This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab76ae71-78e8-4d73-b40b-688a18c78444.roa
File: ab76ae71-78e8-4d73-b40b-688a18c78444.roa (raw, json)
Hash identifier: 1q7K1aQODwlPL7ajpu67eocbjO2fg6RouI19zOcZp3Y=
Subject key identifier: 81:A6:7E:EF:02:38:1B:83:59:91:95:64:C7:E2:9C:F4:33:C3:08:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E0ABA5EACBDC02E2FE741F1124E51A289370B0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab76ae71-78e8-4d73-b40b-688a18c78444.roa
Signing time: Thu 11 Dec 2025 00:30:10 +0000
ROA not before: Thu 11 Dec 2025 00:30:10 +0000
ROA not after: Wed 11 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.34.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0a:ba:5e:ac:bd:c0:2e:2f:e7:41:f1:12:4e:51:a2:89:37:0b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 11 00:30:10 2025 GMT
Not After : Mar 11 23:59:59 2026 GMT
Subject: serialNumber=47b7997733563c37d6de2d749e64aebadad47bcd2b2bcd311a2c8fd08b667858, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:df:07:b9:04:08:b1:90:fc:e7:cf:c7:c9:
00:4e:c3:82:7f:92:e7:b2:bb:60:5b:c0:0c:3b:8f:
3a:0c:1b:71:25:d9:21:11:cb:ed:39:f4:ed:52:c5:
07:60:be:de:fb:d0:fb:40:14:73:ed:9d:2e:a4:b3:
2d:2b:3c:68:ad:3f:1d:80:c5:ac:a9:12:55:19:97:
7d:17:76:0f:2b:e9:07:e5:b1:83:3f:bf:70:08:5d:
05:6d:1f:5f:58:b8:1e:de:1c:2f:88:81:dc:8b:10:
89:c5:95:84:e4:5e:f8:98:4f:65:e0:6f:af:b5:cb:
36:d3:7a:74:c7:b2:8f:29:75:be:ec:15:e4:1c:51:
45:5b:4e:ae:6e:e7:6c:7d:ba:93:99:a9:a7:86:4a:
e6:65:17:22:b6:7c:83:65:9b:b9:3d:bc:02:b6:18:
b6:32:b4:52:2c:a3:3c:52:51:94:d1:b9:80:0b:53:
ab:c2:06:2d:5b:7e:0c:37:10:a9:1f:a5:c3:ea:2d:
0c:fd:1a:e8:9f:3f:15:0a:53:4d:12:13:87:ae:f2:
c7:19:c9:3d:a4:af:d3:cd:ed:07:26:87:63:63:cf:
c4:28:6d:ca:8c:c4:71:3c:d0:0c:b6:b4:07:59:4d:
4b:7b:fa:52:6c:8c:4b:93:c1:ae:c5:e6:a6:be:54:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A6:7E:EF:02:38:1B:83:59:91:95:64:C7:E2:9C:F4:33:C3:08:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab76ae71-78e8-4d73-b40b-688a18c78444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.34.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7b:4a:ae:2e:c3:01:50:d0:2f:e4:7a:72:66:c5:03:ca:65:a7:
65:cb:3a:ad:8e:a8:59:4f:28:39:6d:f3:d6:e3:3f:00:57:74:
ba:6a:b2:18:6e:34:b7:59:69:7e:fe:eb:90:7a:c5:63:c6:fa:
c8:4a:0a:50:4d:ff:fe:40:21:c9:0f:2d:32:12:6f:d8:3e:cf:
64:80:41:2a:8d:63:ea:14:ae:ae:ad:fa:8d:7d:a3:99:a3:2c:
b2:20:33:d1:59:0d:6e:42:cf:63:c7:61:9d:f1:c1:f9:a4:a3:
c4:ea:8f:4a:93:66:05:97:db:37:4b:bb:56:cf:95:fc:5b:04:
8e:f9:1c:c4:f2:9b:d1:63:bc:31:75:5f:2b:54:08:9c:19:7f:
14:93:cd:75:a4:d9:77:5f:32:91:f2:70:a0:b4:62:e6:89:23:
ea:c6:f4:22:ce:84:7b:4c:d2:1f:67:84:a3:85:ae:ae:20:0e:
f3:2d:c7:c4:0e:6d:f5:e0:60:9c:89:00:a9:47:79:fc:8d:6d:
c1:89:29:83:d3:c0:de:c7:00:d1:2a:21:04:ef:d2:7d:01:e2:
b1:f4:1c:5d:56:dd:04:c2:0d:87:a9:91:62:ff:80:03:25:0c:
5d:40:b9:85:52:49:31:6c:e5:96:e2:e8:65:be:82:e3:a0:c9:
d4:d7:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:53:00 2025 by rpki-client