This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa
File: 0b456d9a-b78d-45ba-9949-b00a9581f118.roa (raw, json)
Hash identifier: jYHVqXLMjmXel0Vv0k+skT+fNKoHnBpSZQjhgFg1AoQ=
Subject key identifier: 1C:BE:80:7D:23:3A:A5:C4:BE:C0:D4:F3:FB:8E:6B:98:D8:42:22:ED
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 70FF8B1BFAD0CCB9F376A7166071491568B4953D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa
Signing time: Wed 10 Dec 2025 05:00:44 +0000
ROA not before: Wed 10 Dec 2025 05:00:44 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ff:8b:1b:fa:d0:cc:b9:f3:76:a7:16:60:71:49:15:68:b4:95:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 05:00:44 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=a40bbbe08cb6444b2b47ad8899f4c8011608e6e1e93163ef17c010699ab87621, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:3a:cc:65:b4:28:ee:a5:7d:81:27:91:56:
01:1e:79:0a:94:d8:0a:73:00:98:ae:39:50:75:c5:
da:ce:af:b6:bc:18:4b:5e:65:85:e2:32:09:ce:a3:
f1:ec:14:3f:dc:6b:ba:96:a3:2d:7f:28:6f:d3:fa:
c4:6c:64:b2:19:57:30:df:f5:4f:32:9e:ff:10:69:
3a:79:92:f8:60:70:37:d6:80:95:26:b8:25:01:49:
92:65:72:92:4d:b5:23:37:3b:b1:fd:3f:e8:96:41:
89:18:5d:ee:c1:9e:5f:ed:45:93:b1:6e:fb:2c:24:
da:b4:d2:18:e3:37:18:10:57:53:0f:c7:b9:6f:96:
3e:8d:5c:8a:87:0c:d8:45:61:b2:54:ca:a4:8d:49:
42:9e:10:96:1a:c1:9a:cf:03:e6:74:ef:b5:a7:81:
9a:53:2b:dc:6d:8c:51:93:9c:03:fa:1d:32:4c:e8:
41:a9:02:7e:c7:07:07:08:d0:f9:d7:0e:36:6f:f9:
85:d1:a0:f3:9f:6f:3f:cc:6f:64:3b:24:bf:80:5c:
26:19:a6:88:f1:e9:7d:07:05:8f:9e:d7:f7:7d:cf:
ff:d4:fb:99:ea:5a:be:e7:0f:c6:35:29:1f:5a:b3:
e1:e5:4e:87:ed:a2:73:ba:5a:75:be:c4:c9:88:37:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BE:80:7D:23:3A:A5:C4:BE:C0:D4:F3:FB:8E:6B:98:D8:42:22:ED
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:ec00::/42
Signature Algorithm: sha256WithRSAEncryption
3d:66:30:b1:ff:39:9f:52:08:1b:28:23:7a:01:5c:c2:de:4f:
21:d5:a9:5d:e0:b5:13:6c:00:ad:30:1d:5a:04:ca:f6:42:f6:
87:5d:12:96:6c:bd:d4:54:60:9e:49:a1:fb:40:fe:cf:6e:40:
ec:6d:fd:50:72:7f:55:8c:1c:02:cc:b0:fc:6d:7e:9a:e7:e9:
9a:6f:15:fa:d1:14:28:5c:29:e8:76:67:c2:7e:89:79:13:ce:
ec:ee:31:7c:92:85:d3:cc:08:c2:e4:c5:9f:0f:67:a6:f3:bb:
79:22:08:4a:41:2f:3b:d8:fb:8e:3e:4c:6c:a3:61:7c:bb:35:
55:35:2d:45:53:9d:54:18:dc:05:0b:f3:1c:8a:1b:49:cd:b1:
7a:ee:71:84:d7:c5:52:91:b8:22:81:df:9f:91:c0:0c:8f:6d:
49:5c:b4:a1:59:72:80:5f:4e:06:6a:fc:21:08:fd:8f:cd:5c:
90:f3:ad:78:71:cb:8e:45:6d:b0:92:37:cc:79:02:37:9e:0f:
ae:91:3a:92:55:08:9f:a1:c5:38:04:cf:2a:10:25:f5:ae:d1:
0c:3d:a3:0a:54:cd:4a:3a:12:19:74:7f:3c:17:a1:d7:49:7f:
16:e0:2d:41:50:05:cf:5c:20:a1:32:54:bb:5d:af:98:ea:1a:
ba:eb:43:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 17:05:52 2025 by rpki-client