This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ddc80aa-0195-4e0c-9e2d-7a55f1213d16.roa
File: 9ddc80aa-0195-4e0c-9e2d-7a55f1213d16.roa (raw, json)
Hash identifier: 5sGolhv/lfhJu0PO2N/EGjns0/KkOgluHIcv79uOTfU=
Subject key identifier: C9:07:10:3E:7A:1C:F1:D6:3E:0E:02:BD:65:8E:38:D2:F4:84:FC:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71B808A475399DB39860D559ECCABD48F2EC56E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ddc80aa-0195-4e0c-9e2d-7a55f1213d16.roa
Signing time: Sun 23 Nov 2025 00:40:37 +0000
ROA not before: Sun 23 Nov 2025 00:40:37 +0000
ROA not after: Sat 21 Feb 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1fea:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b8:08:a4:75:39:9d:b3:98:60:d5:59:ec:ca:bd:48:f2:ec:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 23 00:40:37 2025 GMT
Not After : Feb 21 23:59:59 2026 GMT
Subject: serialNumber=91b39d659328943feb5d1a484f3e7ad089f650995bc398662edba0b2ae85ccc6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:f1:b0:b3:e2:48:fc:01:15:4b:83:4d:bf:
0c:9e:3d:e8:84:e1:68:aa:65:a4:f2:88:e3:7f:17:
86:6c:5c:1c:ed:64:5a:1e:e1:d1:5f:d7:7f:89:f5:
a5:63:73:66:c9:1a:a8:9f:b2:57:41:84:c3:33:21:
7f:89:db:77:f0:1c:36:82:33:43:ca:18:ff:0c:b4:
14:0a:dc:f1:fc:c3:e4:50:c4:b9:a9:83:6d:cf:1b:
d5:86:ef:e6:0e:64:f7:c3:d7:a2:c5:86:dd:8c:fb:
6d:59:0a:0b:51:9a:17:c7:ab:af:30:da:e5:61:79:
6a:b0:8a:7c:27:14:b1:3c:04:46:ec:cf:94:3e:f3:
c2:6a:f0:b3:5a:aa:47:3b:a2:ce:5f:96:14:43:c4:
8d:2a:cc:56:94:0e:9b:90:b5:a2:f7:08:2e:d2:b3:
f4:e1:ff:68:81:72:91:4b:89:7e:da:f6:e6:94:32:
65:e1:e8:e7:36:f4:0c:bf:6e:37:86:0c:65:85:1e:
4a:c5:10:01:a1:aa:d3:5c:ee:db:55:4c:f7:5b:36:
42:21:f2:dd:a9:83:ce:8f:79:20:71:6d:8a:bf:53:
ad:c2:8a:61:e9:f0:4c:af:31:be:1b:13:58:03:d8:
e8:53:00:dc:97:f0:0b:f0:9d:a6:ca:80:64:f6:4a:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:07:10:3E:7A:1C:F1:D6:3E:0E:02:BD:65:8E:38:D2:F4:84:FC:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ddc80aa-0195-4e0c-9e2d-7a55f1213d16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:2080::/48
Signature Algorithm: sha256WithRSAEncryption
9c:43:e9:68:cc:67:00:5e:67:66:a8:75:51:cb:2b:c4:77:1a:
3c:cd:af:af:1f:29:f8:44:01:69:f5:10:aa:0b:32:ca:63:d3:
02:a7:18:aa:13:a3:a6:94:f4:7c:5a:6c:42:95:73:dd:35:10:
d7:18:1e:5c:a6:81:49:d2:98:59:d8:7a:5c:70:bc:42:99:ae:
c8:50:fc:f8:19:78:12:73:de:c9:f0:fd:07:c2:7a:03:d4:51:
8a:4d:1c:5c:a2:d9:a0:15:e0:45:1c:d8:c2:18:af:e4:b2:81:
9c:88:aa:4e:6b:9d:08:90:bd:bf:7e:ca:d7:91:14:16:95:ab:
d7:37:26:12:53:c3:14:ff:86:13:12:57:41:7b:0f:36:52:d5:
39:a0:ea:70:1b:03:0f:84:77:bf:28:53:47:45:ea:51:bd:9d:
ab:bb:66:e9:fd:c6:9f:2c:90:08:08:a7:a7:6e:b2:2d:bc:14:
d8:c9:14:26:ea:2a:4e:d2:07:e1:41:99:af:15:d9:20:65:67:
df:11:04:c0:78:08:a7:5f:a4:e6:2d:f8:ed:4a:58:75:bb:2e:
c7:ab:d5:0d:d8:25:42:57:87:4a:ee:43:40:44:56:75:c7:e1:
bd:6d:73:b0:b1:03:46:a5:25:d1:9c:99:67:43:10:ca:2f:91:
6a:63:0c:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:30:51 2025 by rpki-client