This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/690a6427-0431-4128-b562-6a43d052c2a9.roa
File: 690a6427-0431-4128-b562-6a43d052c2a9.roa (raw, json)
Hash identifier: LzxkhXPU9YeRCkiW5AQotZvBW6qAApKVvItYhZ7uD7o=
Subject key identifier: E9:A5:F8:BC:0A:B3:9F:1F:0F:7A:28:03:8F:3C:97:B2:BF:21:F6:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2320C7A4EFDE7DC0E0B59ECAB92939F20B50E1E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/690a6427-0431-4128-b562-6a43d052c2a9.roa
Signing time: Sun 07 Dec 2025 00:21:21 +0000
ROA not before: Sun 07 Dec 2025 00:21:21 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 23.23.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:20:c7:a4:ef:de:7d:c0:e0:b5:9e:ca:b9:29:39:f2:0b:50:e1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 7 00:21:21 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=d7b747ab3325ad9d93739edd24592ed4f88dc4009f9aa174929d8f525d265441, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:7d:ad:6b:ab:05:74:9b:1a:74:9d:96:d4:
02:db:ec:a3:9c:ef:45:3a:01:ee:7c:d9:15:e1:e9:
e6:ce:72:a1:d7:f6:b6:13:3e:16:c3:74:84:86:cf:
c8:35:6c:41:8a:4a:25:e6:75:23:39:ef:99:0c:6b:
12:43:18:ff:3f:6f:7a:2a:1f:9d:12:be:96:da:0c:
9b:ec:6e:a0:ef:60:9e:bd:a4:3c:7d:1c:67:c3:08:
11:a4:99:a0:57:a1:de:c8:49:59:30:97:06:d3:c5:
3c:fc:f5:97:7f:6f:dc:b6:e7:ec:4b:eb:7c:3b:7f:
6f:9c:0a:7d:17:b1:ff:8c:c2:1f:11:00:4f:27:2d:
58:01:32:b0:d7:74:08:4e:f7:1a:2f:4d:6c:1a:29:
ef:7e:bb:bc:1c:63:cb:06:7d:18:f3:39:17:03:3b:
9e:fa:c8:bf:1f:19:71:59:ac:44:b5:8b:90:e2:30:
15:ea:7a:87:31:6e:0e:8c:a6:a8:29:f8:af:9b:57:
ac:06:b9:c6:c9:4c:99:a9:d5:35:43:27:29:e4:6a:
5a:08:ef:a7:30:e0:83:53:ba:71:dd:97:e7:cf:b2:
f7:d0:4f:cc:91:bd:4f:bd:08:4e:62:00:1f:8b:df:
67:8b:64:bd:9f:b0:dd:aa:af:d5:08:e4:42:0d:de:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:F8:BC:0A:B3:9F:1F:0F:7A:28:03:8F:3C:97:B2:BF:21:F6:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/690a6427-0431-4128-b562-6a43d052c2a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.23.72.0/22
Signature Algorithm: sha256WithRSAEncryption
09:71:36:74:db:c3:83:82:a5:9c:2e:32:c9:7c:b7:ad:6b:70:
f2:81:d9:e0:5a:55:33:96:27:94:e9:cd:f2:d5:b2:40:02:02:
cc:67:6e:a6:19:66:a2:6b:77:57:72:c3:6d:86:e1:cd:c8:d5:
ca:66:a5:68:c0:26:77:13:9b:a6:c3:12:28:ea:5e:83:d6:69:
5d:f0:64:01:82:c6:35:42:30:4a:cf:b2:a4:f7:f1:8e:55:c8:
b1:29:de:6e:b8:43:cb:aa:33:33:9a:f2:7c:f0:32:3b:3e:6e:
3c:21:fd:96:06:e0:a5:7a:11:02:0b:95:72:e1:97:89:10:c0:
70:8e:d0:a8:7b:df:af:8d:bb:55:7c:b1:c7:92:d0:df:d2:69:
17:cf:c3:f8:3d:90:60:62:4b:36:e7:77:cd:03:e1:5f:78:5e:
7c:e6:73:1a:e9:dc:28:10:1f:0a:e7:9e:56:4a:77:5e:4d:4e:
f9:ea:64:a7:dc:99:ff:9b:b5:6b:ff:13:8c:7b:25:0a:73:e0:
39:ba:d8:66:ad:2b:47:43:44:9c:63:92:f1:b7:5d:4c:72:37:
1f:c0:cb:0e:3c:d9:c3:83:50:e3:a7:9d:f0:9e:87:57:d7:93:
da:66:fb:67:22:a3:d7:3a:56:97:c0:03:89:83:73:f3:db:1e:
d6:15:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:16:56 2025 by rpki-client