This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab98bfdb-9af4-412f-87c6-d3448c52456d.roa
File: ab98bfdb-9af4-412f-87c6-d3448c52456d.roa (raw, json)
Hash identifier: xlZidpBEvw1I5L6ruHWru8LKzjB706KUZb+ODvxrZA8=
Subject key identifier: 7B:26:52:9D:88:10:6D:FF:04:59:AF:B1:B1:71:92:E4:8B:63:B8:39
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 456524C03A47FB05F79669986C48AAF6F65FCEF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab98bfdb-9af4-412f-87c6-d3448c52456d.roa
Signing time: Thu 20 Nov 2025 00:40:51 +0000
ROA not before: Thu 20 Nov 2025 00:40:51 +0000
ROA not after: Wed 18 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffd:8143::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:65:24:c0:3a:47:fb:05:f7:96:69:98:6c:48:aa:f6:f6:5f:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 20 00:40:51 2025 GMT
Not After : Feb 18 23:59:59 2026 GMT
Subject: serialNumber=564450f2aae0adf721315bfa0acbcc25023bf744c230d4106e0951e40079fb95, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:7b:e3:e9:aa:8e:a7:38:1e:92:cc:9b:75:
e7:9c:0e:6f:39:0b:b4:d5:cd:44:1d:03:e2:1d:ad:
a9:e7:21:25:63:42:ee:b9:40:b1:a5:1c:16:e2:b0:
8e:35:9a:2d:80:e4:26:fd:11:51:3c:11:21:c3:cf:
45:6c:5a:14:f8:30:99:2c:a7:40:52:8f:6a:36:ff:
5c:5f:bc:d8:23:46:cd:16:fe:41:29:7e:bb:4a:d3:
4d:ae:4b:17:c8:ff:bc:5b:c5:47:09:61:58:55:67:
c9:16:84:e5:46:d1:f5:bb:f8:4b:3f:85:17:d4:ae:
94:bd:b5:08:2b:27:21:37:4d:d6:38:33:06:1b:c1:
e8:a0:14:0a:2a:f0:f2:02:d1:b2:e9:d0:f4:e4:06:
a2:e4:25:6b:4a:25:a2:67:7b:90:06:8f:76:e8:d0:
76:8e:88:d7:9f:d3:7d:62:cb:1a:d8:04:f8:2f:bf:
c5:25:a4:49:8f:5e:ed:c9:1e:86:07:0b:d2:bd:07:
0f:fe:d5:06:21:35:99:8d:74:42:53:70:a6:dc:5d:
ee:15:b6:d7:26:71:4b:e0:a3:98:a2:2a:f1:6c:18:
c4:cc:e0:37:90:25:3f:48:ac:06:21:ca:19:34:be:
e9:e0:f2:c6:d9:00:54:4d:60:5d:6a:97:bb:7d:ec:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:52:9D:88:10:6D:FF:04:59:AF:B1:B1:71:92:E4:8B:63:B8:39
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab98bfdb-9af4-412f-87c6-d3448c52456d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffd:8143::/48
Signature Algorithm: sha256WithRSAEncryption
b6:a4:f1:c2:99:0e:68:83:ab:bb:89:f8:72:b5:f7:1a:55:6e:
c0:56:1e:24:ee:32:de:5c:c6:23:09:1b:3a:8d:7b:41:b9:f0:
a5:54:57:04:8c:42:0b:19:e3:06:9a:19:31:1f:8f:44:a4:df:
4f:ce:08:18:bd:34:f3:a3:40:e0:33:bc:c9:a1:9c:02:3b:ff:
3d:ff:5e:44:c3:54:f2:41:9e:b1:3e:d1:ee:73:fe:6b:cf:66:
9f:08:17:cc:fb:ce:3e:75:30:88:1e:41:51:a2:f6:16:c3:ca:
dc:ba:be:ea:27:8c:55:7b:83:d2:3a:50:70:9f:35:63:e4:54:
59:79:ed:b2:d1:09:a2:fe:40:87:c7:b1:b0:53:04:b8:c6:ad:
3b:46:50:31:b0:42:1d:57:d8:2e:bc:d3:38:0e:41:f5:34:30:
ad:56:ec:bf:b4:0e:59:6a:61:35:f5:f7:c9:fd:27:17:c8:3d:
79:6e:e3:ea:fc:75:14:2c:7e:4c:a0:ce:9c:75:32:b4:80:1b:
1d:5e:dd:3f:04:09:ba:9a:c1:43:01:81:7e:9b:0b:88:c1:18:
45:f0:c1:65:21:3f:83:5f:c5:aa:e0:68:b0:f8:6e:4f:7f:bf:
80:05:a6:38:26:56:2e:05:37:82:3b:79:c4:be:35:3d:68:44:
d7:82:01:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 26 09:51:42 2025 by rpki-client