This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa
File: 37e5da86-98ab-4d9c-889e-6ab6e277d866.roa (raw, json)
Hash identifier: IjxPzUqGxZDlD3K46Mukv87yuwe/1VUb0GS/LL3lvbI=
Subject key identifier: AE:4F:2E:A4:38:03:2B:A6:D8:98:A7:27:10:FC:1C:BD:C3:39:18:06
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 5899A168F84D2F9D81B753A1F5EE3213BA62E7E5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa
Signing time: Wed 10 Dec 2025 02:30:10 +0000
ROA not before: Wed 10 Dec 2025 02:30:10 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:99:a1:68:f8:4d:2f:9d:81:b7:53:a1:f5:ee:32:13:ba:62:e7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 02:30:10 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=76639edf1965a498837f19b2c769bb7391ba8d56645a19e1261aa61fa03237e1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:48:f0:37:23:37:c4:f3:5e:72:a4:10:f4:
a6:a8:5d:75:b7:16:72:50:d3:dd:e0:f3:d6:83:c9:
d7:cf:f0:7b:2e:b4:10:a7:59:70:9f:ee:20:6e:89:
c0:e4:b1:18:b5:7b:04:f1:10:76:a7:70:95:23:8a:
82:7b:aa:97:29:65:50:a7:90:16:77:3e:05:da:0c:
53:5f:fe:90:fb:d4:62:19:47:f5:9e:0e:33:0f:c7:
58:2b:4f:2f:3d:d5:7d:71:b8:56:ce:1b:04:6d:da:
bf:d4:ac:09:be:72:f2:b9:be:3b:87:4d:f6:5f:c2:
30:22:c5:6b:37:ab:61:c1:33:77:31:c9:66:89:7f:
7f:cd:2b:30:a6:53:73:e6:53:7c:a4:bf:d8:21:4f:
9e:ea:df:f4:73:c0:86:e3:90:56:74:85:d3:d1:88:
25:96:a5:b6:39:48:1d:08:d1:a2:41:6e:b2:3d:af:
c4:c4:bb:76:d0:7e:7f:c3:18:fb:48:e7:28:f6:2e:
f8:27:81:0a:a1:49:ef:b9:96:9e:ce:b8:a9:ca:6c:
e5:a4:54:89:aa:b8:2a:07:12:96:e0:ee:06:c5:73:
9c:d2:b6:57:0e:ef:6b:4a:08:a7:7f:4e:29:45:52:
71:09:e2:a1:85:a1:84:dc:f3:e0:74:16:38:b0:20:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4F:2E:A4:38:03:2B:A6:D8:98:A7:27:10:FC:1C:BD:C3:39:18:06
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:1::/48
Signature Algorithm: sha256WithRSAEncryption
57:ce:f4:c8:cd:7a:80:e6:81:57:82:c2:f8:93:01:6d:ba:f7:
f1:34:6e:29:43:c1:97:b1:28:c0:ee:59:d8:7a:22:41:f8:90:
70:0f:82:18:ab:90:82:66:8d:b9:38:3e:c7:ed:e2:33:09:b7:
46:96:20:70:ec:bd:d4:a4:6a:ec:0d:fb:78:ad:e7:32:8d:58:
f3:6d:a4:e2:5d:b2:4e:a8:5a:49:26:9c:b8:88:22:05:6e:e6:
d8:ab:06:3a:3e:d7:42:d1:f7:ba:57:14:fc:c5:45:f8:0e:da:
a2:59:ed:8d:5a:26:bc:ce:22:68:c9:ef:d3:4b:a4:31:70:07:
68:f6:20:2b:88:b7:20:ce:d7:3c:77:b1:f3:84:94:43:a9:85:
22:01:bb:a5:97:61:43:b3:e4:06:aa:30:0a:b2:0d:c2:0b:0b:
49:75:74:64:68:ea:71:a9:cb:08:c9:7b:66:ec:b0:76:77:9c:
dc:29:b9:58:a4:10:55:93:82:c9:41:d7:f3:cd:9e:e2:4e:b5:
65:e5:44:68:cc:58:63:72:07:5a:76:18:0f:3d:26:04:af:0d:
a2:c1:86:f0:63:d1:86:f4:63:dd:02:f8:c7:b0:1e:11:c5:7b:
cc:d9:6d:d5:c6:9a:ca:d3:2a:88:a9:bb:33:77:44:53:bb:8d:
17:f1:df:f2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWJmhaPhNL52Bt1Oh9e4yE7pi5+UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDIzMDEwWhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NjYzOWVkZjE5NjVhNDk4ODM3ZjE5YjJjNzY5YmI3Mzkx
YmE4ZDU2NjQ1YTE5ZTEyNjFhYTYxZmEwMzIzN2UxMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCJK0jwNyM3xPNecqQQ9KaoXXW3FnJQ093g89aDydfP8Hsu
tBCnWXCf7iBuicDksRi1ewTxEHancJUjioJ7qpcpZVCnkBZ3PgXaDFNf/pD71GIZ
R/WeDjMPx1grTy891X1xuFbOGwRt2r/UrAm+cvK5vjuHTfZfwjAixWs3q2HBM3cx
yWaJf3/NKzCmU3PmU3ykv9ghT57q3/RzwIbjkFZ0hdPRiCWWpbY5SB0I0aJBbrI9
r8TEu3bQfn/DGPtI5yj2LvgngQqhSe+5lp7OuKnKbOWkVImquCoHEpbg7gbFc5zS
tlcO72tKCKd/TilFUnEJ4qGFoYTc8+B0FjiwIGX7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrk8upDgDK6bYmKcnEPwcvcM5GAYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzM3ZTVkYTg2LTk4YWItNGQ5Yy04ODllLTZhYjZlMjc3ZDg2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwAAEwDQYJKoZIhvcNAQELBQADggEBAFfO9MjNeoDmgVeCwviTAW26
9/E0bilDwZexKMDuWdh6IkH4kHAPghirkIJmjbk4Psft4jMJt0aWIHDsvdSkauwN
+3it5zKNWPNtpOJdsk6oWkkmnLiIIgVu5tirBjo+10LR97pXFPzFRfgO2qJZ7Y1a
JrzOImjJ79NLpDFwB2j2ICuItyDO1zx3sfOElEOphSIBu6WXYUOz5AaqMAqyDcIL
C0l1dGRo6nGpywjJe2bssHZ3nNwpuVikEFWTgslB1/PNnuJOtWXlRGjMWGNyB1p2
GA89JgSvDaLBhvBj0Yb0Y90C+MewHhHFe8zZbdXGmsrTKoipuzN3RFO7jRfx3/I=
-----END CERTIFICATE-----
Generated at Fri Dec 19 02:02:17 2025 by rpki-client