This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa
File: 2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa (raw, json)
Hash identifier: Q9/Y1HDOjXW6njIXqB1Ca8hDu1W7becIYvQ79g8PnVY=
Subject key identifier: A8:6A:C8:50:81:81:91:79:50:C2:7C:DA:3E:33:5E:A1:3C:D8:77:34
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4907059812811ED2C0D65B0F1D9C46707FE077E7
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa
Signing time: Thu 11 Dec 2025 00:50:14 +0000
ROA not before: Thu 11 Dec 2025 00:50:14 +0000
ROA not after: Wed 11 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f3:f000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:07:05:98:12:81:1e:d2:c0:d6:5b:0f:1d:9c:46:70:7f:e0:77:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 11 00:50:14 2025 GMT
Not After : Mar 11 23:59:59 2026 GMT
Subject: serialNumber=339b5b64a9ad1e1406d45b37a1e8c3b3d1743815cb732f8ec44f6697ecdb628d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:b7:22:7a:1e:e0:74:d6:9c:25:1d:39:04:
be:59:cd:d4:ad:e8:09:a4:97:46:0e:4f:00:a3:bb:
3e:51:93:a1:cc:32:e2:e9:04:fe:02:92:66:63:0c:
bf:dd:b1:34:91:a3:21:e5:85:68:48:09:ae:69:4a:
63:2f:24:cb:9e:3d:2f:b6:bd:21:9a:98:67:1f:39:
1a:b6:13:82:be:79:50:9f:df:57:84:dd:0b:77:e5:
ae:5f:18:e6:5a:c2:78:db:bc:75:1c:f8:7d:12:20:
f5:7c:75:bc:52:f0:e1:61:3c:df:22:3b:5b:8f:01:
90:fd:b3:e6:d3:c3:a3:ef:af:f9:41:55:4f:10:65:
1b:57:ce:fb:6a:bb:e5:03:1f:ee:c5:0c:be:55:17:
83:8d:51:09:4d:5a:e9:b4:48:05:0b:cb:17:ef:f6:
83:00:ba:5c:df:bf:ae:5e:d9:36:65:7a:f3:70:ed:
aa:e1:88:5f:7c:d3:83:e8:45:90:85:cb:91:71:d7:
d7:aa:89:c0:b8:b9:7c:b6:ae:1b:25:05:4d:bc:4f:
10:e6:2e:b8:49:ac:d8:70:bd:ee:ff:56:38:19:8f:
e2:a4:7c:3a:cd:cd:d4:af:56:72:1f:29:08:af:0c:
a4:72:62:e3:28:79:61:9a:c6:95:36:07:76:7a:9a:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6A:C8:50:81:81:91:79:50:C2:7C:DA:3E:33:5E:A1:3C:D8:77:34
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f3:f000::/44
Signature Algorithm: sha256WithRSAEncryption
9a:73:0e:b1:de:eb:eb:30:3b:81:a0:e9:34:13:cb:2b:54:7b:
86:90:aa:07:08:b9:9a:b2:f2:ec:21:27:17:be:f7:f3:94:38:
5e:82:32:2b:b1:a1:0f:86:55:11:5c:b8:71:19:37:ac:ff:83:
aa:61:70:1d:ad:f3:0d:a6:5b:3b:c7:ea:da:56:e8:bb:fd:60:
fe:fe:85:7a:7f:0e:37:d8:ac:8d:b8:93:c4:c0:72:54:3d:51:
eb:1a:7c:a5:ee:22:57:24:6a:b7:a9:73:f9:65:65:0f:26:81:
11:b7:57:9e:b4:33:44:d2:a5:8a:29:80:c3:8b:dd:8c:94:59:
9a:ee:eb:95:5b:5a:6f:25:b1:69:fa:ef:72:0e:e1:b1:3b:82:
64:82:91:d0:54:be:73:56:25:fd:bb:4c:6f:05:06:de:22:de:
0c:57:b4:5a:1c:8d:cb:dc:9b:ca:3f:5d:42:96:4e:44:40:15:
c1:75:51:ba:9e:c4:71:51:57:7e:22:ce:69:ae:1a:8e:a9:3e:
e3:80:9a:03:36:91:4d:ae:1c:55:42:87:d5:1c:0a:3c:02:ff:
db:1b:93:db:7f:f0:d3:3b:c0:4b:e2:f8:4e:01:34:29:bd:11:
85:a6:48:49:63:f3:c1:52:73:9f:d4:21:f1:0e:4a:95:59:de:
86:7b:63:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Dec 15 16:52:10 2025 by rpki-client