This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa
File: 4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa (raw, json)
Hash identifier: j9huHX29THvb7jPcv0iDG1j6VrZzwdpuqk2lKAMF/uw=
Subject key identifier: 86:A4:A6:EF:C9:14:0F:CB:80:3A:B9:6A:23:C0:F5:54:0F:78:EE:99
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2C12F9027284F24C05FBB8748FE21AAB6F51A33A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa
Signing time: Wed 19 Nov 2025 00:00:31 +0000
ROA not before: Wed 19 Nov 2025 00:00:31 +0000
ROA not after: Tue 17 Feb 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:c50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:12:f9:02:72:84:f2:4c:05:fb:b8:74:8f:e2:1a:ab:6f:51:a3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 19 00:00:31 2025 GMT
Not After : Feb 17 23:59:59 2026 GMT
Subject: serialNumber=04aa113a7c0e2860ed3ff5485c769b54682fdbc333e0da05b608dc6e4d5c88ed, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:78:cc:74:8e:7c:76:b4:2e:1e:3c:c1:dc:
ed:28:cc:af:e6:42:3c:a1:ec:8c:67:28:54:d8:4c:
0c:e1:18:b3:ce:98:cc:48:9f:c4:c2:59:8f:09:8b:
45:e2:ba:42:51:a9:b7:6d:09:43:a0:6d:ee:1e:bc:
91:1b:62:a8:3a:f4:ea:ef:06:22:ca:14:95:fe:2d:
01:3f:e1:41:6a:55:8d:77:c3:29:66:40:eb:5d:14:
1a:fb:e7:78:26:27:83:8f:ee:2f:2c:7f:53:39:dc:
89:90:2a:18:ba:12:48:6a:fc:43:3f:1f:4b:6f:cd:
9f:ec:1a:07:99:5d:21:e1:ec:f2:3c:38:e9:60:08:
92:75:9b:32:d2:d0:73:7d:cc:35:c1:ba:c0:ef:70:
26:95:bc:5d:75:1e:cc:cb:76:4f:b4:98:1d:b5:46:
62:6e:f9:cf:cb:a9:e0:16:1f:7d:24:68:7e:94:76:
3f:de:03:3e:2f:e6:09:f8:88:49:7b:81:7e:ba:57:
03:05:1f:e8:a6:c8:0b:5a:c0:2f:52:dc:c2:35:64:
66:a3:a1:74:e7:f6:f9:98:1e:d3:49:a1:5e:b0:e3:
8a:c3:cd:09:86:3b:ae:86:77:b4:36:0c:a7:ac:12:
c0:27:80:4c:b5:f7:75:12:42:ec:f2:75:20:16:1d:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A4:A6:EF:C9:14:0F:CB:80:3A:B9:6A:23:C0:F5:54:0F:78:EE:99
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4de5d8f0-23fd-4b85-b0a8-dbbf0c67f25f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c50::/44
Signature Algorithm: sha256WithRSAEncryption
5f:ec:94:d1:a1:c1:3c:e0:22:fe:a6:a1:d9:f4:eb:c3:5e:d6:
15:12:12:5e:c0:ad:df:fc:c1:ad:ec:27:a8:42:fd:71:f4:d6:
62:a7:0a:f5:10:d7:d6:f4:36:c1:e9:9c:21:72:e2:15:b0:45:
e3:7b:a2:5a:ee:fc:61:a7:ee:95:2c:14:a9:8b:a4:38:ba:fb:
cd:25:7e:fe:23:0a:54:36:5d:b1:8b:32:f7:6f:15:57:9f:6c:
9d:f7:ab:3f:5f:63:90:7a:21:5d:07:b8:c1:f1:7d:6f:ac:af:
97:ec:b6:a8:e9:12:3b:11:ae:da:48:e6:d0:b4:3c:27:cb:bb:
57:52:2f:07:44:60:e0:ce:e3:e7:e5:8c:21:a9:48:30:eb:80:
f7:b4:5f:77:7c:5f:4d:0b:cc:a0:00:bd:70:dd:f3:23:ba:2e:
27:16:8e:22:2a:04:01:f3:7b:0d:74:ca:93:ae:c2:91:63:39:
9b:69:39:2a:9d:a1:13:1d:fe:e9:35:f9:11:d3:ff:c7:70:f7:
ff:39:c5:0c:fa:ff:c0:7a:10:3b:03:1d:d0:b7:6d:9f:af:67:
9d:b9:06:22:6f:ac:42:9e:01:5f:17:07:ce:d5:6b:95:8f:80:
aa:b0:fc:1e:10:6a:9c:c7:7d:f0:1b:17:a0:f7:64:56:b3:12:
0f:fb:4a:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:39:14 2025 by rpki-client