This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa
File: c538b13e-0806-4990-a5f5-81b220e6ea95.roa (raw, json)
Hash identifier: 7ajcbCWpRcUtbgraDSy40Z6R6Fh2TueWosaLZyX2wms=
Subject key identifier: 69:61:6C:C8:44:FC:C2:7C:30:36:C0:7C:61:39:45:0C:08:3A:C7:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DC7D75C1C54045DC47F00BE8C0B5DB1762C4C78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa
Signing time: Sun 07 Dec 2025 00:31:56 +0000
ROA not before: Sun 07 Dec 2025 00:31:56 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c7:d7:5c:1c:54:04:5d:c4:7f:00:be:8c:0b:5d:b1:76:2c:4c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 7 00:31:56 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=fa1af06d94bed9e25f034d436028b2288a3e426837af3bcbc10763261d0acd91, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:aa:8f:66:1b:39:62:16:a1:95:57:c3:a3:
d0:ee:85:4f:c8:3c:47:77:31:d9:67:06:59:a4:ff:
a1:d5:91:d7:22:82:b6:f4:87:e8:8c:88:9c:4c:6b:
e5:f1:eb:5e:b0:ba:9a:84:1b:79:16:3b:75:66:a3:
82:01:30:ff:d6:9e:9e:cf:d3:f4:1e:64:c1:5a:23:
4e:3b:c1:a8:15:87:d5:27:53:be:df:f7:de:7d:e4:
57:5c:b0:dd:42:df:53:c0:65:f6:10:d7:31:0c:78:
e2:b8:af:14:da:bd:c7:33:8e:f6:4e:c5:67:b7:a6:
c5:9d:04:5f:00:4b:18:2f:76:a9:c9:35:0e:24:55:
05:18:11:ac:0c:47:ad:4b:df:33:32:f7:b5:3e:cd:
eb:0f:74:90:bb:81:83:ef:40:5a:02:95:89:5c:f6:
18:71:d3:a9:47:4f:c9:9e:5e:8c:72:ce:16:ad:34:
de:3b:53:b0:50:77:dc:da:5c:04:27:c2:f9:f3:28:
82:3d:78:a3:5b:7b:a9:26:bd:41:3b:a1:61:e0:c2:
33:86:f6:57:90:20:bf:2d:8b:d0:18:f4:81:37:6f:
90:0d:15:23:55:a9:2d:48:b5:0d:7d:27:fc:64:bb:
1b:42:7d:97:9f:9c:ee:c4:58:42:dd:94:95:3a:51:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:6C:C8:44:FC:C2:7C:30:36:C0:7C:61:39:45:0C:08:3A:C7:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:6000::/40
Signature Algorithm: sha256WithRSAEncryption
4e:fd:8b:f0:99:9e:e1:fe:4b:44:43:be:c2:f7:42:76:73:b0:
72:9e:5f:24:dc:db:a8:8d:01:3a:6b:0c:70:04:86:6f:98:fd:
5e:a4:a2:94:03:bb:04:5c:6a:dc:dc:25:f0:a3:58:69:9a:9d:
97:12:3b:a5:0c:9a:bb:7c:ee:2f:11:44:7d:79:e3:bf:95:30:
ed:c7:f8:c0:a3:24:77:97:5a:68:05:c3:29:78:f1:3d:ed:6a:
9a:32:a6:db:b2:2a:b2:95:fc:c4:96:3c:29:52:f4:a4:8b:26:
93:38:51:3c:77:d1:6c:6d:23:83:61:c5:71:63:b0:f0:60:5d:
cc:09:6d:20:b3:b2:60:c8:9e:62:3d:76:98:50:ea:f8:d0:68:
ca:6c:90:c7:b9:7e:01:e3:62:ad:99:d2:6f:ff:c9:7d:47:45:
61:8e:8e:1f:8a:d8:ac:98:26:30:3a:3f:a0:3c:7f:82:b6:bd:
6f:48:ad:d3:e8:e3:e1:f0:13:13:86:31:f5:dc:04:76:6f:e8:
d6:79:fb:8f:d2:f4:f8:85:3d:0d:74:60:23:67:b8:9e:35:a7:
1e:16:86:6c:50:fd:78:39:ae:de:ce:18:fc:ed:7d:e8:3d:56:
ac:3c:7d:2c:1a:7c:32:d3:7a:db:2c:4d:29:77:c0:a5:b5:62:
81:b6:f8:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:17:02 2025 by rpki-client