This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8056e345-5ce7-4f9b-99cc-989f413285bb.roa
File: 8056e345-5ce7-4f9b-99cc-989f413285bb.roa (raw, json)
Hash identifier: wAo/SMLlXKoq0UaVKqI22tevcwZ+1GjNDwLUbjeSetQ=
Subject key identifier: DD:DD:6F:ED:9E:23:91:95:4A:3F:78:EC:C4:29:9C:CA:7D:DA:D8:2D
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 1B71C43ABA7A1DF4D8795FD218D4FEAE524DADB1
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8056e345-5ce7-4f9b-99cc-989f413285bb.roa
Signing time: Tue 18 Nov 2025 00:30:10 +0000
ROA not before: Tue 18 Nov 2025 00:30:10 +0000
ROA not after: Mon 16 Feb 2026 23:59:59 +0000
asID: 801
IP address blocks: 2631:0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Nov 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:71:c4:3a:ba:7a:1d:f4:d8:79:5f:d2:18:d4:fe:ae:52:4d:ad:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 18 00:30:10 2025 GMT
Not After : Feb 16 23:59:59 2026 GMT
Subject: serialNumber=8fe89b1a208d4c539cb8aa3af61da8108c0e035c04bf05645d870ee1bf3eab81, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:35:d9:ae:c9:94:17:51:75:7a:33:e4:dc:
47:fb:02:45:13:8c:a9:f8:67:9c:68:8b:b9:2d:35:
4b:6a:d3:75:fd:2b:43:23:d7:89:3d:b0:c6:61:4a:
97:26:65:bf:a6:3e:a6:70:8d:c3:c2:db:34:53:69:
49:e0:97:c2:95:66:78:f7:0b:eb:76:ed:ef:24:de:
6d:bd:7e:cb:6d:af:fe:51:8d:30:6a:66:ed:dc:68:
d3:e7:60:a8:51:27:6a:75:ca:a5:1f:e8:2a:09:8d:
e1:05:4c:be:b2:33:12:89:37:66:f8:99:6e:4e:f0:
bb:6c:9a:b0:da:76:8f:58:80:0e:54:2a:18:ae:8c:
32:f1:e9:bc:83:d6:9a:b1:fd:d0:16:bb:8a:a4:72:
fd:9a:b0:e1:6b:d0:5d:bd:ff:36:43:35:b4:ed:bc:
91:20:14:9b:00:b7:ac:25:f7:5f:0c:d1:30:f2:cb:
8c:c3:97:e2:bf:5f:68:ea:35:cc:0e:f1:4d:8d:01:
a5:62:9b:ed:01:14:7f:10:5a:67:a0:2e:93:3e:42:
10:43:f6:6f:5e:de:68:ab:59:ce:b7:91:f8:a5:ae:
bc:1c:0b:92:cd:6c:c0:85:a8:0a:08:6c:35:17:5a:
76:5c:c2:a3:bf:ef:5c:10:30:0c:40:9f:53:cf:49:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DD:6F:ED:9E:23:91:95:4A:3F:78:EC:C4:29:9C:CA:7D:DA:D8:2D
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8056e345-5ce7-4f9b-99cc-989f413285bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2631:0:1::/48
Signature Algorithm: sha256WithRSAEncryption
6d:7a:34:93:1b:c9:e7:4f:6e:cc:b7:6d:5a:14:9a:3f:f2:ad:
5a:2c:90:51:1a:a0:43:88:6c:3e:ab:1e:e1:b9:88:85:53:1a:
20:e6:9e:00:c7:12:f3:1b:5e:11:95:3c:51:b0:3a:f0:7e:bb:
11:6e:4c:e2:44:65:48:e0:7c:97:b6:b5:2d:66:bf:e9:7c:03:
04:e8:ea:1f:f0:49:b9:b8:f1:6a:29:ae:bd:24:1d:0c:d3:b1:
42:9a:c4:a8:34:54:cf:9e:ea:c3:04:69:16:61:9b:92:8d:b2:
06:d2:66:9f:ae:e0:41:26:d8:4c:a0:47:64:c8:ee:cb:6c:86:
1e:b0:91:53:5d:d3:d2:e5:f1:4f:55:47:f9:9c:4a:f7:e1:6c:
0a:3f:40:27:77:3a:a1:d3:d5:ed:3d:de:4d:49:5e:15:06:9d:
d7:82:20:2f:ff:c4:83:dc:ce:b2:c6:fb:0a:68:96:dc:41:cd:
00:cc:2c:7b:b6:26:63:a6:c2:ef:01:0f:86:2a:55:5c:e0:40:
f1:9c:6d:05:ad:4e:12:f7:76:23:f5:0c:59:4d:8a:11:e4:60:
15:72:a0:f9:3c:a5:9a:98:ad:5e:8f:f7:cb:1b:bc:27:8e:e3:
6e:a9:b8:cd:ba:85:f2:1e:99:e8:8b:ff:b7:57:d1:73:b1:0b:
7f:98:9a:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 21 17:45:43 2025 by rpki-client