This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef295804-89a7-4ec3-826e-73e32733dc02.roa
File: ef295804-89a7-4ec3-826e-73e32733dc02.roa (raw, json)
Hash identifier: EQl+bpEDwb+hl/wfq2brdg74tEsxIDn3wIATNVecGCA=
Subject key identifier: 7F:C2:4E:9D:64:3C:9E:1B:EA:3A:81:4D:BC:4B:2B:1D:9E:A2:75:67
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 178AA9A48DE761844DE0614797D5CE43CFBEFD36
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef295804-89a7-4ec3-826e-73e32733dc02.roa
Signing time: Wed 10 Dec 2025 05:00:10 +0000
ROA not before: Wed 10 Dec 2025 05:00:10 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:551d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8a:a9:a4:8d:e7:61:84:4d:e0:61:47:97:d5:ce:43:cf:be:fd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Dec 10 05:00:10 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=e566436bbc994aa367c84b794237405569a1423dad973d0ad52de131161c7d7d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:b8:55:7c:ec:1c:07:9d:d7:14:82:be:e1:
60:13:16:35:73:17:84:1a:4b:c5:e3:37:57:80:06:
ee:32:15:ef:2a:2e:32:e2:6a:0e:39:1a:63:24:89:
76:9d:4a:74:b3:ce:19:00:a4:52:61:ef:a6:5a:6d:
d0:67:b3:8b:0b:1c:24:ba:fe:a0:64:c9:87:d6:d9:
ec:e3:8f:7b:69:32:ae:1d:72:8f:0d:9e:b8:b8:4e:
30:c2:a5:33:85:07:73:b0:5c:df:47:fe:7d:0a:eb:
69:a0:c4:68:fd:1d:6c:1d:8b:af:f5:09:b3:61:cc:
8f:78:1d:04:e8:86:b2:b5:73:1f:93:ff:5e:ec:b1:
2d:85:04:b0:1e:09:af:e1:a5:b9:33:b0:94:7a:2e:
fb:b8:73:50:90:32:0f:f2:c2:28:e9:53:fe:86:78:
51:74:a9:9b:5d:23:d3:1f:32:82:cd:fc:de:68:eb:
c2:b8:0c:2a:3f:25:88:28:07:38:e0:e0:8d:57:a6:
c1:7d:01:8a:5f:b0:61:71:db:4f:9d:b0:ed:7f:ec:
80:84:9d:3a:4f:35:0d:95:44:13:ff:c6:4c:79:d3:
55:b6:b6:0b:11:36:e4:29:38:8f:9b:41:d0:2d:20:
9d:60:cd:08:44:b5:08:c7:7d:60:e2:a9:63:c6:9d:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:4E:9D:64:3C:9E:1B:EA:3A:81:4D:BC:4B:2B:1D:9E:A2:75:67
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef295804-89a7-4ec3-826e-73e32733dc02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:551d::/48
Signature Algorithm: sha256WithRSAEncryption
81:6c:d3:03:7c:47:72:57:2f:b3:d4:2c:69:e9:46:51:e6:4b:
8d:0c:17:2d:d9:a7:fe:ab:69:95:03:75:f0:51:a1:15:a6:8d:
b4:dc:4f:d2:fb:a3:45:90:28:42:a8:38:50:3b:9e:2c:e3:0d:
2d:a0:7a:f8:1b:8b:72:30:66:71:2e:d8:51:f4:61:ce:cd:00:
49:8d:16:52:de:a4:4b:08:d0:f2:a4:45:8f:44:3e:51:9e:78:
5c:e7:41:b6:8e:55:cc:91:bf:16:c2:86:ba:b1:59:fd:31:cd:
61:d5:18:f9:0a:1b:a6:13:2a:81:72:75:2a:43:15:4a:f6:3c:
1b:9a:fa:ea:ac:5a:cb:9f:73:59:b3:cc:32:64:b6:5c:e0:56:
42:92:89:76:17:09:8a:71:7c:85:4c:a8:dd:53:da:a4:0c:87:
3a:10:c4:5b:69:75:63:7c:ab:97:22:23:9d:37:3a:cd:49:06:
5b:45:df:6b:04:54:d1:99:f7:d9:b0:c5:dc:8a:c8:f9:01:33:
32:4d:84:f9:ac:d0:31:c0:34:eb:a9:b0:6e:ff:db:4f:27:c4:
8b:bd:fe:83:16:dc:ba:c5:02:e4:28:ef:90:5c:f5:c4:8f:f0:
22:28:36:b3:1b:96:ef:c6:d8:19:7a:b6:27:04:0c:2d:2f:e7:
df:8c:9c:cb
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUF4qppI3nYYRN4GFHl9XOQ8++/TYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMjEwMDUwMDEwWhcNMjYwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNTY2NDM2YmJjOTk0YWEzNjdjODRiNzk0MjM3NDA1NTY5
YTE0MjNkYWQ5NzNkMGFkNTJkZTEzMTE2MWM3ZDdkMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0ArhVfOwcB53XFIK+4WATFjVzF4QaS8XjN1eABu4yFe8q
LjLiag45GmMkiXadSnSzzhkApFJh76ZabdBns4sLHCS6/qBkyYfW2ezjj3tpMq4d
co8Nnri4TjDCpTOFB3OwXN9H/n0K62mgxGj9HWwdi6/1CbNhzI94HQTohrK1cx+T
/17ssS2FBLAeCa/hpbkzsJR6Lvu4c1CQMg/ywijpU/6GeFF0qZtdI9MfMoLN/N5o
68K4DCo/JYgoBzjg4I1XpsF9AYpfsGFx20+dsO1/7ICEnTpPNQ2VRBP/xkx501W2
tgsRNuQpOI+bQdAtIJ1gzQhEtQjHfWDiqWPGnSnXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUf8JOnWQ8nhvqOoFNvEsrHZ6idWcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2VmMjk1ODA0LTg5YTctNGVjMy04MjZlLTczZTMyNzMzZGMwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVR0wDQYJKoZIhvcNAQELBQADggEBAIFs0wN8R3JXL7PULGnpRlHm
S40MFy3Zp/6raZUDdfBRoRWmjbTcT9L7o0WQKEKoOFA7nizjDS2gevgbi3IwZnEu
2FH0Yc7NAEmNFlLepEsI0PKkRY9EPlGeeFznQbaOVcyRvxbChrqxWf0xzWHVGPkK
G6YTKoFydSpDFUr2PBua+uqsWsufc1mzzDJktlzgVkKSiXYXCYpxfIVMqN1T2qQM
hzoQxFtpdWN8q5ciI503Os1JBltF32sEVNGZ99mwxdyKyPkBMzJNhPms0DHANOup
sG7/208nxIu9/oMW3LrFAuQo75Bc9cSP8CIoNrMblu/G2Bl6ticEDC0v59+MnMs=
-----END CERTIFICATE-----
Generated at Sat Dec 20 11:30:00 2025 by rpki-client