:
76:8a:d9:f0:f8:8b:92:b2:f0:90:62:84:99:b9:54:c2:97:d9:
08:5e:08:f7:bd:92:48:11:86:05:da:97:76:9c:b2:70:ca:7b:
e4:e1:e8:ba:44:04:63:3b:db:0e:2b:2b:fd:2c:86:19:09:1a:
05:eb:ac:b4:22:79:a3:54:33:fe:59:4d:24:44:5c:f6:cc:e8:
e1:5c:92:75:5c:33:ec:ed:87:27:45:05:3d:0c:c5:81:86:c1:
72:ad:46:0d:bb:76:8c:31:59:3c:70:28:64:4a:bc:1f:36:74:
f1:68:6e:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:34:38 2025 by rpki-client