This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa
File: b863f23f-4426-4c77-a614-689e722bb8c6.roa (raw, json)
Hash identifier: vM/4bHdhQFJ3jVF5Fdxi05lWaSfKrjOeOavL74jc09k=
Subject key identifier: 68:D4:93:4D:D3:C8:7F:54:40:A4:FC:0D:5A:24:4C:2A:54:17:67:9B
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 68542E670C4BDB43B74633989B791347DA62EE9C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa
Signing time: Tue 25 Nov 2025 19:40:10 +0000
ROA not before: Tue 25 Nov 2025 19:40:10 +0000
ROA not after: Mon 23 Feb 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:6121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 30 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:54:2e:67:0c:4b:db:43:b7:46:33:98:9b:79:13:47:da:62:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Nov 25 19:40:10 2025 GMT
Not After : Feb 23 23:59:59 2026 GMT
Subject: serialNumber=d76da8d73d2cc14b0286af9bae9c2023e8b1bb076496cf0564c2d243919a34dc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:17:e6:a6:d0:1b:7a:c3:b7:1e:20:1f:f1:07:
d1:45:c8:0c:2a:8f:3a:02:f0:6a:cd:45:e1:3e:96:
36:41:7e:7f:1e:48:3c:d4:2d:d5:6e:af:9d:64:88:
47:1e:b6:cc:91:1a:34:22:d7:72:d5:26:f0:a9:db:
e3:f3:37:31:96:f0:38:4f:1a:b3:f8:7f:f6:43:42:
8d:62:ae:be:ea:f5:8e:76:32:9d:af:66:6e:e1:a6:
dc:ab:bb:b5:2f:7d:e9:b9:b9:c8:10:83:08:a0:66:
62:8f:0b:3e:2f:42:f7:b4:45:b3:2d:60:54:95:c5:
bd:cb:b0:2a:86:d7:a8:67:df:8f:c3:10:4d:5b:c4:
a8:aa:1e:17:7a:c2:6e:e3:09:0a:b1:cd:7c:ce:dc:
66:24:45:76:89:d1:7c:69:ca:bb:a3:68:e1:2a:d3:
6b:e1:86:1e:b8:43:a6:bd:17:ec:17:2d:81:b8:de:
64:17:a9:11:04:87:96:06:9f:77:ad:0c:24:0d:d0:
88:ef:f9:fb:f1:1e:99:ff:3c:a0:01:0c:7e:44:67:
55:44:c6:f8:75:b1:be:bd:2d:44:5b:55:72:92:4a:
92:d9:3b:a2:f4:6c:1f:ec:fc:fb:ae:60:d7:ba:86:
21:b7:cd:26:ae:21:42:37:1b:e6:ba:c5:61:24:da:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:93:4D:D3:C8:7F:54:40:A4:FC:0D:5A:24:4C:2A:54:17:67:9B
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:6121::/48
Signature Algorithm: sha256WithRSAEncryption
92:95:1d:7e:ea:12:8c:b4:09:4f:54:92:0a:93:d4:ac:dd:41:
b1:87:21:f0:01:34:9c:d2:6f:4a:2f:6f:4d:ef:72:0f:e1:2a:
59:92:20:34:51:fb:95:b1:c0:59:d2:39:f9:3b:5b:a5:74:35:
0a:00:92:c8:ab:dc:41:85:4c:5d:1d:eb:6e:80:89:91:22:83:
ee:65:a1:56:c7:b8:97:d4:2d:23:87:80:b3:6f:1f:c1:8d:72:
4c:a7:96:b7:aa:f9:a7:91:20:cb:02:17:44:e2:b4:5b:0f:47:
71:b2:81:da:6e:f3:cb:c4:87:33:45:9f:42:e4:c3:80:3a:d8:
e6:2d:f5:43:b4:5d:f6:79:6b:5e:dc:28:e4:3d:ee:08:09:61:
93:b7:4f:3c:48:b2:02:fd:03:02:24:4d:51:ad:0a:6a:59:33:
c6:36:4c:79:ff:6a:75:50:3e:23:f2:01:2f:b9:25:f8:69:69:
f7:30:c1:5b:c4:12:e5:36:49:50:f6:3d:ad:f3:97:34:72:d5:
83:72:8f:be:f9:09:16:c7:24:4f:67:77:d1:ef:a4:86:8e:bb:
c5:a7:46:20:82:53:4d:d5:73:15:50:21:47:93:20:fc:6b:18:
8f:ee:df:69:3b:ae:4a:14:b2:57:53:12:4c:c5:d4:48:e4:9c:
81:85:91:d5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUaFQuZwxL20O3RjOYm3kTR9pi7pwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTI1MTk0MDEwWhcNMjYwMjIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNzZkYThkNzNkMmNjMTRiMDI4NmFmOWJhZTljMjAyM2U4
YjFiYjA3NjQ5NmNmMDU2NGMyZDI0MzkxOWEzNGRjMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD4F+am0Bt6w7ceIB/xB9FFyAwqjzoC8GrNReE+ljZBfn8e
SDzULdVur51kiEcetsyRGjQi13LVJvCp2+PzNzGW8DhPGrP4f/ZDQo1irr7q9Y52
Mp2vZm7hptyru7Uvfem5ucgQgwigZmKPCz4vQve0RbMtYFSVxb3LsCqG16hn34/D
EE1bxKiqHhd6wm7jCQqxzXzO3GYkRXaJ0XxpyrujaOEq02vhhh64Q6a9F+wXLYG4
3mQXqREEh5YGn3etDCQN0Ijv+fvxHpn/PKABDH5EZ1VExvh1sb69LURbVXKSSpLZ
O6L0bB/s/PuuYNe6hiG3zSauIUI3G+a6xWEk2rbtAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUaNSTTdPIf1RApPwNWiRMKlQXZ5swHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2I4NjNmMjNmLTQ0MjYtNGM3Ny1hNjE0LTY4OWU3MjJiYjhjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYSEwDQYJKoZIhvcNAQELBQADggEBAJKVHX7qEoy0CU9UkgqT1Kzd
QbGHIfABNJzSb0ovb03vcg/hKlmSIDRR+5WxwFnSOfk7W6V0NQoAksir3EGFTF0d
626AiZEig+5loVbHuJfULSOHgLNvH8GNckynlreq+aeRIMsCF0TitFsPR3Gygdpu
88vEhzNFn0Lkw4A62OYt9UO0XfZ5a17cKOQ97ggJYZO3TzxIsgL9AwIkTVGtCmpZ
M8Y2THn/anVQPiPyAS+5JfhpafcwwVvEEuU2SVD2Pa3zlzRy1YNyj775CRbHJE9n
d9HvpIaOu8WnRiCCU03VcxVQIUeTIPxrGI/u32k7rkoUsldTEkzF1EjknIGFkdU=
-----END CERTIFICATE-----
Generated at Sat Nov 29 11:51:11 2025 by rpki-client