This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7f6d42-1aff-4690-874d-886d6e8ab667.roa
File: ef7f6d42-1aff-4690-874d-886d6e8ab667.roa (raw, json)
Hash identifier: GJ1lHZfsbLt9712vbmNvd3oDrcd1vm2D5koi5Lq8onU=
Subject key identifier: F5:6D:20:5D:65:51:F4:C8:C6:48:4C:7F:BE:C1:87:31:74:0B:84:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7135BE02FDEED0170D6B6B7C1E50C0E773E2E2F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7f6d42-1aff-4690-874d-886d6e8ab667.roa
Signing time: Wed 12 Nov 2025 01:01:24 +0000
ROA not before: Wed 12 Nov 2025 01:01:24 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f12:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:35:be:02:fd:ee:d0:17:0d:6b:6b:7c:1e:50:c0:e7:73:e2:e2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 01:01:24 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=96f061a57d49f4784bfb35f08045c0ac6bdc8e5a6ce39705970a5632a1d594bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:d6:69:cb:a1:2a:fa:68:f4:1f:d8:f2:2a:
99:8a:0b:67:18:7a:42:40:b4:6f:f8:a8:42:8b:f5:
f8:2f:1f:0c:94:ca:d1:53:f9:7e:78:7c:41:7a:07:
c5:40:5c:99:67:87:4d:81:e3:10:f1:e0:17:d6:88:
11:58:1c:58:9a:aa:46:d8:48:9c:be:9e:36:12:09:
05:68:6a:8b:61:0e:99:d6:a3:81:fd:fe:5d:9d:54:
7f:eb:aa:e5:04:f1:41:ac:8d:20:87:41:77:f3:58:
b9:ed:39:e2:cf:06:ea:9a:aa:a9:85:fc:d1:2a:c9:
c9:45:4f:7d:e6:c4:c3:37:f9:64:69:f0:39:85:b1:
8b:d3:8f:73:43:bf:7e:81:20:30:6b:fd:7b:e1:29:
4a:be:a1:8d:f8:c5:3e:bc:a4:21:15:17:a0:25:55:
68:75:83:26:ad:f0:90:3b:c0:dd:59:99:53:b3:59:
a7:ed:e3:94:03:cc:ca:43:02:85:bc:0c:c1:a4:f4:
9c:c2:d8:83:d0:9b:69:70:90:3e:85:7e:c5:a7:0e:
c2:c5:6d:03:cd:bb:da:53:73:85:f3:3a:d3:97:c7:
9e:2b:a8:98:42:6a:ee:41:9f:5e:c3:0b:c7:e0:b9:
89:01:7c:5e:32:88:a5:fe:11:05:e7:6f:aa:50:24:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:20:5D:65:51:F4:C8:C6:48:4C:7F:BE:C1:87:31:74:0B:84:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7f6d42-1aff-4690-874d-886d6e8ab667.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f12:800::/38
Signature Algorithm: sha256WithRSAEncryption
bf:33:d9:ef:a5:22:a1:99:64:34:47:1f:e0:ad:c0:e8:b8:32:
5f:a9:ad:17:8a:ef:cd:5f:a3:c2:36:1d:9a:69:b3:6b:0e:5a:
f9:89:2b:eb:ea:c0:0e:ff:74:7a:ed:0f:09:23:17:d8:3c:a0:
b5:4e:ff:f6:43:bf:07:2d:1d:90:11:64:8c:d8:36:55:3a:02:
e8:a8:a6:9c:c3:96:58:89:66:18:9d:31:83:17:6b:ed:9d:60:
43:22:82:ee:63:b0:f2:dc:7a:76:83:e7:8c:50:93:f5:a5:f9:
c9:35:3d:39:85:cd:af:f2:7e:06:66:ad:25:91:32:e2:ec:d5:
6e:be:ea:8d:eb:d7:21:44:04:8e:e5:96:f5:7c:19:d5:e9:be:
ac:b3:86:6a:a6:01:79:4c:a2:29:99:3f:62:35:7b:08:66:a0:
79:53:25:4d:05:65:a0:b3:b3:57:ed:98:d0:40:45:7b:6e:bb:
d7:65:c3:ce:73:86:90:b6:3d:d6:51:7e:ed:d7:4f:96:03:15:
e6:db:f6:61:72:ff:ce:8c:8f:b3:f4:21:7d:5f:e7:66:6f:2b:
6c:28:27:bb:25:68:ef:d9:bc:c7:1a:46:02:d5:af:4a:a7:fb:
7d:be:83:63:cc:64:8e:e5:f9:39:e6:11:51:7f:ea:1a:76:0b:
e3:5e:86:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 25 17:34:39 2025 by rpki-client