This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa
File: 431a515b-07a5-4778-abb4-267624108e41.roa (raw, json)
Hash identifier: IQoAiIZ5wzFkPSLXozHUGY8S6KXfrv0z16HzcXGhRWs=
Subject key identifier: 08:0E:D2:F2:BA:88:00:BE:F5:82:04:CC:07:78:54:EC:46:7C:4C:6B
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2D0D3EAC2970A931248A083670C94ACC6CBD1D4C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa
Signing time: Sat 15 Nov 2025 04:50:25 +0000
ROA not before: Sat 15 Nov 2025 04:50:25 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:30d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0d:3e:ac:29:70:a9:31:24:8a:08:36:70:c9:4a:cc:6c:bd:1d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 15 04:50:25 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=85c1f798063fb79a4d5df4bf1dc26cac261130fc9b6ee105eb1d16b17fc86f40, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:5a:55:ec:94:7e:67:82:1b:64:a1:61:fd:
96:7f:98:10:54:e7:42:f6:3c:b7:e6:0f:2d:c5:d0:
4e:ca:09:2c:96:e1:a6:a5:d7:95:eb:20:71:f5:d5:
2c:d6:62:ee:7a:ff:9e:68:90:bf:0c:2f:93:03:99:
47:41:00:ad:18:43:a9:bb:85:19:41:5b:9f:26:60:
29:8c:8d:3c:da:0c:6b:5c:e5:a1:b4:18:4e:f5:17:
fe:47:c2:34:bf:cd:76:92:c0:4f:b3:93:61:75:e0:
67:83:4a:46:d6:f3:81:90:46:ce:20:f4:7e:3e:66:
e7:ec:a2:43:3f:36:c9:f2:33:42:96:98:7c:eb:66:
61:1d:25:57:f8:b6:33:7b:2a:e4:e1:db:94:ea:87:
92:c5:ca:e3:82:a4:07:aa:a5:f5:e7:21:af:a0:52:
95:9e:b9:6e:0a:1f:79:12:db:51:4d:e5:bb:41:37:
c5:c5:6f:a2:6b:ff:d9:b9:2b:69:9e:56:7f:c3:3c:
a5:c5:c0:45:d4:f3:70:ea:f5:33:36:97:ae:d5:18:
91:98:dd:7b:a3:44:26:30:cd:c0:95:81:fb:95:31:
0d:23:ab:11:fc:c1:b6:11:f5:9e:6a:fc:77:41:a9:
88:dc:43:28:5e:1a:b6:b7:6e:1d:81:67:23:a8:8b:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0E:D2:F2:BA:88:00:BE:F5:82:04:CC:07:78:54:EC:46:7C:4C:6B
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/431a515b-07a5-4778-abb4-267624108e41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:30d::/48
Signature Algorithm: sha256WithRSAEncryption
98:61:7a:8e:f7:73:46:24:3f:71:c9:5e:a4:c6:06:6b:9f:34:
ba:a8:a8:f7:1c:0b:68:44:48:03:cf:44:e1:d7:62:c8:8a:b7:
f0:e6:3d:52:3c:10:d7:ae:02:8d:4c:a7:94:5f:3b:ea:c4:ec:
d7:70:64:fc:94:41:c1:47:11:53:53:b4:9f:91:80:7e:5d:a5:
78:4b:d2:06:65:85:b0:68:aa:e6:47:8b:1b:8e:ab:e1:50:95:
ef:45:04:c4:46:2e:69:d5:86:48:39:2a:4a:0a:47:85:09:0b:
6b:9a:f6:7e:ea:8b:9f:43:13:d8:c0:dc:40:94:66:9d:56:c5:
ff:88:e4:17:a4:6c:6f:5e:5f:72:9d:df:eb:b3:c6:14:cd:0a:
9b:f9:4d:90:e2:43:5b:54:7d:e1:dd:2d:de:88:b6:3c:51:ab:
83:12:e2:20:a8:f4:e8:d0:c2:18:fb:71:ae:ef:3f:02:2e:5c:
91:66:5f:e0:cd:bb:4d:5b:64:7c:fe:c4:42:1d:cb:a7:6d:cb:
a0:20:2a:57:d7:51:18:f9:82:20:49:31:e8:6f:38:fe:65:44:
d1:fc:5a:81:b8:b2:aa:a3:5a:38:1e:5e:e8:ef:6c:33:9b:93:
46:d0:23:19:61:30:4b:af:b9:35:b0:d8:ff:25:0e:6f:23:99:
89:c9:e1:ca
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULQ0+rClwqTEkigg2cMlKzGy9HUwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMTE1MDQ1MDI1WhcNMjUxMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NWMxZjc5ODA2M2ZiNzlhNGQ1ZGY0YmYxZGMyNmNhYzI2
MTEzMGZjOWI2ZWUxMDVlYjFkMTZiMTdmYzg2ZjQwMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCt3VpV7JR+Z4IbZKFh/ZZ/mBBU50L2PLfmDy3F0E7KCSyW
4aal15XrIHH11SzWYu56/55okL8ML5MDmUdBAK0YQ6m7hRlBW58mYCmMjTzaDGtc
5aG0GE71F/5HwjS/zXaSwE+zk2F14GeDSkbW84GQRs4g9H4+ZufsokM/NsnyM0KW
mHzrZmEdJVf4tjN7KuTh25Tqh5LFyuOCpAeqpfXnIa+gUpWeuW4KH3kS21FN5btB
N8XFb6Jr/9m5K2meVn/DPKXFwEXU83Dq9TM2l67VGJGY3XujRCYwzcCVgfuVMQ0j
qxH8wbYR9Z5q/HdBqYjcQyheGra3bh2BZyOoixeRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUCA7S8rqIAL71ggTMB3hU7EZ8TGswHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzQzMWE1MTViLTA3YTUtNDc3OC1hYmI0LTI2NzYyNDEwOGU0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAAw0wDQYJKoZIhvcNAQELBQADggEBAJhheo73c0YkP3HJXqTGBmuf
NLqoqPccC2hESAPPROHXYsiKt/DmPVI8ENeuAo1Mp5RfO+rE7NdwZPyUQcFHEVNT
tJ+RgH5dpXhL0gZlhbBoquZHixuOq+FQle9FBMRGLmnVhkg5KkoKR4UJC2ua9n7q
i59DE9jA3ECUZp1Wxf+I5BekbG9eX3Kd3+uzxhTNCpv5TZDiQ1tUfeHdLd6ItjxR
q4MS4iCo9OjQwhj7ca7vPwIuXJFmX+DNu01bZHz+xEIdy6dty6AgKlfXURj5giBJ
MehvOP5lRNH8WoG4sqqjWjgeXujvbDObk0bQIxlhMEuvuTWw2P8lDm8jmYnJ4co=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:30:35 2025 by rpki-client