This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa
File: 7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa (raw, json)
Hash identifier: 8GEBFLSdsq6UdVmGHsbDsPrt6qhXv7KYSDrJsCNzUiM=
Subject key identifier: 7A:D8:34:FC:AD:86:FF:87:03:CE:2F:09:49:98:D4:96:1B:93:AF:8C
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 6774AC3D931248073946D782DF04284EC9020CD5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa
Signing time: Wed 21 Jan 2026 22:36:42 +0000
ROA not before: Wed 21 Jan 2026 22:36:42 +0000
ROA not after: Tue 21 Apr 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:f0f2:7028::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Jan 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:74:ac:3d:93:12:48:07:39:46:d7:82:df:04:28:4e:c9:02:0c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jan 21 22:36:42 2026 GMT
Not After : Apr 21 23:59:59 2026 GMT
Subject: serialNumber=fb1365d1485659c217918e864722b9ecedf6a1de7adabd8898322fa282e37820, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:98:6b:95:82:42:58:2d:ef:e4:b2:d7:2e:
64:90:15:54:33:7d:2d:c4:ea:47:2c:6d:68:30:ee:
f4:06:95:e5:d6:8b:49:1e:9b:63:9d:3c:bc:b6:f4:
13:e6:bd:ed:b2:d0:16:d2:6e:02:f2:e0:18:08:39:
5f:de:53:85:49:60:37:79:6c:a7:9f:ca:84:04:60:
83:9a:78:03:3a:3d:39:dc:0b:3e:6d:56:0a:96:a5:
38:d7:be:74:61:52:b7:01:73:f3:a7:4f:08:d1:8c:
6a:0f:09:ce:dc:4d:04:3c:2a:db:34:8d:16:57:1b:
af:4f:4a:64:81:70:11:86:f0:61:a3:f5:3c:32:f1:
71:93:8a:6a:41:25:3b:77:f9:0b:da:0d:38:59:3a:
6f:fa:a1:27:25:eb:53:54:7c:f6:17:fc:32:4e:23:
34:ea:34:89:e3:47:d6:4a:96:f7:ad:ac:f8:dd:6b:
af:0c:31:58:82:e1:ec:99:17:81:a8:d3:1b:56:39:
9c:0e:c3:7f:83:b6:c2:96:49:15:1f:d7:39:ea:9f:
d3:7e:12:90:6f:2f:74:4a:96:60:dc:07:60:57:c5:
95:90:b9:64:08:82:7d:f8:ba:0a:a6:bc:f7:6f:1d:
e7:f8:72:5d:70:62:e1:cf:a7:88:1a:ee:51:da:c9:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D8:34:FC:AD:86:FF:87:03:CE:2F:09:49:98:D4:96:1B:93:AF:8C
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad9a1d9-9de8-4418-8a97-fd7cf7a5fe72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f2:7028::/48
Signature Algorithm: sha256WithRSAEncryption
2a:57:fd:08:27:79:53:5e:e6:0a:ab:f4:4c:9a:63:d0:64:66:
e8:cd:82:7b:6d:29:5a:d9:ae:2f:29:d4:6b:df:1b:1c:78:1e:
62:9e:af:68:31:c1:6f:9e:7d:46:dd:07:a9:32:1d:cb:92:8e:
78:0d:35:a6:0a:6b:bf:82:d0:63:da:14:20:5d:c4:64:be:f2:
b9:71:09:82:d1:7d:16:7e:24:ac:4f:c1:68:63:ed:45:c0:46:
7e:15:c6:5d:cf:c6:31:69:25:e5:dd:2f:a2:1b:94:a0:54:4a:
c4:18:6d:ee:d5:b7:e3:48:19:5c:4a:45:f8:fc:24:a2:99:c1:
0c:2f:27:37:ed:11:e8:77:da:60:4c:ba:a7:e7:fc:01:68:d9:
eb:75:23:52:36:3e:47:a5:df:95:a2:6a:d2:9b:7f:de:17:9f:
53:9c:51:58:92:bf:24:02:03:a7:84:06:f9:05:43:e5:3b:c1:
cd:27:f9:60:d0:14:8e:c7:a4:88:60:fb:7e:22:db:8e:48:ec:
84:6f:bf:19:9c:de:ba:54:cf:21:f3:e2:68:da:98:bb:7e:56:
f4:21:55:14:a5:a4:fd:9f:a4:0d:f0:4a:a6:f5:24:06:25:fc:
be:eb:e0:e5:e7:1d:08:43:3c:c7:53:64:64:5b:c0:23:75:14:
95:52:78:3a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZ3SsPZMSSAc5RteC3wQoTskCDNUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMTIxMjIzNjQyWhcNMjYwNDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYjEzNjVkMTQ4NTY1OWMyMTc5MThlODY0NzIyYjllY2Vk
ZjZhMWRlN2FkYWJkODg5ODMyMmZhMjgyZTM3ODIwMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDftJhrlYJCWC3v5LLXLmSQFVQzfS3E6kcsbWgw7vQGleXW
i0kem2OdPLy29BPmve2y0BbSbgLy4BgIOV/eU4VJYDd5bKefyoQEYIOaeAM6PTnc
Cz5tVgqWpTjXvnRhUrcBc/OnTwjRjGoPCc7cTQQ8Kts0jRZXG69PSmSBcBGG8GGj
9Twy8XGTimpBJTt3+QvaDThZOm/6oScl61NUfPYX/DJOIzTqNInjR9ZKlvetrPjd
a68MMViC4eyZF4Go0xtWOZwOw3+DtsKWSRUf1znqn9N+EpBvL3RKlmDcB2BXxZWQ
uWQIgn34ugqmvPdvHef4cl1wYuHPp4ga7lHayRYBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUetg0/K2G/4cDzi8JSZjUlhuTr4wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzdhZDlhMWQ5LTlkZTgtNDQxOC04YTk3LWZkN2NmN2E1ZmU3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDycCgwDQYJKoZIhvcNAQELBQADggEBACpX/QgneVNe5gqr9EyaY9Bk
ZujNgnttKVrZri8p1GvfGxx4HmKer2gxwW+efUbdB6kyHcuSjngNNaYKa7+C0GPa
FCBdxGS+8rlxCYLRfRZ+JKxPwWhj7UXARn4Vxl3PxjFpJeXdL6IblKBUSsQYbe7V
t+NIGVxKRfj8JKKZwQwvJzftEeh32mBMuqfn/AFo2et1I1I2Pkel35WiatKbf94X
n1OcUViSvyQCA6eEBvkFQ+U7wc0n+WDQFI7HpIhg+34i245I7IRvvxmc3rpUzyHz
4mjamLt+VvQhVRSlpP2fpA3wSqb1JAYl/L7r4OXnHQhDPMdTZGRbwCN1FJVSeDo=
-----END CERTIFICATE-----
Generated at Thu Jan 22 22:45:45 2026 by rpki-client