This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa
File: a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa (raw, json)
Hash identifier: qQcyAxqkGVQl58XyRsmNADWrkFBMPI8Tn83dZiCcb2M=
Subject key identifier: 6C:84:5B:79:C8:60:D7:A1:8F:D1:74:A6:44:85:B4:C1:E5:5D:BB:E0
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 21835F5E79863E15D951DD36A6A055599ECB5B50
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa
Signing time: Mon 08 Dec 2025 02:00:32 +0000
ROA not before: Mon 08 Dec 2025 02:00:32 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:83:5f:5e:79:86:3e:15:d9:51:dd:36:a6:a0:55:59:9e:cb:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 8 02:00:32 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=9a16629aa9ed9a799e12e8a7f388ec6ab6bfa67b68e870528c3e23bb0a0abcb6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:32:bb:d3:a0:53:20:6e:30:8d:da:60:58:30:
da:f4:2f:72:37:5d:d4:59:74:b7:a9:a8:af:b9:ad:
76:a6:3c:79:f7:56:ea:80:ba:30:b1:11:87:68:e3:
42:c3:0f:11:4a:6e:53:d6:92:10:b4:8e:1d:ae:a0:
27:b6:28:a2:00:40:be:93:6e:b9:7c:85:bd:35:8b:
ff:d6:8e:4d:21:01:74:c7:3c:70:8f:e8:cb:fe:45:
92:f8:34:b7:ca:f3:c2:ee:bf:ba:66:1b:7e:61:11:
7b:26:42:53:39:f1:a3:eb:22:f8:4a:77:d5:ad:25:
bd:22:e3:71:e2:2b:82:ee:a4:49:46:70:92:d3:d4:
95:8a:17:42:01:cb:9e:7a:6c:38:ff:01:a7:b9:d3:
32:69:f2:59:bd:ae:c2:da:bd:c6:d0:b0:8a:b1:17:
ca:9b:e1:44:58:2d:43:ec:e3:10:1f:35:30:69:87:
67:41:7c:eb:e4:fb:b1:2a:f0:51:eb:ac:7d:0d:a2:
60:1e:ab:e4:5a:4d:8d:ff:af:d8:8d:5e:7b:dd:4f:
cf:de:ee:43:a0:f6:25:0d:96:8b:99:ea:83:1a:6c:
4b:16:4c:a4:b0:6c:7f:be:d1:93:a2:bb:13:a6:07:
1e:0a:01:57:4f:5c:f0:fc:7b:74:6a:6a:4f:be:fa:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:84:5B:79:C8:60:D7:A1:8F:D1:74:A6:44:85:B4:C1:E5:5D:BB:E0
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.40.0/24
Signature Algorithm: sha256WithRSAEncryption
53:13:c0:86:d8:4b:7d:5c:0d:4f:af:6f:f9:55:85:87:a4:92:
47:3d:8a:80:6c:3e:4b:19:6c:b3:7b:9a:a0:bf:76:4c:9b:96:
a2:74:e6:58:26:31:83:21:94:6e:e5:97:a8:19:cd:3a:31:19:
a0:af:75:90:86:e9:95:7f:1e:3f:d9:28:68:e8:88:d4:b7:9f:
8d:8d:49:41:ad:75:66:a6:41:59:13:30:6b:53:eb:7d:2e:f2:
a7:d2:72:02:47:71:21:94:ec:8a:1a:a0:18:66:8b:a5:24:23:
37:64:54:1c:d4:5a:b2:c1:fe:0c:29:3d:80:36:c1:53:6c:55:
7a:cf:27:be:20:a8:a6:8f:e5:fa:f7:de:a2:56:b8:ea:e5:b4:
94:20:61:a2:f2:f2:53:1d:25:73:1b:83:8d:02:f0:a8:74:3d:
4f:f8:1f:0e:c5:8e:59:f9:8f:46:7c:a4:d5:67:b6:1f:77:ce:
2b:a0:64:f6:90:59:71:ac:8f:24:5f:a1:70:03:97:01:5d:26:
23:38:a9:65:a9:06:d1:a8:19:3f:f5:9b:bb:f9:17:ef:44:a8:
48:10:c1:7a:85:e5:00:42:b4:da:77:6e:4f:62:3d:95:c6:48:
ed:f7:34:d7:01:f3:b9:cd:f2:80:38:33:c7:52:8f:d6:6c:7e:
b2:50:c6:b4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIYNfXnmGPhXZUd02pqBVWZ7LW1AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDIwMDMyWhcNMjYwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YTE2NjI5YWE5ZWQ5YTc5OWUxMmU4YTdmMzg4ZWM2YWI2
YmZhNjdiNjhlODcwNTI4YzNlMjNiYjBhMGFiY2I2MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD4MrvToFMgbjCN2mBYMNr0L3I3XdRZdLepqK+5rXamPHn3
VuqAujCxEYdo40LDDxFKblPWkhC0jh2uoCe2KKIAQL6Tbrl8hb01i//Wjk0hAXTH
PHCP6Mv+RZL4NLfK88Luv7pmG35hEXsmQlM58aPrIvhKd9WtJb0i43HiK4LupElG
cJLT1JWKF0IBy556bDj/Aae50zJp8lm9rsLavcbQsIqxF8qb4URYLUPs4xAfNTBp
h2dBfOvk+7Eq8FHrrH0NomAeq+RaTY3/r9iNXnvdT8/e7kOg9iUNlouZ6oMabEsW
TKSwbH++0ZOiuxOmBx4KAVdPXPD8e3Rqak+++voTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbIRbechg16GP0XSmRIW0weVdu+AwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2E3MmViYjk5LWFlY2UtNDlhYS05ZjI5LTFmMDI4NmI4NGY0YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBAFMTwIbYS31cDU+vb/lVhYekkkc9
ioBsPksZbLN7mqC/dkyblqJ05lgmMYMhlG7ll6gZzToxGaCvdZCG6ZV/Hj/ZKGjo
iNS3n42NSUGtdWamQVkTMGtT630u8qfScgJHcSGU7IoaoBhmi6UkIzdkVBzUWrLB
/gwpPYA2wVNsVXrPJ74gqKaP5fr33qJWuOrltJQgYaLy8lMdJXMbg40C8Kh0PU/4
Hw7Fjln5j0Z8pNVnth93ziugZPaQWXGsjyRfoXADlwFdJiM4qWWpBtGoGT/1m7v5
F+9EqEgQwXqF5QBCtNp3bk9iPZXGSO33NNcB87nN8oA4M8dSj9ZsfrJQxrQ=
-----END CERTIFICATE-----
Generated at Sun Dec 21 05:54:06 2025 by rpki-client