This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da29a997-0e47-4721-ba0c-ccfed50a5876.roa
File: da29a997-0e47-4721-ba0c-ccfed50a5876.roa (raw, json)
Hash identifier: HAZX/twrPAcCaCULqhchk8SmB8iWn2aKH0S64GtvX6M=
Subject key identifier: 21:46:B2:32:9A:AD:0A:A4:B1:C8:F3:B7:3E:F2:C5:22:E7:8A:43:56
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6AA7DE7F8CB552420CABC1A872B7FFE75BB1EF9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da29a997-0e47-4721-ba0c-ccfed50a5876.roa
Signing time: Mon 08 Dec 2025 00:20:07 +0000
ROA not before: Mon 08 Dec 2025 00:20:07 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 74.233.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a7:de:7f:8c:b5:52:42:0c:ab:c1:a8:72:b7:ff:e7:5b:b1:ef:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 8 00:20:07 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=1873033bb67b4250e2c04f446868ff2e20babae91aeac6d3c8d6bdb011e1f9d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:52:79:71:c4:08:16:80:9d:1d:65:f9:e9:
9f:19:ce:f5:25:a6:f5:2f:29:fd:fc:32:65:65:a1:
a7:02:4b:1c:4b:91:9c:da:76:b5:8a:52:77:49:8e:
49:eb:15:f5:6f:44:1b:46:4d:32:5d:e3:e7:0f:8c:
02:1a:77:ac:56:44:f8:46:69:27:3d:97:ad:3d:d6:
8b:77:09:55:8b:96:50:24:ed:72:14:83:11:ab:22:
84:8e:2e:2a:9f:68:bb:3a:72:8d:fb:20:ec:72:5f:
b4:ac:c6:56:68:c3:19:33:9a:16:26:81:60:73:83:
d4:bd:64:b9:0c:89:f0:3f:10:cd:2c:e0:87:ba:5e:
c0:78:71:43:70:1e:32:94:6f:2b:07:16:43:bc:5a:
31:76:35:d5:ce:f0:fd:1e:d3:79:ac:ba:75:b1:d6:
89:82:44:8a:28:b9:62:75:66:6b:09:30:7d:6a:0e:
f8:8a:77:ad:33:6b:c0:be:94:21:1f:4f:46:cb:81:
d9:5a:ad:f3:61:b3:6b:c9:df:4d:55:22:af:2e:b2:
9a:60:3d:fe:8e:d5:39:f3:87:0b:e8:8a:ba:f5:a6:
68:8a:62:8c:75:fa:65:ff:7d:60:ae:ca:c8:14:2f:
90:dd:88:32:de:f7:f6:1e:4b:3b:e3:58:c6:37:1f:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:46:B2:32:9A:AD:0A:A4:B1:C8:F3:B7:3E:F2:C5:22:E7:8A:43:56
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da29a997-0e47-4721-ba0c-ccfed50a5876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:6e:a8:7e:d2:d6:f6:5f:b5:09:4f:88:af:fa:aa:5d:55:a1:
5e:b4:90:51:5e:31:0d:cb:94:03:3d:3d:38:76:9f:a9:52:49:
2d:3d:c5:ea:2e:64:e0:dd:49:1b:78:9a:53:4a:e4:ef:16:f6:
01:1b:0e:4b:4d:db:e3:42:a1:1a:cb:9b:bf:0a:03:8e:fd:ca:
04:0c:5b:a1:fc:52:ef:87:39:13:96:e8:e1:67:d5:1b:9d:17:
34:2e:ce:5d:be:5f:5e:63:d7:5a:14:06:d4:35:a1:37:80:7d:
79:a9:4b:fe:91:1f:0d:7c:0e:e3:45:43:7a:c9:eb:ac:90:42:
c2:bf:a7:67:f2:9b:92:b7:af:08:5b:00:1d:2c:f8:93:b8:78:
05:7e:6b:61:9d:51:a9:63:da:0b:5d:60:a7:4e:59:d6:4e:e4:
c6:d7:d0:f7:2c:c7:e1:e8:78:f3:d1:34:6a:48:d2:09:5b:ab:
a7:c9:63:9f:4f:cf:71:6b:51:20:9a:02:7c:a2:39:74:66:f2:
27:c6:39:d7:51:c8:7d:74:ca:90:ca:32:36:0d:0c:33:33:68:
ac:96:11:9d:9b:a0:d8:39:73:73:93:1e:f6:cb:18:a8:27:98:
44:f1:7b:5a:23:f7:3e:65:e6:a7:0c:b7:b6:db:54:39:95:2b:
72:06:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:03:49 2025 by rpki-client