This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa
File: dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa (raw, json)
Hash identifier: maM6GX+cLs1cNUgTvtVmVAGI4V3IaOewmCPR4XTx6y0=
Subject key identifier: 35:25:67:D5:7A:78:69:08:29:4C:B8:0B:5C:41:22:AE:51:7F:44:B6
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 38988CA5FB97D55FD5EDD1087E6E3340F4AFA9CE
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa
Signing time: Wed 10 Dec 2025 04:50:09 +0000
ROA not before: Wed 10 Dec 2025 04:50:09 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:98:8c:a5:fb:97:d5:5f:d5:ed:d1:08:7e:6e:33:40:f4:af:a9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 10 04:50:09 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=b873838c73a6f939bfeac9620c734ee6b88f19c4859b91623f88dd363dd7eceb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:8e:f4:b8:59:75:a5:a8:2c:43:34:1e:35:
cf:12:c0:d0:c7:3d:98:13:c0:11:a3:c6:2f:84:40:
7c:85:5c:02:a3:d0:3c:9a:4c:d0:bc:7e:5e:f6:6e:
9d:47:7a:3e:90:9f:f7:52:b5:90:23:58:e9:ef:8d:
3f:d5:9b:6b:8e:72:bc:dc:48:ff:a6:6b:8a:28:04:
9a:8d:63:06:cc:d2:51:01:24:95:91:03:9a:50:71:
d9:0c:9c:8e:14:7a:7d:8e:ee:be:ff:9e:e9:ec:5c:
06:b1:2f:27:32:38:a1:b8:3c:24:de:39:cc:22:0f:
09:12:6d:a4:03:c8:b9:ff:68:73:09:e8:26:cb:a5:
62:fc:f9:cf:4e:27:c2:9a:54:be:3c:c5:86:1f:e0:
9f:e7:0e:6c:89:d7:91:d0:ae:48:80:3c:ae:7c:23:
17:87:a8:09:a8:27:93:84:1b:8b:e3:ac:e6:36:64:
0c:ff:74:61:e6:9b:11:f8:07:db:e3:7a:ce:83:5b:
68:da:c3:44:46:e7:76:1b:0f:a5:90:8a:87:5e:6b:
5e:e9:59:5a:23:ca:3d:3a:32:18:0b:ab:8a:62:f0:
cb:fd:92:de:85:e3:ca:c2:1b:41:c5:5b:a3:0d:b5:
f8:21:77:62:75:0a:17:de:31:5c:8d:43:78:75:61:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:67:D5:7A:78:69:08:29:4C:B8:0B:5C:41:22:AE:51:7F:44:B6
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd72b1b3-bfc9-45bf-87dc-b0e90937f198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.14.0/24
Signature Algorithm: sha256WithRSAEncryption
39:57:03:95:61:0a:17:16:9a:ba:ea:cc:bb:58:61:78:b1:d0:
b1:b8:db:bc:0c:bf:75:e9:ee:b9:fe:6e:ae:d0:29:fa:2e:e3:
4b:78:67:f9:5d:ec:e9:99:9b:47:0c:d8:54:32:91:3c:12:15:
e2:0c:4a:f8:d8:08:b1:d0:50:c2:f8:1c:03:15:29:6a:f6:f5:
d8:51:9a:9f:a5:45:e6:ed:ca:c6:05:cd:93:48:5b:f1:3f:27:
75:1a:85:44:de:4b:9b:f0:99:5d:7a:c9:f1:a3:ac:94:ec:ac:
15:ee:12:81:12:37:dc:b5:af:31:61:65:fd:02:1b:e8:62:6d:
b0:96:8b:28:81:dc:a9:24:08:74:e7:53:00:ef:5e:8e:ed:63:
d1:21:3c:ed:8e:a5:9c:fe:d3:1d:14:36:a6:c6:ce:38:d9:0a:
a3:8f:04:78:3b:df:8e:4f:2a:f1:f2:a0:0b:12:73:6f:7d:fa:
b6:f4:35:b1:dd:d3:e3:a5:90:e0:c1:3d:b7:e5:38:b6:44:b4:
56:cf:d0:03:34:8c:b9:75:31:b7:43:c9:2e:fe:04:a9:8d:8c:
f2:e2:95:c3:7a:be:2e:b5:e8:12:9f:0f:ca:41:38:b2:d3:db:
78:1d:bc:06:a3:7f:08:87:52:f8:03:72:b1:4f:00:13:22:1e:
30:b7:7e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:23:51 2025 by rpki-client