This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa
File: decfa8a2-ad50-432e-96a7-cba83d9032f9.roa (raw, json)
Hash identifier: C7qjnqhhu2E+tjoM8QFriCA2Z7WHR89AhJLaQd+1aog=
Subject key identifier: AA:A1:7A:E3:67:B1:4B:D3:62:8E:1A:38:24:89:FA:0D:20:28:43:CD
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 69218AF9C911610CBD2B7B0C48A323FB634132DC
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa
Signing time: Wed 10 Dec 2025 04:50:03 +0000
ROA not before: Wed 10 Dec 2025 04:50:03 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:21:8a:f9:c9:11:61:0c:bd:2b:7b:0c:48:a3:23:fb:63:41:32:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 10 04:50:03 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=38a28a041fc5392298d0ff8694b779a9443f63ab987b767df2152f49e817c59b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:6e:3b:8f:f7:46:41:db:7c:89:f1:01:e5:
bb:fa:c0:81:fb:c4:c9:54:99:40:18:2e:03:91:9e:
03:3e:ea:40:96:85:64:1a:38:6e:03:0b:6f:87:a1:
85:ee:d2:8f:77:91:8b:92:bd:01:f5:e6:3f:5d:c2:
7e:a0:7c:61:c5:05:88:cf:db:02:ae:6f:54:cf:7e:
4e:5e:d2:36:ee:12:cb:fc:03:93:62:80:d1:4f:5e:
78:c7:e5:4b:e3:a5:f1:bf:e7:5a:7f:36:a4:8f:67:
ee:94:db:70:d3:b1:e5:26:3f:8b:e1:73:d6:e3:12:
5a:5b:e1:2c:96:5c:4a:52:ff:87:6f:b0:49:25:5f:
3c:43:f6:d2:86:31:17:45:45:ff:32:84:c1:6c:fa:
da:d1:ed:c9:14:d1:e6:4b:f9:83:b9:d2:b3:aa:22:
77:1b:50:e2:24:c8:c0:a2:29:3c:2e:2f:99:f9:a7:
ad:d1:74:b8:1a:52:96:c0:b1:a1:f7:fa:fb:5a:6c:
c1:0d:43:a3:bb:ba:a2:20:b4:c1:00:a8:7e:90:b0:
a8:25:95:69:35:c4:99:f0:ed:dc:54:f2:60:a9:8d:
18:86:0a:dd:a5:f2:5e:1d:01:cc:cf:76:4a:07:12:
4c:22:d6:04:1e:8f:b1:99:36:41:9b:b8:81:6c:eb:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A1:7A:E3:67:B1:4B:D3:62:8E:1A:38:24:89:FA:0D:20:28:43:CD
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c3:cc:35:9b:13:ce:bc:11:00:88:ab:c4:76:1c:1a:6b:82:
65:f3:1e:8d:6b:b5:65:e9:ea:a2:52:49:20:6f:ee:48:04:f0:
14:7b:3b:9c:8f:01:7f:4c:d6:d3:b5:b4:b8:62:d4:4a:65:98:
e3:99:5f:6b:bd:4f:51:b7:4f:fa:9f:b3:62:db:b4:f2:ef:f8:
d5:14:d1:b3:02:24:e2:2a:b3:31:c7:25:8d:ed:5f:d7:39:ba:
11:b6:b1:30:d4:91:f4:27:ee:01:9c:4b:e1:12:4e:f2:56:d8:
ca:47:0b:f4:64:2c:18:47:9e:7f:50:e6:90:82:06:71:17:82:
b8:3b:c3:2a:50:4d:ac:83:b8:1d:77:50:64:3b:68:eb:2c:2b:
49:db:4a:29:50:bf:09:dc:fe:14:96:cc:83:cd:12:ca:d8:d2:
01:23:3b:70:07:af:cb:3e:6c:4f:67:4d:99:98:f6:48:4e:a1:
11:c7:fb:32:91:ef:7b:39:f1:41:2f:8f:13:a8:b6:54:8a:3d:
18:03:a2:a7:1c:ea:ba:83:cf:80:ce:83:b3:7b:ac:a8:04:28:
05:04:d1:b1:41:08:47:56:44:a6:df:a2:1f:fe:94:ca:c5:90:
1e:11:cf:53:9a:e2:20:d4:46:91:d6:4a:d7:0b:8b:0c:ac:d7:
00:f5:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:53:43 2025 by rpki-client