This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ef9ebc-2d09-4c34-8550-c15d1183a8ad.roa
File: 84ef9ebc-2d09-4c34-8550-c15d1183a8ad.roa (raw, json)
Hash identifier: o8zrCyO7Z03B916DKSc4HoCgbbR2YUBWsENUJDkfoEw=
Subject key identifier: 4E:AC:61:C3:AA:97:20:C0:65:7A:AC:4F:D7:C9:CE:D6:E2:5F:D6:A4
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 33B154D65B037BE60AB7131EFBACCDFCFFCFE0C1
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ef9ebc-2d09-4c34-8550-c15d1183a8ad.roa
Signing time: Wed 10 Dec 2025 04:40:40 +0000
ROA not before: Wed 10 Dec 2025 04:40:40 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:39c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b1:54:d6:5b:03:7b:e6:0a:b7:13:1e:fb:ac:cd:fc:ff:cf:e0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Dec 10 04:40:40 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=d5b233063be16e34570b001bf7056842297840aae88734fd0da1e01bcfaef8a8, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:db:5f:26:c1:73:4e:7c:06:9d:72:c4:71:
e9:dd:9c:f5:7b:9f:4b:a4:8b:90:3b:f2:43:83:0b:
64:69:36:34:a7:06:d7:15:bf:92:03:c6:5f:94:84:
12:53:3b:9c:d4:63:28:f9:15:5c:b5:0c:f5:df:a5:
17:aa:96:66:e7:48:ca:73:47:86:d4:72:d4:fd:2e:
6f:6d:43:6b:3d:3c:47:51:77:f9:73:4d:0b:b9:7f:
c7:41:46:50:95:96:4b:91:12:af:e9:d8:10:8d:ae:
c9:96:5c:41:8b:b6:7d:fb:6b:ce:61:4c:7d:2b:1d:
96:57:f1:28:90:ae:bf:0b:cc:29:93:c6:39:00:4a:
db:6d:be:77:96:ca:9e:6b:29:11:f7:1c:17:27:52:
e5:85:ca:3c:54:ef:d5:47:fc:46:75:52:c9:3a:ac:
a6:6e:af:b1:35:b0:9f:ba:9b:ea:57:86:3f:1b:56:
2f:f7:f7:d4:fa:ab:64:88:4b:27:17:26:a6:eb:2a:
0c:86:35:03:58:dd:3c:71:23:0a:7d:89:e4:cb:0b:
11:d8:c6:d1:1d:46:0c:10:ad:5a:ff:00:7f:d5:0f:
0a:c9:9b:64:b2:bf:81:48:31:9a:52:82:3c:42:a7:
2c:90:1e:1d:8a:99:f7:3e:64:2c:24:ea:39:6c:86:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AC:61:C3:AA:97:20:C0:65:7A:AC:4F:D7:C9:CE:D6:E2:5F:D6:A4
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ef9ebc-2d09-4c34-8550-c15d1183a8ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:39c::/48
Signature Algorithm: sha256WithRSAEncryption
90:39:36:29:6f:e0:3e:df:63:98:b8:64:75:32:7e:6f:48:b7:
e4:17:b8:35:cc:61:41:28:ec:51:fb:99:9e:fe:95:05:7b:61:
87:53:ef:d4:f6:56:0b:b6:dd:b4:cf:90:56:23:ae:6f:14:4f:
b7:02:b0:eb:5b:b2:5d:48:00:c8:a0:14:5d:31:49:30:4c:3f:
04:45:84:9c:a8:88:0a:01:74:cf:4d:ee:ab:78:f2:db:e1:da:
80:4b:61:55:8f:ef:22:03:f1:00:6c:cc:ab:1b:5e:76:61:f4:
61:a9:5b:df:58:58:0c:69:8d:4a:c3:af:4d:33:a3:58:21:06:
25:71:ac:0e:c8:86:b8:0d:c8:a5:d6:31:cd:45:c4:e2:f8:ce:
f8:31:a7:08:eb:05:a8:d0:f7:00:79:1c:e9:b1:9d:06:51:33:
da:ca:ab:13:86:b9:81:9b:88:3c:22:56:7f:f8:cc:78:7e:80:
f0:c2:d5:68:62:70:ee:dd:ee:65:6f:95:6e:e3:75:f1:48:52:
f4:95:24:91:64:ec:84:7f:45:e2:7e:c7:36:2a:b4:32:b5:55:
c7:5c:67:78:c9:87:d6:f0:49:09:8b:8b:0a:7f:1c:0a:84:b2:
6e:cc:0b:9e:e6:1f:22:87:ee:6d:ee:a6:67:e3:ec:ac:84:60:
fc:a7:30:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:31:49 2025 by rpki-client