This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa
File: 0668f39a-0950-45e9-b174-8f7a83ff26e9.roa (raw, json)
Hash identifier: iKSkbOC83a1RjdX/xGpAImOE7UYR9IB0lQaW7PASjYI=
Subject key identifier: 3F:C9:2E:F6:13:98:27:46:FE:94:50:9C:4C:34:3F:63:28:67:87:1A
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4DAF8E77A2EF2912CA143C7AC83EB23F1A143ABD
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa
Signing time: Wed 10 Dec 2025 05:00:28 +0000
ROA not before: Wed 10 Dec 2025 05:00:28 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:af:8e:77:a2:ef:29:12:ca:14:3c:7a:c8:3e:b2:3f:1a:14:3a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 05:00:28 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=062c3d7a2dbb8ced471a5206fbf40da311bffb1e627d36ca05e7cfb6e934ebdb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:60:7f:55:d1:5a:68:37:3c:ce:e0:36:ed:
8e:74:85:ac:21:10:d0:80:57:81:4b:18:eb:70:f4:
f6:23:7c:e8:47:34:c1:3c:be:89:85:cd:73:51:0c:
c5:bf:3f:84:59:0c:05:7a:e1:1f:3a:23:e5:17:b6:
d3:e1:d5:65:5b:a7:5f:42:77:18:5a:a3:00:53:49:
92:52:f3:a1:02:7a:a1:75:7e:45:c0:2d:3f:38:99:
34:e7:f6:b6:d0:5c:0b:87:cd:d0:4e:0c:8e:59:6f:
bc:7d:e0:2e:83:2e:a2:f2:03:1e:61:fb:7f:7c:c9:
ed:a0:71:2c:95:07:60:a2:de:87:02:13:16:44:ae:
49:89:c9:84:df:55:c9:e1:5d:b1:b4:74:87:51:0c:
d5:fa:9a:28:34:be:c8:35:63:67:79:5c:83:cd:0c:
77:a5:46:57:44:d1:5b:cc:63:ee:72:d1:73:96:52:
b9:2b:20:cd:d0:40:e7:39:c1:cf:e6:a3:6f:12:93:
a5:4c:41:32:5f:6b:70:5b:e5:fa:60:6a:ed:fa:68:
5c:24:78:9a:38:5e:d4:fe:4d:6a:51:cc:61:bc:f5:
1d:72:64:5f:73:17:ae:47:96:8b:2e:6d:60:de:57:
9b:57:7f:27:ce:01:5d:d4:2c:ca:ac:2f:96:86:f9:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C9:2E:F6:13:98:27:46:FE:94:50:9C:4C:34:3F:63:28:67:87:1A
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
75:fe:54:77:72:9e:f4:4f:3f:5f:27:4d:3a:9f:4f:ea:2a:b6:
98:7e:6c:43:55:3c:cc:cb:c0:de:2c:a5:bb:6b:40:c3:c3:2a:
af:ab:53:5e:37:7c:eb:a8:d1:c7:5b:89:6d:a1:52:55:2e:cf:
64:71:bc:ab:1f:c9:34:1d:76:a0:63:ec:4f:c3:88:3b:b7:c8:
8d:88:84:87:e6:24:f9:59:bf:6c:d6:54:ca:64:3e:44:28:6b:
fe:7c:44:31:7b:8f:b3:0f:61:30:05:d5:0d:f8:a9:a1:45:2d:
80:b4:50:93:b0:40:75:ec:83:e0:c9:2b:29:0b:c1:f8:73:df:
27:2c:dd:ca:5c:d5:14:ce:06:4b:be:aa:78:b5:9e:0b:2d:e9:
ac:21:e5:4e:70:46:53:1f:7d:25:9a:89:58:63:14:06:79:4d:
7a:ca:96:bb:b1:25:3e:58:d2:0e:1c:6d:a8:20:a3:87:62:ab:
87:03:33:32:a6:c7:eb:12:56:a7:de:88:18:13:e3:60:01:07:
c4:e2:85:9d:ab:f4:ba:6f:4f:7f:87:95:fb:b2:ac:6b:92:c2:
b1:b6:2e:8e:41:5d:91:01:5e:82:63:12:fc:6a:40:63:79:9a:
80:77:ba:5c:98:9e:26:7a:fb:1f:32:62:c8:0f:e2:19:3c:a2:
37:84:e1:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 17:05:05 2025 by rpki-client