This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3f4c0304-0805-46b0-8efe-07d1cf610908.roa
File: 3f4c0304-0805-46b0-8efe-07d1cf610908.roa (raw, json)
Hash identifier: JhZdUd10FYRscV5fCEABATwBxXEv+TN7Jolbyvw3PbE=
Subject key identifier: 96:93:9D:31:7D:62:39:8E:86:2A:55:97:73:CC:B8:4C:C9:A9:7A:6F
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 495D79FE71F59B14C97488A762721E5D0B7CEEEA
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3f4c0304-0805-46b0-8efe-07d1cf610908.roa
Signing time: Mon 08 Dec 2025 01:50:07 +0000
ROA not before: Mon 08 Dec 2025 01:50:07 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2631::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5d:79:fe:71:f5:9b:14:c9:74:88:a7:62:72:1e:5d:0b:7c:ee:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 8 01:50:07 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=c04ec47e4a8fb7c18c3183f5b6c7a7477e1fce425caa50f19593c66ec9799a12, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:0b:a9:20:53:1c:df:5e:ce:bf:31:ec:32:
b3:26:5a:18:e1:bb:0a:b5:fe:d8:67:91:66:d3:3e:
25:61:2b:80:f9:58:0e:13:b2:b4:53:71:6b:43:8b:
ee:c1:3b:c8:a6:ba:66:b3:dc:d5:f4:77:57:03:91:
63:5a:37:64:f5:5a:fc:f7:d1:6f:3e:f4:65:6a:55:
15:20:aa:79:f7:bb:2b:c2:a2:cd:c8:8e:b0:44:42:
41:40:e5:52:34:c4:88:e1:a5:b7:7b:2a:06:a2:ad:
75:42:6e:ca:46:3c:1f:4f:22:6d:b6:73:f0:f9:15:
48:5d:3c:15:47:ae:b6:0b:4f:94:31:92:b0:20:41:
99:f1:fc:d4:80:16:62:a6:e1:fc:d9:96:9a:cf:96:
6c:ff:64:25:da:c6:ac:18:ca:e7:b9:42:24:d2:77:
a7:99:b4:07:bd:1e:12:32:91:1d:d1:dc:1c:0d:c9:
88:e0:ae:7d:38:50:e9:47:e6:33:96:bb:5a:db:a2:
6c:90:dc:8b:ed:1c:7a:3d:b4:a4:54:cb:dc:32:e6:
98:8b:69:44:bb:31:f6:a5:60:4d:6e:ef:22:a5:c4:
72:e8:42:5e:58:58:23:d1:3d:2a:0a:2f:76:21:c0:
64:93:03:29:26:a0:ae:8f:c1:45:1f:bc:00:14:2f:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:9D:31:7D:62:39:8E:86:2A:55:97:73:CC:B8:4C:C9:A9:7A:6F
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3f4c0304-0805-46b0-8efe-07d1cf610908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2631::/48
Signature Algorithm: sha256WithRSAEncryption
23:d7:fd:20:13:47:5b:64:d0:e9:df:af:0c:79:5b:f3:50:10:
6e:6b:75:d8:6a:82:9d:76:c6:17:13:ec:9b:ff:e6:0e:f3:a2:
da:ef:b2:76:ac:66:43:c4:ae:62:19:cb:0f:ec:f2:24:56:54:
16:38:29:28:38:af:75:f6:19:d6:ed:2b:e2:1a:d3:a8:e1:1d:
63:a3:e7:9f:3a:9e:2c:4f:89:f1:76:48:c8:ab:fa:52:84:0d:
d9:53:22:ea:b5:17:7c:b2:71:28:df:06:0c:f5:c7:aa:18:59:
12:14:af:9d:8e:7a:41:e5:04:52:05:16:1d:dd:05:a4:bc:68:
29:bc:46:dc:ed:1a:35:44:0e:e5:8c:6b:d7:2b:d3:07:b0:65:
d4:a3:87:df:47:2d:87:b4:b2:a5:b2:b3:0d:76:e7:6f:e0:63:
23:80:50:8d:e4:e0:8b:1b:e1:34:0e:9a:52:34:b9:21:b8:1e:
7f:37:d7:21:7e:6e:65:d9:8d:5a:01:d2:75:a5:4d:80:d6:ce:
c3:42:05:ba:d5:e3:b9:51:4e:32:12:76:37:1e:b3:cb:2a:40:
22:44:9c:99:ad:17:42:d3:9f:11:62:38:46:b2:54:90:31:b2:
c3:9a:bb:16:a8:ab:04:03:47:ec:69:02:2e:9c:14:12:90:64:
b3:e4:b5:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Dec 21 03:54:50 2025 by rpki-client