This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa
File: 2b35ab1a-8001-404a-9285-196aa943aa95.roa (raw, json)
Hash identifier: VZz2APlsdL6bukzaodouJCdXBtqisAk++sfJ/4AS/U4=
Subject key identifier: DD:A0:82:A0:FC:43:9C:0F:04:04:4F:9A:04:3A:C5:98:4D:35:5C:8E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6B3E5C30AACA7D0B5F16E4183C7A15B4FB5FB6C2
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa
Signing time: Wed 10 Dec 2025 04:40:55 +0000
ROA not before: Wed 10 Dec 2025 04:40:55 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:387::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3e:5c:30:aa:ca:7d:0b:5f:16:e4:18:3c:7a:15:b4:fb:5f:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Dec 10 04:40:55 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=c6f74b8fd1235a58df3339a54bfd7815e02593a4805e5663af7451837261e19c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:ca:58:92:e7:8d:1d:65:f0:74:a2:c5:e6:
93:44:e5:f7:7c:e6:81:be:04:e4:17:a1:90:27:4a:
a9:fe:fa:83:13:3a:01:35:9e:42:d5:44:06:98:89:
08:be:de:d1:49:c9:fc:c3:cd:5f:c7:40:6e:8f:fc:
66:bd:9b:46:08:e0:ad:ee:4d:b3:5a:83:8c:d1:e8:
a5:0f:28:06:b0:22:dd:30:0a:97:e6:36:38:b5:06:
2d:6c:c8:33:aa:31:d4:2a:ab:53:be:d5:d0:98:44:
94:d8:9c:68:e0:0e:03:93:71:30:73:19:b5:13:0f:
0a:0a:39:dd:bd:23:4c:7f:89:92:d7:e7:30:51:d4:
f8:5b:1e:82:1b:32:a2:3f:38:d5:ed:e6:50:47:b1:
15:34:a5:79:a1:be:28:30:2c:ae:e9:02:e1:da:b9:
4d:0b:6e:1b:3b:75:5a:e6:86:22:b0:0f:1c:73:2a:
04:0b:5f:8e:0c:0d:49:96:c3:eb:0a:89:4d:e8:4d:
38:af:9d:81:5b:c4:35:cc:8e:57:97:79:00:65:c4:
48:43:18:56:ab:f2:87:8e:2d:7f:6f:9d:1e:08:25:
ac:e1:18:e9:b9:dc:4a:de:8d:69:ef:6c:1c:7d:6e:
22:c4:1c:bb:ad:5c:f4:3d:01:56:10:c9:eb:22:29:
a9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:82:A0:FC:43:9C:0F:04:04:4F:9A:04:3A:C5:98:4D:35:5C:8E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:387::/48
Signature Algorithm: sha256WithRSAEncryption
a7:24:0a:32:03:e2:f1:c7:d1:15:fb:89:fe:a7:4a:73:84:20:
f0:01:51:d2:52:73:fc:f3:63:7d:93:c1:f6:36:03:ee:ae:0c:
81:31:3d:c2:65:18:51:21:08:ee:89:62:14:94:31:63:73:2c:
24:b3:d1:27:00:5a:d7:61:0c:4e:6b:16:e4:26:64:e4:c9:a9:
aa:1b:d9:7d:c2:13:30:a4:d5:45:b6:df:08:69:56:90:4a:05:
c0:30:5e:e1:be:38:36:c1:f4:6b:bf:3f:16:6e:da:6b:82:58:
63:1b:4b:7e:d9:47:2f:c5:3a:92:72:e2:8f:65:14:04:fb:28:
f0:b5:1b:9a:04:cd:4c:8f:79:24:4a:08:5f:e6:4d:d0:10:80:
03:47:f1:4c:97:69:3b:2f:6a:bf:99:01:9a:aa:bd:15:2a:70:
b6:67:9e:99:3b:25:cb:3d:aa:da:70:64:e5:44:e9:65:56:f6:
57:2c:64:98:65:65:95:a6:71:5d:e4:68:28:9e:e0:fa:a3:c5:
ef:37:dd:4e:7f:a5:27:13:ac:36:25:28:96:ca:79:d3:79:19:
cb:58:22:89:fa:c2:ac:ee:fd:63:2c:85:f5:f7:7d:45:68:8e:
e4:a3:4f:d6:1d:19:49:2c:31:b2:89:d0:87:87:bb:e5:2e:cc:
51:36:1f:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:36:06 2025 by rpki-client