This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa
File: ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa (raw, json)
Hash identifier: ViuyVsliXuYlAGIGvv7yQKOHQQfYOiAr1/mZJ16hse0=
Subject key identifier: 40:1B:4D:8A:D8:18:9D:72:9C:7D:B9:F4:7C:E1:D2:63:CA:76:43:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2536E1F3F411DE22A1C1F2EA0EB099FCB451FBF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa
Signing time: Wed 12 Nov 2025 02:01:09 +0000
ROA not before: Wed 12 Nov 2025 02:01:09 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff6:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:36:e1:f3:f4:11:de:22:a1:c1:f2:ea:0e:b0:99:fc:b4:51:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 02:01:09 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=21c10de39671fe337f4af2ee82852ecd3c23e0af8590867a17887b065833e428, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:1d:3e:4d:b9:fd:8c:30:eb:33:e4:5d:31:
7a:2d:5c:d3:03:29:34:ca:f1:20:90:8d:83:77:2b:
b6:68:1f:9d:ef:2a:7c:b3:53:00:85:d5:2d:f5:52:
36:93:63:7f:b8:0e:ed:d5:0b:3f:95:0d:6c:cb:b0:
ab:03:88:f5:b8:2f:dd:11:ec:5f:a5:a7:50:d1:0d:
cf:4a:64:8b:60:e1:b9:29:69:71:a2:6e:f3:c5:1e:
9a:6b:f3:66:3f:c3:a6:15:ca:1f:6d:71:d4:f7:2d:
ac:2f:a3:24:22:5f:25:8c:10:01:56:cb:23:c7:a3:
68:81:ca:ea:e4:53:20:4e:bd:b6:bd:9d:4b:56:4f:
a8:7f:87:df:6e:8f:63:f6:fd:6b:c9:58:4a:ac:dc:
88:e7:6b:f9:d9:51:21:34:8a:00:8a:b6:02:19:56:
e7:eb:d8:d8:a7:9e:81:7c:64:e6:4b:06:a4:6a:da:
bb:68:ef:2d:76:4a:ea:99:5c:03:8a:15:d6:d2:c2:
a5:7b:a4:aa:ad:66:67:7c:c2:b9:fe:10:e7:7f:1d:
da:e0:81:64:cb:db:df:24:43:47:21:a2:f3:8f:bb:
6a:8a:c2:78:fb:09:d5:93:8e:5e:3a:da:fd:6e:e7:
b6:a6:a2:f2:31:64:58:25:8d:0c:3d:6a:a2:0d:2b:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:4D:8A:D8:18:9D:72:9C:7D:B9:F4:7C:E1:D2:63:CA:76:43:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff6:2000::/48
Signature Algorithm: sha256WithRSAEncryption
4b:9a:39:a8:c7:69:13:5e:57:cf:74:84:1f:40:19:fa:d2:d5:
70:ca:48:f0:da:be:71:ac:00:85:09:9d:cc:f8:45:d6:a0:6c:
5d:f2:de:fb:b3:d3:01:93:b2:16:1e:40:ac:db:c6:ad:d6:fc:
b2:93:f0:08:3c:64:31:65:a0:e8:a0:36:45:43:ec:fe:df:76:
58:49:94:30:8b:af:99:5f:31:ee:81:0e:e8:1b:18:d7:79:3c:
8d:b9:37:d5:a8:90:39:df:2d:65:ff:2b:c7:3b:cd:02:34:b1:
6e:fc:e9:c4:40:76:00:c8:79:4c:5e:fa:dc:c9:bd:df:9c:1e:
1f:8c:05:b0:a0:b6:a0:1e:04:50:53:b4:7b:ec:ec:a2:7a:90:
79:7b:a0:94:af:a3:19:6e:20:58:83:bd:ee:98:a7:1c:79:e1:
56:cb:2f:83:ae:fc:cb:7f:40:c2:7f:10:23:9b:96:d0:0b:89:
11:75:e3:6a:d6:9a:da:43:8f:d6:69:fc:bc:c1:91:3d:93:21:
95:8b:3d:9c:df:7c:10:ff:42:1d:82:8b:52:49:1a:32:7b:32:
bc:c3:fc:c4:e0:e8:c9:b9:03:56:22:d7:da:e0:18:5c:61:a7:
2e:5c:cd:bf:03:45:b6:06:8a:e6:26:45:d1:5f:c2:02:0c:fe:
c0:be:d8:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:33:07 2025 by rpki-client