This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa
File: 2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa (raw, json)
Hash identifier: /DBMs8AeDUwUBKU2sPke6PXNjy3m/j6cZ8oRDWgrBaQ=
Subject key identifier: 1F:9F:64:82:1F:2B:76:9B:94:41:C6:CE:05:3A:F5:49:8A:9E:14:F4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46441EC293859AEF1546F138EFAEB3730AD8B674
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa
Signing time: Wed 10 Dec 2025 00:30:14 +0000
ROA not before: Wed 10 Dec 2025 00:30:14 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fef:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:44:1e:c2:93:85:9a:ef:15:46:f1:38:ef:ae:b3:73:0a:d8:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 10 00:30:14 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=23123efebe25d518ac3598a6610a988e380535de5a921e92e8fcb4578bb512bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:d3:77:1c:f7:1c:6b:66:b2:5b:d4:19:4f:
59:81:5d:49:c7:32:4f:fc:50:67:09:d8:60:bd:6f:
20:82:40:1d:8a:e3:2f:19:a6:88:51:1e:02:35:dd:
1e:41:47:b0:80:d3:88:6d:d2:df:92:da:1e:33:71:
eb:42:f2:1d:52:a8:c3:55:f4:aa:d6:d0:60:c5:12:
cc:86:51:53:8d:f5:db:61:f2:79:96:a9:8b:62:5a:
e8:01:b3:87:1c:4c:78:89:f3:14:33:e5:b3:66:08:
4d:8a:a6:bc:8a:98:da:1c:20:95:95:af:8d:6a:b7:
6a:8a:5f:e6:c8:7c:07:84:a0:ce:b3:06:30:b2:87:
d5:4a:f6:44:9d:d6:33:91:3f:37:17:d1:dd:93:ed:
9c:46:d9:db:92:c3:2b:ce:69:19:3b:ce:6f:e5:3c:
f8:66:c4:49:e0:62:c3:9d:7c:8d:49:fb:8e:db:20:
99:8e:50:69:3c:fb:c1:de:db:06:b3:2a:e9:29:45:
93:59:d5:35:b8:ee:99:b4:92:02:99:41:27:a2:be:
78:a0:60:61:c6:aa:fc:56:15:66:36:7c:ff:bc:57:
9c:96:d2:66:05:77:d0:a3:23:9e:d1:82:dd:e0:70:
9d:80:8a:22:9e:be:ee:a8:59:18:14:de:0c:2a:aa:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9F:64:82:1F:2B:76:9B:94:41:C6:CE:05:3A:F5:49:8A:9E:14:F4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fef:5000::/40
Signature Algorithm: sha256WithRSAEncryption
38:2c:e8:fc:13:01:ef:c6:3c:d0:80:dc:54:92:63:2d:1a:55:
7b:d1:56:1e:89:b3:20:7b:65:db:f9:83:2b:27:61:74:9d:94:
c6:8d:30:d6:42:bf:1e:7d:e1:26:52:7f:eb:a7:dd:84:d9:a5:
58:4b:e2:ee:78:7f:35:c7:98:f0:80:b7:8b:45:c9:fc:be:f8:
ef:1a:2f:9a:ea:36:2e:bb:4c:8f:d7:a7:a9:ae:34:15:fe:50:
20:a6:ae:8e:08:49:28:b6:1f:ef:97:17:6c:f7:cb:af:4c:62:
aa:77:be:b5:32:21:5c:ae:f8:12:96:99:47:8b:23:84:ec:b9:
40:d8:5d:61:dc:46:8f:69:b2:2d:75:94:15:91:5d:42:8b:11:
a3:4a:f7:13:05:cc:8d:cf:97:f8:f2:ea:2a:d7:24:65:9f:1d:
c2:a5:16:34:5b:4c:93:7b:ec:7e:d2:14:78:e6:c4:b2:be:a5:
f1:88:1e:1b:9d:fd:84:d0:33:cb:70:6a:82:b3:13:d1:0d:b0:
4b:b1:92:46:d9:c2:64:d6:64:5e:d0:54:d3:52:88:bb:59:3d:
66:bb:fc:44:9d:d9:ed:48:02:58:6a:b6:32:83:7c:56:f7:f2:
6d:63:1c:bf:69:72:34:0c:3e:c6:8d:ab:f3:8d:c3:48:1a:c0:
8c:98:31:1e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIURkQewpOFmu8VRvE4766zcwrYtnQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjEwMDAzMDE0WhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMzEyM2VmZWJlMjVkNTE4YWMzNTk4YTY2MTBhOTg4ZTM4
MDUzNWRlNWE5MjFlOTJlOGZjYjQ1NzhiYjUxMmJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZiNN3HPcca2ayW9QZT1mBXUnHMk/8UGcJ2GC9byCCQB2K
4y8ZpohRHgI13R5BR7CA04ht0t+S2h4zcetC8h1SqMNV9KrW0GDFEsyGUVON9dth
8nmWqYtiWugBs4ccTHiJ8xQz5bNmCE2KpryKmNocIJWVr41qt2qKX+bIfAeEoM6z
BjCyh9VK9kSd1jORPzcX0d2T7ZxG2duSwyvOaRk7zm/lPPhmxEngYsOdfI1J+47b
IJmOUGk8+8He2wazKukpRZNZ1TW47pm0kgKZQSeivnigYGHGqvxWFWY2fP+8V5yW
0mYFd9CjI57Rgt3gcJ2AiiKevu6oWRgU3gwqqh9hAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUH59kgh8rdpuUQcbOBTr1SYqeFPQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJiZmQyNzlkLTUzYzMtNDdkOS1hMjgyLWMxZjI0OWIyYTVmOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/vUDANBgkqhkiG9w0BAQsFAAOCAQEAOCzo/BMB78Y80IDcVJJjLRpV
e9FWHomzIHtl2/mDKydhdJ2Uxo0w1kK/Hn3hJlJ/66fdhNmlWEvi7nh/NceY8IC3
i0XJ/L747xovmuo2LrtMj9enqa40Ff5QIKaujghJKLYf75cXbPfLr0xiqne+tTIh
XK74EpaZR4sjhOy5QNhdYdxGj2myLXWUFZFdQosRo0r3EwXMjc+X+PLqKtckZZ8d
wqUWNFtMk3vsftIUeObEsr6l8YgeG539hNAzy3BqgrMT0Q2wS7GSRtnCZNZkXtBU
01KIu1k9Zrv8RJ3Z7UgCWGq2MoN8VvfybWMcv2lyNAw+xo2r843DSBrAjJgxHg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:38:07 2025 by rpki-client