This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb19de45-323a-4e77-a9ad-012c92b7c91d.roa
File: cb19de45-323a-4e77-a9ad-012c92b7c91d.roa (raw, json)
Hash identifier: XQPx08vTYOrUyqb4EZzSQMDMgjkL7LNihp6yK6Xaf+o=
Subject key identifier: F7:3A:97:2D:1B:4C:C4:2F:49:1F:EF:99:72:BA:70:77:E0:6F:3C:4E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CB7C581E90E0EB8E7EAED8FB18DDD2C58B4E9CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb19de45-323a-4e77-a9ad-012c92b7c91d.roa
Signing time: Thu 20 Nov 2025 00:20:05 +0000
ROA not before: Thu 20 Nov 2025 00:20:05 +0000
ROA not after: Wed 18 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b7:c5:81:e9:0e:0e:b8:e7:ea:ed:8f:b1:8d:dd:2c:58:b4:e9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 20 00:20:05 2025 GMT
Not After : Feb 18 23:59:59 2026 GMT
Subject: serialNumber=cafe7f47a70d17cf792fdeaf4de3118744aa43033065d6909163ad174b73a1de, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:35:80:e4:c0:d2:cf:c9:a4:45:0a:0d:9a:
15:44:01:7c:32:25:91:51:6c:ab:cb:b3:84:dd:5f:
09:9e:2a:09:96:fe:14:61:bd:d7:fd:81:2f:9d:a0:
c3:15:81:21:1a:13:b5:60:d5:8c:5c:ce:fc:c6:54:
84:a8:79:b2:6e:cc:61:d4:d0:e2:19:85:4f:55:ff:
55:02:64:ba:3a:03:7b:72:0a:92:ce:39:bf:c6:03:
c5:41:db:a2:b2:62:bb:de:50:b1:a4:81:76:6d:f5:
aa:db:df:9f:c9:11:83:51:fa:90:83:41:4b:6c:99:
90:9f:0a:64:eb:04:ac:b6:2d:5e:45:7d:f0:ba:5d:
80:c0:17:a6:ae:43:69:f4:f8:43:6d:fd:58:01:a2:
98:69:c2:55:32:7d:14:3f:17:58:53:ff:01:7b:c6:
1d:f4:a0:16:e2:e6:a1:88:29:15:20:64:ba:06:8f:
a7:4a:c8:11:15:5a:a5:ce:8f:b6:84:22:ac:cb:16:
a2:f7:96:42:0b:e3:9f:f7:37:42:da:f1:76:59:16:
c2:19:cb:94:81:3c:87:7a:40:c7:69:7b:be:ba:93:
e7:fb:77:6f:a5:da:cd:37:84:8c:09:11:9c:e6:96:
0e:39:69:44:92:93:eb:48:72:9a:d8:46:f4:a6:13:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3A:97:2D:1B:4C:C4:2F:49:1F:EF:99:72:BA:70:77:E0:6F:3C:4E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb19de45-323a-4e77-a9ad-012c92b7c91d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.118.0/24
Signature Algorithm: sha256WithRSAEncryption
96:41:d2:91:87:f6:3d:e6:d5:a1:ec:c9:e6:76:b5:94:43:c4:
f1:9a:f4:41:74:1f:df:f6:15:18:f9:a7:a0:47:6b:f0:2b:f0:
fb:db:9c:ca:2d:fc:b6:38:d2:58:b9:9b:ff:98:89:15:11:ef:
09:cc:46:8f:86:f9:fe:e8:0c:bc:e2:35:1d:0b:38:b3:a5:6a:
91:4b:23:6a:4f:fd:3b:59:3f:f1:a6:fe:09:e9:9c:98:d5:f2:
62:98:3d:51:66:d4:02:9b:de:82:4d:9e:ae:3a:5f:6f:29:c0:
70:3b:79:79:d5:36:d8:a6:6d:38:8d:2f:cd:64:54:df:7f:d7:
a4:c7:ca:e8:b7:a3:5d:32:ca:6c:89:ad:f7:73:f9:c8:cf:df:
96:ed:60:3e:e8:25:c8:eb:a6:5d:f4:e5:21:0c:2b:fa:cb:da:
6e:b9:56:72:93:fc:7b:2f:e5:8d:1c:ab:46:66:a9:bc:a3:61:
db:1d:b2:82:30:3f:4b:f5:8b:e7:37:e8:65:97:f7:79:84:ce:
b7:a4:6c:d4:72:06:c9:5e:53:1a:d1:57:97:21:82:29:cc:4d:
42:19:a5:24:1d:5a:99:6f:33:c2:a5:47:b4:07:35:1f:42:70:
00:ba:16:a0:f3:bb:7a:41:18:b3:24:d5:69:2f:c2:eb:4a:22:
27:cd:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 26 10:14:27 2025 by rpki-client