This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa
File: 4550dcb5-431c-4b07-9e46-224c71cb2b00.roa (raw, json)
Hash identifier: 42oteBNv0h0WoOZBSGAKnFM+f26DypUISJaFYWhU6ug=
Subject key identifier: 96:8B:A9:81:8A:58:89:2A:0C:55:9A:CE:2B:E3:06:BE:FB:F4:C6:BB
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 29C2CBC39CD4CBD46250AB11A08177B530188AFA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa
Signing time: Wed 10 Dec 2025 05:00:26 +0000
ROA not before: Wed 10 Dec 2025 05:00:26 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:5518::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c2:cb:c3:9c:d4:cb:d4:62:50:ab:11:a0:81:77:b5:30:18:8a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 05:00:26 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=73c5bb9f65eb61bebee486a58c297f9be4bc31f0b43593c2f3f7575dc120660f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:26:96:18:09:18:3c:be:b4:95:7a:40:9d:
09:b9:25:8b:3f:a9:98:c2:45:6c:2a:a9:ca:68:56:
10:42:ee:67:81:0b:03:02:44:d4:d9:5b:b8:e2:ed:
60:14:b7:d7:e1:26:e3:56:44:4d:3f:07:b4:a1:ca:
50:dc:34:2a:be:4d:b0:48:06:59:3e:71:e5:08:c3:
11:60:03:3b:ed:a1:96:15:b0:40:44:d1:f5:5e:3a:
4a:41:30:79:41:13:e4:83:94:f2:37:b8:31:ed:72:
2a:4d:e3:3b:1e:e4:ac:fb:ef:bd:a2:d1:9b:58:cc:
d6:50:c3:3a:51:1e:16:84:da:e7:d7:16:33:0c:00:
63:26:73:06:79:fc:83:32:cf:a7:1d:b9:75:42:03:
0e:7a:70:13:99:45:25:a8:92:94:79:c2:44:7b:d9:
43:06:ec:dd:51:e5:38:98:57:5d:29:0f:08:0f:38:
53:94:1a:6b:29:a0:10:8b:0f:6d:23:28:e6:c4:43:
7d:27:c7:40:47:60:a2:28:8e:b3:05:1b:22:5c:27:
e2:aa:bc:1a:fa:c4:95:67:2b:47:9b:f6:1a:6b:1a:
fb:0a:9e:78:a0:bc:29:00:6a:6c:6f:14:7b:bb:35:
fd:ec:ac:bd:ce:48:a0:e9:63:a4:2e:cf:5b:00:8c:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8B:A9:81:8A:58:89:2A:0C:55:9A:CE:2B:E3:06:BE:FB:F4:C6:BB
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:5518::/48
Signature Algorithm: sha256WithRSAEncryption
23:fc:80:95:44:d4:55:e3:0b:b0:2b:f3:71:a4:79:08:98:0a:
ee:7c:72:63:64:b6:f7:27:56:f5:14:8e:ed:5c:52:84:2d:14:
40:90:41:96:e2:3e:32:99:b6:fb:88:08:07:ed:7b:5d:bc:a7:
eb:1b:27:63:5d:fe:ec:ee:1b:3e:26:d8:b7:bc:1e:64:b4:b1:
43:0d:2c:54:a0:0c:34:4c:b8:ab:84:42:48:7b:50:58:f8:43:
51:dc:80:a2:1c:24:8f:f9:59:01:a5:93:e0:75:03:2b:9c:9f:
43:db:9d:46:cf:51:98:89:a3:b2:ee:94:df:78:68:5e:3b:de:
c0:42:7f:df:fd:de:08:5f:1d:72:e0:0c:ce:a8:12:f6:dc:05:
b8:62:36:11:8f:2b:2a:c0:87:aa:7e:d0:9f:16:0f:a3:53:ce:
cd:6c:6c:f1:1b:d0:62:76:66:8a:51:d7:66:ab:fc:b0:69:e3:
b3:0a:09:9e:0d:57:59:29:00:71:78:be:69:e3:ff:05:0b:bf:
ec:93:10:f8:41:8f:83:9f:f0:a0:75:e8:ff:5f:1d:fc:3a:98:
b6:1e:36:e7:1c:03:b1:e4:94:56:0d:2f:2d:a5:40:d8:35:fe:
18:48:4d:61:7d:5f:5b:9a:24:21:0f:26:32:9e:ee:69:5d:08:
f4:0c:57:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:51:44 2025 by rpki-client