This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/2f44b632-2720-4ef0-917c-4b1813ed903f.roa
File: 2f44b632-2720-4ef0-917c-4b1813ed903f.roa (raw, json)
Hash identifier: U2GGxHZx7nwCw6ARP1buTe0soY+oldk5GUA1GRwxosI=
Subject key identifier: D9:94:7A:F3:6F:92:B1:91:9D:88:66:C1:1A:C7:32:1C:1B:29:C3:57
Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial: 6E37BC3D22D2FA40B478B51123E3D796A2B319E0
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/2f44b632-2720-4ef0-917c-4b1813ed903f.roa
Signing time: Wed 10 Dec 2025 00:50:05 +0000
ROA not before: Wed 10 Dec 2025 00:50:05 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 8987
IP address blocks: 96.127.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:37:bc:3d:22:d2:fa:40:b4:78:b5:11:23:e3:d7:96:a2:b3:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Validity
Not Before: Dec 10 00:50:05 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=8d51dc7f352804107b66e46d5f2022ac196c852b9876b1d1d8d7cf575504c0b9, CN=0099a7ea-794a-4a28-b164-49547626eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:6d:8b:dd:2b:f2:7f:0d:27:dd:8d:b6:1f:
32:09:ed:33:bb:96:a5:27:3f:dd:eb:05:d0:46:af:
18:48:b2:f3:05:34:1a:9b:26:20:06:9a:e0:55:c8:
ae:35:f3:ba:18:10:db:5c:af:30:13:ab:79:2f:5a:
c6:e2:30:ac:73:6b:68:a9:a5:d4:63:22:89:b5:b3:
48:ce:d8:23:76:55:2d:11:0b:fa:89:00:f4:ac:de:
7f:89:78:b7:31:27:32:02:59:54:b7:cb:eb:e3:81:
7e:a4:29:72:42:26:2d:80:0a:ca:4c:41:5f:e4:a1:
c9:a6:52:eb:a7:95:fe:cf:2f:7e:c2:c1:d7:73:4c:
dd:56:2c:41:58:3e:ce:72:37:6b:14:7a:4e:c5:90:
05:25:55:5a:6e:e9:82:c7:81:92:f7:2e:71:d5:78:
79:51:5b:e6:3e:14:d0:fe:94:1b:18:1d:a6:cd:15:
f7:99:f2:ac:5f:3f:a1:39:9f:9d:d1:ac:28:03:8f:
75:79:4e:19:20:f3:44:03:c2:f7:0f:66:7d:b8:7c:
03:58:55:ab:35:35:f6:0a:74:52:6e:5c:59:da:ee:
39:6a:34:ff:66:fa:14:7b:f2:74:32:37:64:9e:29:
2d:06:e8:ed:bf:c6:9f:25:5e:b6:fa:27:78:15:4a:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:94:7A:F3:6F:92:B1:91:9D:88:66:C1:1A:C7:32:1C:1B:29:C3:57
X509v3 Authority Key Identifier:
keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/2f44b632-2720-4ef0-917c-4b1813ed903f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.127.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2e:87:ff:cc:dd:e8:01:02:98:73:05:c4:89:4c:85:49:76:91:
93:26:cd:1f:a3:0c:d0:d9:c7:f8:a4:f8:d6:18:03:95:79:54:
4e:58:03:bb:da:47:81:4c:2f:90:4c:c4:7e:b2:e2:46:ff:b9:
ef:45:8a:6f:4c:e5:2c:1f:1e:c0:6c:4c:eb:6a:4a:19:8f:02:
8f:ad:db:c6:f2:1b:90:13:d9:67:e0:99:c2:c0:89:d3:13:95:
36:21:07:c5:e6:32:b1:3e:02:ed:d7:5a:79:24:48:21:aa:1c:
d8:bd:9f:90:64:11:61:9d:18:ef:14:06:d9:58:9e:ae:39:13:
61:97:c4:8c:40:4e:68:c7:2c:a5:16:c2:26:f0:eb:3f:c8:0b:
c8:a6:9a:13:86:20:da:a2:a0:dc:d2:1c:1d:e7:32:0a:99:a9:
87:69:e6:67:d2:63:4b:a7:e8:96:5b:b8:d5:37:ee:d6:8c:bd:
2e:f2:a9:4b:f1:d4:9f:77:92:67:6a:72:4a:f9:dd:12:5d:3d:
17:50:70:0e:b2:f9:8d:7b:6d:ff:eb:1e:1b:0e:05:75:50:c6:
47:82:8f:ec:f0:da:c8:c0:d4:1f:40:93:57:99:bf:7f:07:f0:
50:75:d4:0d:f6:a0:42:ae:63:55:97:c2:6e:d4:bf:52:c5:aa:
ab:81:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 17:49:40 2025 by rpki-client