This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa
File: 5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa (raw, json)
Hash identifier: 5nT4N/G/YK5kPKvOPeneSHuz6J9n3jQBwBavwt4pjfE=
Subject key identifier: 5B:8C:30:B0:9A:16:71:5F:48:AB:16:FA:3B:E7:9B:DA:C8:65:87:04
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 7465D99878BD1DFD77EFF69048EDB08AF39DE235
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa
Signing time: Wed 10 Dec 2025 04:50:09 +0000
ROA not before: Wed 10 Dec 2025 04:50:09 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:65:d9:98:78:bd:1d:fd:77:ef:f6:90:48:ed:b0:8a:f3:9d:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 10 04:50:09 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=1c386d9030c96eae28a2ec2c4415af7e991b0565e7f55024f725839ec3ed9b21, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:67:28:58:46:c3:2a:37:88:f3:ec:f7:05:
af:5b:e5:ff:96:25:27:b3:65:4b:db:7f:f4:7b:08:
2e:e2:fa:e4:67:7c:a0:a2:78:71:8a:54:b8:3e:aa:
d0:c6:40:34:d9:3a:de:8e:3c:3f:bf:29:cc:98:d9:
3e:a4:2c:65:9c:24:eb:f4:3d:64:40:26:2f:76:9c:
24:0d:c9:09:e1:9f:4a:9d:e4:1b:b4:db:54:97:eb:
cf:58:18:9a:70:53:74:44:b1:82:e2:a0:83:51:f4:
2f:e9:73:99:dd:e1:21:79:5d:67:88:64:8e:f2:a0:
19:53:72:a4:f5:2e:fa:d9:8d:d6:24:28:c0:b1:84:
ce:ce:f3:36:f4:4d:37:6d:0c:3a:c5:90:f3:21:b7:
f0:bc:34:d7:cf:23:6d:ce:1e:97:e0:c1:5d:cb:9c:
f3:89:47:47:0b:b8:af:dc:7b:92:c6:86:03:c7:78:
f1:fe:e1:38:cf:61:fe:fa:a1:39:b0:7f:3a:6c:5b:
6a:68:19:99:c2:a5:e3:f0:93:a6:67:03:1f:3d:a2:
2d:2f:0b:be:7f:80:15:fc:45:38:6d:57:0e:37:1a:
50:7c:de:8a:32:11:f5:cb:11:93:70:5a:12:cb:76:
2b:64:aa:04:c9:df:58:6e:d4:6d:60:40:48:63:62:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8C:30:B0:9A:16:71:5F:48:AB:16:FA:3B:E7:9B:DA:C8:65:87:04
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:76:fc:97:46:c8:8f:de:26:e7:b9:7e:f0:c5:a1:09:7e:18:
55:1f:0a:a1:eb:94:f7:d9:53:3e:cc:c1:79:47:dc:51:a3:4a:
d2:d7:94:12:a9:c7:6b:00:19:61:9d:d6:48:4d:2d:9b:3b:33:
02:7c:a2:ea:bb:64:6b:35:e1:5c:3b:8b:74:1f:14:23:a9:6b:
57:fe:3c:c2:51:3f:6b:4e:8b:f4:0b:a6:3e:48:9a:80:32:0f:
a9:f9:fe:8e:b1:f8:1b:ac:0f:6e:15:a2:14:13:71:a0:29:9c:
99:7e:fb:15:bd:a6:d0:9c:c5:c3:6f:86:d2:96:0a:76:63:a8:
1d:8f:6d:06:4a:d0:87:ea:14:f0:cc:87:38:39:d0:50:cf:a1:
aa:5c:a9:e6:4f:69:ff:c1:89:0d:a9:c4:fe:a3:30:70:51:33:
44:1b:75:5d:8b:1b:1c:24:0e:7a:07:65:65:9f:68:4a:dc:0a:
1b:c6:77:cb:a5:3c:09:9f:5f:1c:2c:8f:0f:63:d8:89:79:f0:
c8:e0:2a:b0:3a:8e:1f:08:36:3b:36:e2:89:7d:e1:c9:ae:6f:
9c:72:bc:20:b8:e1:8f:dc:8b:06:4f:c1:5b:e5:bc:1c:5c:f7:
4c:c7:09:e8:7e:c0:c9:f2:7e:a4:72:99:80:c5:1a:fe:ea:cd:
75:5c:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:54:42 2025 by rpki-client