This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b58e920-b899-4ae0-a5b8-7194d06aaeb5.roa
File: 9b58e920-b899-4ae0-a5b8-7194d06aaeb5.roa (raw, json)
Hash identifier: wJG35WiR5hZ1H+1svdFLf+Ds+Cl6pdZUlPncndY+oP8=
Subject key identifier: C5:A7:1D:00:80:F3:1F:A1:7A:23:B1:37:E7:EA:D1:D5:6E:D6:A3:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30B412260CC9E26DD2BE11F1016B02F36AF2B93B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b58e920-b899-4ae0-a5b8-7194d06aaeb5.roa
Signing time: Thu 11 Dec 2025 00:21:06 +0000
ROA not before: Thu 11 Dec 2025 00:21:06 +0000
ROA not after: Wed 11 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.26.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b4:12:26:0c:c9:e2:6d:d2:be:11:f1:01:6b:02:f3:6a:f2:b9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 11 00:21:06 2025 GMT
Not After : Mar 11 23:59:59 2026 GMT
Subject: serialNumber=331b456cf8a201d47dbca104c1ca6343c54563582459f5020a105b41be402534, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:25:a3:3a:e1:14:69:53:a5:a3:b0:41:49:
67:fe:4a:77:28:99:b5:f9:96:2a:2f:23:96:0c:9c:
d9:8d:9d:86:22:a6:18:e6:db:c3:8e:0f:14:5f:7b:
84:e2:38:06:aa:09:45:91:37:5f:fb:47:f1:8a:a4:
e2:5a:45:aa:06:29:41:f6:7f:c9:a8:28:25:6d:82:
80:55:af:ac:22:88:02:b8:82:34:aa:94:5b:14:c3:
f7:86:89:25:4c:3c:af:ab:14:1d:6e:4e:10:62:27:
a6:7f:83:4d:4a:d5:ab:94:71:73:76:1a:b6:de:d0:
b6:95:f1:d0:42:2c:a1:e5:f5:3e:3d:e6:fd:4a:24:
24:99:0e:10:b5:bf:06:2f:7a:23:b7:2a:1a:ae:c9:
c5:e3:3b:56:a7:26:68:13:ad:2b:d0:85:50:07:62:
2f:c3:4a:70:6d:ba:20:8a:fb:c4:ec:0b:f8:55:d4:
ca:99:5b:07:ff:8d:f7:10:d0:05:6f:92:31:dc:d0:
75:51:2c:b9:8e:0f:88:bc:a8:9c:4c:17:90:cd:d9:
34:d4:e5:9c:57:eb:4c:48:7c:c5:e7:e8:17:2b:8e:
4a:e9:6c:37:4c:74:6b:e2:b7:c1:87:16:b8:9a:7d:
ac:45:45:9a:d3:87:5b:14:46:37:f3:d7:92:7b:39:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A7:1D:00:80:F3:1F:A1:7A:23:B1:37:E7:EA:D1:D5:6E:D6:A3:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b58e920-b899-4ae0-a5b8-7194d06aaeb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.26.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d7:5e:5c:73:b4:f6:98:b0:c1:22:49:1c:a9:49:91:33:8a:9a:
81:92:05:5a:e9:16:8a:f0:0b:0e:98:5b:71:ba:7a:75:0b:65:
ca:28:cf:5c:c4:be:83:af:af:48:da:ff:79:64:df:52:c1:15:
ce:f7:af:3b:ae:43:78:fe:9e:0e:67:e5:f6:e7:be:4b:13:9d:
e8:96:5d:cb:16:7c:4f:ea:ac:15:03:33:b9:60:37:db:b3:88:
9c:a8:2e:ed:66:9c:8f:bf:76:01:cb:e4:24:0c:b0:5a:d4:9d:
cf:fb:ad:4c:6f:37:62:46:5f:86:53:3b:e0:64:24:93:8c:c0:
4e:c1:91:58:08:81:d5:3b:80:d3:d4:78:4e:c3:da:bd:d9:60:
00:69:57:32:47:b8:85:53:d7:e7:a6:75:8a:4b:01:55:d9:28:
2d:48:54:0a:f3:36:11:54:6c:a3:12:5d:cb:0b:b7:92:d9:90:
8a:4f:13:07:b0:57:29:9b:79:27:f5:64:b1:7e:03:f4:02:a5:
33:a4:bf:9f:66:7b:1f:1f:8d:0a:db:1a:c2:7a:f9:67:27:d8:
c7:0e:39:fe:7d:0e:21:f8:de:0c:94:fd:a8:2b:e3:7d:1d:34:
9d:2e:52:82:81:7f:9d:1f:a5:ce:e4:5c:02:09:24:96:d3:c9:
b9:0c:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:52:14 2025 by rpki-client