This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa
File: d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa (raw, json)
Hash identifier: AEzVNf+ahM+to3Cn+iPTjh6dhDC+oO0T+/OFDu1vMSo=
Subject key identifier: 45:45:03:4B:82:07:E4:EE:AA:C7:AC:6D:72:D3:4D:85:A8:89:C0:77
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07D96C4B1D9D756753293B892337605965BD9CFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa
Signing time: Sun 07 Dec 2025 00:10:10 +0000
ROA not before: Sun 07 Dec 2025 00:10:10 +0000
ROA not after: Sat 07 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 173.228.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d9:6c:4b:1d:9d:75:67:53:29:3b:89:23:37:60:59:65:bd:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 7 00:10:10 2025 GMT
Not After : Mar 7 23:59:59 2026 GMT
Subject: serialNumber=be2d38f6bda463fa30e762afead6afd41fbaa21f6ec77b2360192ff3b9270cb3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:93:40:1f:36:67:fd:44:bd:35:25:bd:02:
b6:a5:4f:a1:ab:80:d9:e2:c9:39:e4:4a:87:96:d4:
67:37:fd:c5:3b:ec:56:2a:73:ae:06:2a:50:7c:e9:
80:9a:28:90:89:43:23:34:e0:0a:34:a5:16:84:4d:
4f:49:d4:1e:76:a5:8f:60:60:d7:52:d8:86:2c:f7:
d2:45:91:49:d1:45:24:14:41:e7:d0:ba:21:b8:65:
da:43:47:fe:b7:ad:bf:e2:c1:00:e2:3f:a9:ac:e2:
99:f6:44:22:7c:1a:ee:f3:3c:61:b3:51:31:8f:ee:
19:21:c4:42:d6:47:5d:18:94:07:34:ef:48:45:b7:
c2:b8:16:f6:01:44:5f:0f:da:28:12:06:fb:c1:08:
37:25:bd:90:7b:f2:1a:39:b8:8a:80:80:c5:45:6c:
40:05:43:f1:ca:92:f2:7f:4b:24:10:9f:d0:70:1b:
13:d3:91:e9:73:c2:cb:8e:d4:27:1a:b7:5a:9a:dd:
13:c9:01:eb:7c:08:15:15:f8:50:69:54:a5:3c:f9:
99:fd:91:3c:00:f5:be:bd:3f:89:be:df:b0:56:1e:
05:7b:24:8e:36:48:76:32:c1:c4:1e:69:c4:2b:63:
b0:ee:37:5a:46:e5:9a:ce:ba:aa:94:25:77:75:1b:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:45:03:4B:82:07:E4:EE:AA:C7:AC:6D:72:D3:4D:85:A8:89:C0:77
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2a803dd-f1de-45e3-a5f4-3792da16cfef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.228.160.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:f2:8a:a8:20:9f:de:d0:0e:b2:9f:2a:72:2b:f1:6d:1c:d3:
71:25:64:f2:21:77:a2:a2:06:b6:96:dc:33:0f:41:19:f2:57:
76:7a:f5:1f:6e:7f:cd:02:3f:47:74:a1:5b:41:71:81:8c:8b:
f6:e5:3e:01:2f:3b:1e:e5:74:36:cb:7b:a9:f9:da:5d:7e:a9:
b6:da:36:ab:b8:93:37:ed:ad:90:b3:6e:46:80:59:0c:19:41:
58:f7:d4:1f:96:31:8f:03:7d:cb:0a:d9:74:b9:0f:bc:4f:44:
83:1e:31:d1:7f:d9:41:59:0a:99:74:23:a0:87:54:7d:65:19:
63:a8:77:57:36:68:01:42:d6:d4:d2:a8:ad:10:13:09:4a:c2:
6d:49:df:28:0f:54:66:37:eb:f7:bf:e7:18:5f:ba:58:d8:5a:
a5:32:ae:dd:d0:cc:d5:5d:a6:a6:31:cb:13:10:a9:23:18:36:
43:73:97:e4:81:34:5d:4e:09:26:f2:22:90:ba:51:12:bf:68:
07:8f:2c:19:5d:0d:1a:1f:51:6d:8e:08:8e:7b:77:9b:d5:b0:
13:5c:11:cc:8f:95:3d:1a:31:1c:ae:cd:40:7e:41:ab:0e:25:
f7:cf:86:9a:2c:c2:6e:33:ee:37:58:50:84:b5:62:95:25:cc:
6c:3b:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:16:44 2025 by rpki-client