This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa
File: d45c754b-55fa-459b-9d5e-9107618580af.roa (raw, json)
Hash identifier: EK+X8vE1URrNE3nrqvBle1/cINO6j/nkhHfFX4Za3CQ=
Subject key identifier: 6D:EB:3A:90:8A:1A:FB:05:5E:3F:70:DF:52:80:69:6A:84:04:72:A3
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 43BA8D42F85263F5473E2424E4E69F419F775C4F
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa
Signing time: Mon 08 Dec 2025 02:00:27 +0000
ROA not before: Mon 08 Dec 2025 02:00:27 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ba:8d:42:f8:52:63:f5:47:3e:24:24:e4:e6:9f:41:9f:77:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 8 02:00:27 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=ad3e2e1c3225a004249d433252b940c49b92980ad18cf9a88c3fec7632d112dc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dc:da:d8:3a:ef:89:ce:68:59:eb:c0:7d:fb:
42:62:12:cb:98:a0:1c:b1:6b:fc:50:46:d1:9d:b4:
12:29:c4:e5:c6:6c:8f:88:0a:5f:1e:c7:fe:34:cf:
6b:89:31:87:1f:30:a1:1e:da:ee:9b:f4:6e:46:00:
63:e8:de:a3:e1:93:13:1a:cb:5e:14:a3:84:c4:2d:
3c:15:83:1e:82:92:e5:75:71:12:21:7b:88:d3:74:
5e:ea:85:d4:5e:9f:bf:42:45:ba:a9:3d:6d:5f:f8:
0d:07:cc:fe:2c:43:a9:5a:1c:36:bf:20:29:fe:1d:
90:9b:e3:df:cf:93:73:77:28:69:7a:41:dc:39:81:
69:d4:83:c0:e0:37:4b:47:a3:c5:80:68:f3:b8:ac:
0d:fc:01:12:36:eb:5d:a6:f5:9c:73:72:2d:63:93:
0c:8f:df:c7:0e:40:2c:53:53:68:2e:15:17:46:cd:
23:37:e6:a4:7c:84:24:c5:b3:88:31:6b:f3:66:24:
5c:12:7c:77:da:ae:44:5c:6f:0c:79:74:2f:34:2b:
e4:02:79:75:a5:4d:5e:22:19:4c:36:c0:1b:df:a7:
3d:2a:bf:59:ac:55:06:27:9f:1b:39:68:cc:de:1d:
a4:d7:4e:6f:f3:a8:a8:2a:34:64:ca:56:b7:ae:36:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:3A:90:8A:1A:FB:05:5E:3F:70:DF:52:80:69:6A:84:04:72:A3
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.41.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4a:ab:67:7b:a9:b8:00:c7:d4:c8:7e:d9:79:db:c2:08:c4:
f4:85:85:e0:1b:d8:50:30:cf:4b:a6:1c:41:e3:55:a7:70:d9:
43:4a:55:9a:09:5c:03:34:4b:67:48:58:47:70:b0:3a:80:fe:
13:31:90:fb:07:2e:f6:ff:90:6e:d6:99:1e:54:dd:fb:1c:df:
46:73:bd:ee:43:9e:79:a8:b2:22:1d:c2:ec:be:7e:62:85:21:
77:d2:88:8e:33:0b:08:c3:76:cf:ff:92:90:35:f7:b4:d8:9b:
ad:4a:34:a2:5b:ee:cd:07:5e:86:12:01:06:f5:3c:06:eb:be:
d6:73:71:bf:00:a4:5d:f0:90:24:65:d5:bb:de:df:55:d7:1d:
9d:2a:21:05:8c:37:94:03:54:6b:1e:53:69:ff:aa:c9:f8:fe:
1f:87:fd:bf:50:42:1b:df:2e:b8:78:a2:e8:81:86:0f:ee:b3:
fc:93:c2:95:02:27:3b:f2:07:7f:f3:f8:37:d2:0c:9f:da:5f:
62:35:0c:17:12:7a:c5:14:70:7d:c0:e1:2d:06:57:58:45:7a:
c6:94:11:26:89:01:86:4f:10:a4:ef:bb:09:5a:40:9c:36:bd:
85:72:6c:a8:7f:d5:5d:08:36:fe:e6:fe:c2:34:71:95:ae:81:
16:e9:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:54:12 2025 by rpki-client