This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/970acb70-4ce4-4afa-9c6d-7d9c4c063699.roa
File: 970acb70-4ce4-4afa-9c6d-7d9c4c063699.roa (raw, json)
Hash identifier: 1y+Bv477zuNyJopOIVdG0oCXQrUiO2flLxp1W5Hz5vU=
Subject key identifier: BB:70:9B:29:FF:EE:3E:69:4B:47:39:0E:B5:5D:89:54:00:DC:22:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 496B05FEF71C8DDF74E972C1B837AD47E17CEEA4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/970acb70-4ce4-4afa-9c6d-7d9c4c063699.roa
Signing time: Wed 10 Dec 2025 00:21:03 +0000
ROA not before: Wed 10 Dec 2025 00:21:03 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.254.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6b:05:fe:f7:1c:8d:df:74:e9:72:c1:b8:37:ad:47:e1:7c:ee:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 10 00:21:03 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=76758d35b0b21b5b12d885f7b4c301e6a079552357d74002bf4220f42e89bfb1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:35:35:e7:b2:e8:eb:73:95:17:2d:c5:73:
86:61:17:a2:ff:2c:a7:92:47:71:ba:a5:34:1c:65:
5f:3b:23:5b:17:84:c5:64:97:ee:3d:d2:94:6f:a2:
d8:0d:35:ed:c8:e2:52:b0:c5:27:b9:5e:fb:48:a4:
09:bb:f5:2e:65:bb:b4:db:cf:13:d8:0c:eb:14:f0:
05:fd:b4:eb:7f:41:65:4b:f8:cc:df:aa:4b:75:53:
c4:b0:2e:49:fb:41:29:dd:2b:35:e7:a4:0e:f4:1b:
41:45:ef:0d:28:5b:12:b8:35:94:01:59:af:7a:27:
96:1f:18:fd:ac:87:d1:fd:77:23:d1:b3:c3:33:a6:
fe:f5:d3:8f:e5:30:a1:be:28:fb:69:a5:ba:3d:27:
80:f2:d6:93:89:a7:13:dd:6e:b9:03:a0:15:a0:83:
3d:bf:0a:29:68:3e:4f:c8:bc:b9:f5:15:49:7d:34:
1c:b0:77:8a:06:0d:06:31:17:c2:c4:87:50:82:9d:
39:71:8a:a5:59:77:ec:88:87:f3:45:a2:22:cf:bc:
79:49:ea:3a:67:e2:ac:d1:c7:b6:db:7e:69:82:d6:
f3:26:27:34:fd:e4:70:93:ad:46:53:b2:33:d2:1d:
b1:5c:ec:a9:4e:b1:0b:2a:db:65:80:73:f9:2a:9f:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:9B:29:FF:EE:3E:69:4B:47:39:0E:B5:5D:89:54:00:DC:22:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/970acb70-4ce4-4afa-9c6d-7d9c4c063699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.254.24.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bd:48:6d:95:90:22:f1:b7:ae:e9:60:cc:e8:19:7e:3e:f3:
17:dd:22:4c:b4:82:77:cf:b4:c3:99:65:35:59:51:06:cb:16:
a4:ab:85:21:ca:a5:61:0b:ae:cc:9b:cd:c7:f3:aa:13:cb:cb:
2c:b4:ab:75:f5:e7:99:1c:b2:ed:bc:ec:30:15:10:39:49:9e:
e2:dc:07:d7:64:04:ac:ea:7d:92:78:aa:d8:84:a3:5c:b9:47:
0e:3f:ec:cc:da:fc:a9:66:8d:8d:9a:c2:7a:8f:d8:ab:db:b7:
b8:68:0a:41:38:dd:07:a0:80:04:42:b2:34:da:96:6e:cb:0f:
98:cb:a7:d7:ad:55:8e:3a:c1:6f:b3:17:47:d4:bc:14:73:97:
b8:5e:77:76:87:b2:20:70:82:8b:ab:1c:86:51:d1:c5:75:a9:
af:d2:a2:bd:f0:bd:fc:c7:3d:c1:ed:c1:a5:65:fa:35:79:37:
22:c1:51:a5:ab:b0:4b:6b:17:8f:9b:cf:dd:67:37:b1:19:0a:
a6:fc:d9:f9:ec:73:02:27:54:9a:e0:d8:89:d3:62:65:60:88:
88:82:c2:6d:12:aa:f7:ab:05:69:12:b5:2e:61:4a:c8:fa:ca:
e2:5a:a1:9b:ec:6e:2b:19:fb:78:2f:b0:41:44:4d:78:a3:18:
e1:25:18:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:53:09 2025 by rpki-client