This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/5fa46662-88d2-4fa9-9076-26587048b3d0.roa
File: 5fa46662-88d2-4fa9-9076-26587048b3d0.roa (raw, json)
Hash identifier: dM/ABSIMiBC+VgZe2m61HhdQCZ7doTcC4t+V9n7K3fg=
Subject key identifier: 84:7A:66:F8:C4:4C:68:78:AE:E7:00:65:37:DE:9F:9A:8A:32:ED:71
Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial: 497071791C5C255E763239CCD1EAF2EE71E63DE5
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/5fa46662-88d2-4fa9-9076-26587048b3d0.roa
Signing time: Wed 10 Dec 2025 00:50:09 +0000
ROA not before: Wed 10 Dec 2025 00:50:09 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 8987
IP address blocks: 96.127.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:70:71:79:1c:5c:25:5e:76:32:39:cc:d1:ea:f2:ee:71:e6:3d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Validity
Not Before: Dec 10 00:50:09 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=8ebb049c4eb1d83a9d2453aa8847eab6eb981cc9de3711c9d054ef6bbf14d4c8, CN=0099a7ea-794a-4a28-b164-49547626eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:17:2a:b6:20:a9:b5:bf:ed:2e:9e:bc:c1:
09:f7:de:51:f2:63:97:1a:cc:a2:d3:9a:b8:f8:31:
4b:08:83:61:62:b0:54:18:f9:21:3f:ca:f5:40:e7:
b5:c4:e4:43:e0:7e:aa:bb:f1:46:68:db:02:5d:bd:
7e:65:e3:1e:cb:b9:50:ff:43:97:f9:d7:e2:12:bb:
c9:68:6f:22:89:68:a6:0b:9f:6e:fe:7f:89:40:a3:
d5:f4:7c:7b:38:6f:94:3e:75:71:99:fb:82:bd:d8:
1b:76:26:5a:a6:24:ef:e1:ac:5c:4c:cf:d2:24:79:
67:75:c5:6e:8c:73:1f:3e:8d:93:0d:bb:63:17:61:
bf:03:f6:ff:52:13:8e:57:48:44:19:65:a6:8c:ba:
af:5e:42:88:4b:81:18:d8:70:66:c2:65:db:ce:5e:
d0:25:30:7a:00:0a:be:90:4e:c6:4d:45:be:6c:01:
b6:1d:bf:a5:45:f7:07:0d:fc:42:32:da:9c:eb:8c:
71:06:c9:d5:ff:ab:30:d1:01:4e:78:6e:7b:a5:55:
a5:be:41:4c:f8:b1:d5:c7:c2:9a:2e:4f:3c:68:55:
a4:21:3a:3f:9c:27:47:6c:04:92:a8:c9:16:d2:90:
01:08:23:a9:98:33:92:c7:d0:3f:10:82:f9:0f:a1:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:66:F8:C4:4C:68:78:AE:E7:00:65:37:DE:9F:9A:8A:32:ED:71
X509v3 Authority Key Identifier:
keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/5fa46662-88d2-4fa9-9076-26587048b3d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.127.8.0/21
Signature Algorithm: sha256WithRSAEncryption
59:c2:16:71:1f:68:9e:46:44:97:f0:da:30:8f:a5:44:2d:73:
84:00:31:ed:c1:f6:50:85:16:c0:45:2b:d1:f8:6f:fa:c6:27:
b5:43:c7:49:2d:74:af:4b:6c:47:22:7c:01:85:4e:45:0c:5f:
34:84:6d:de:1f:56:af:5e:9f:20:ac:c1:e4:ba:cd:9f:65:c3:
b2:b2:d7:60:42:88:5e:3a:68:9c:f4:a7:74:5f:05:76:77:e8:
39:de:5e:0d:4f:7d:03:42:ea:03:25:b3:5f:52:f2:7f:ab:87:
65:98:fa:6c:34:a8:f9:45:e4:b2:16:c5:44:c4:32:6f:8e:97:
e7:d2:25:7f:bb:1d:ae:ff:15:d5:e7:2c:5e:4a:e6:44:90:62:
63:9c:ae:35:7d:d6:20:bb:76:97:39:9e:33:0b:c7:bb:e3:ce:
79:c1:93:bd:0d:66:f6:0a:cd:f7:a0:6b:a3:20:4e:7b:30:67:
68:9c:19:f6:1a:b0:f4:35:9d:14:77:f0:97:fb:6c:ba:2d:ef:
43:d3:c1:6e:6b:78:3d:d2:48:5b:81:e3:04:70:41:19:8f:ec:
1c:6e:79:a7:f5:66:97:79:35:d8:22:ce:c2:d1:e3:22:17:65:
e0:a3:9a:2d:c0:bf:a2:f4:c6:83:32:64:08:3c:97:79:4b:4b:
92:ae:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 17:52:58 2025 by rpki-client