This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/371b6f54-4966-4a4c-b3bf-ab0c601bffc6.roa
File: 371b6f54-4966-4a4c-b3bf-ab0c601bffc6.roa (raw, json)
Hash identifier: q3DO9m7LnpL/eUOcNbiB+Pk6H0/GI3cQU3KeUPvF80I=
Subject key identifier: 5F:26:06:34:52:B5:AB:1D:87:7D:3D:98:EE:69:1C:E0:44:32:06:2E
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 2D7D482A73BABACF59AC87B8DD117CD185DA28B9
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/371b6f54-4966-4a4c-b3bf-ab0c601bffc6.roa
Signing time: Mon 08 Dec 2025 02:00:07 +0000
ROA not before: Mon 08 Dec 2025 02:00:07 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 11 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:7d:48:2a:73:ba:ba:cf:59:ac:87:b8:dd:11:7c:d1:85:da:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 8 02:00:07 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=82e17ae68135b34314a609688f9c7ba4098d0a330a422dc6f66710938e52aff3, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:b0:8b:8b:b0:a1:07:08:51:1e:e0:01:65:
de:73:2c:31:49:be:e3:62:ce:f3:ff:1f:e0:c9:1b:
cd:43:bd:32:8e:16:c1:d1:85:7b:39:6a:c7:00:e2:
dd:7a:05:64:0f:60:b0:0a:b3:d4:3c:c6:0f:ac:3d:
ce:c2:39:6e:c7:0b:96:3a:60:0e:fa:6f:25:5a:15:
88:b9:91:14:99:75:e5:19:56:75:20:0c:cd:86:10:
7d:08:32:eb:1d:b1:0d:3f:2f:24:90:0e:29:7e:88:
8b:98:de:ed:28:93:5a:58:d7:4a:f8:02:3d:84:03:
61:2b:42:71:87:a2:e4:ed:bb:5b:c5:b2:76:2f:da:
c9:0b:56:1c:9d:3d:5f:56:c8:df:9a:1a:5a:38:63:
0a:2a:89:35:aa:f7:f2:0e:8f:3c:f3:e0:1c:8f:df:
31:31:d0:25:78:95:18:98:d0:d1:fb:e3:73:17:4d:
41:dc:f5:d8:b4:e4:ff:3a:19:44:1a:35:4d:a6:b7:
d9:71:bc:71:54:d4:08:5d:6f:5c:48:23:f4:c9:8d:
51:d9:bd:1b:8f:b1:81:29:ec:44:2e:e7:64:2d:85:
1c:86:a3:ab:5a:d0:b3:de:e2:61:f8:9e:28:6b:69:
b2:6a:41:cc:93:eb:4f:b7:49:6a:5d:22:52:f4:ed:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:06:34:52:B5:AB:1D:87:7D:3D:98:EE:69:1C:E0:44:32:06:2E
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/371b6f54-4966-4a4c-b3bf-ab0c601bffc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:91:f1:01:0b:ca:c5:57:41:fe:b0:54:ce:9d:0b:68:b9:f7:
be:39:03:2d:49:e3:a6:e9:b7:c2:b3:20:06:75:56:6f:64:45:
5a:c5:f1:c5:86:15:76:27:d8:17:ed:f7:13:c3:7e:3f:d9:38:
0a:fa:a0:93:78:81:01:cf:c1:7f:5e:7a:cb:fd:b5:9b:45:b2:
c4:a1:84:82:91:23:0d:03:ed:03:92:d8:ae:e4:87:d3:dd:55:
66:54:fd:81:09:3e:2d:3a:cc:6b:7f:7c:7a:48:f9:2a:61:25:
1e:01:28:5c:1e:b4:37:db:29:4e:62:20:2f:0c:a2:ab:c2:85:
d8:08:8e:6d:e7:6a:3d:92:a1:51:dd:de:fb:44:8b:4c:8c:8f:
ca:f3:74:4f:a1:84:80:26:6b:99:f5:3a:95:8e:e0:10:48:de:
cf:ae:e9:4b:d2:f6:4a:6d:19:5e:bc:3f:0a:2e:91:b1:52:75:
32:c5:dc:04:7f:b3:cf:2e:24:54:fd:be:27:16:7d:23:6f:73:
d5:6d:d4:d4:b9:f3:2a:ab:6f:34:b0:13:3b:1d:a6:7c:98:0c:
94:be:d3:a2:ba:86:87:e3:7a:fd:a0:5f:26:48:5c:50:a7:c2:
ca:d0:b2:92:79:59:45:3b:7e:ec:59:eb:6d:93:d0:2d:d8:13:
98:39:68:94
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULX1IKnO6us9ZrIe43RF80YXaKLkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDIwMDA3WhcNMjYwMzA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MmUxN2FlNjgxMzViMzQzMTRhNjA5Njg4ZjljN2JhNDA5
OGQwYTMzMGE0MjJkYzZmNjY3MTA5MzhlNTJhZmYzMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5DbCLi7ChBwhRHuABZd5zLDFJvuNizvP/H+DJG81DvTKO
FsHRhXs5ascA4t16BWQPYLAKs9Q8xg+sPc7COW7HC5Y6YA76byVaFYi5kRSZdeUZ
VnUgDM2GEH0IMusdsQ0/LySQDil+iIuY3u0ok1pY10r4Aj2EA2ErQnGHouTtu1vF
snYv2skLVhydPV9WyN+aGlo4YwoqiTWq9/IOjzzz4ByP3zEx0CV4lRiY0NH743MX
TUHc9di05P86GUQaNU2mt9lxvHFU1Ahdb1xII/TJjVHZvRuPsYEp7EQu52QthRyG
o6ta0LPe4mH4nihrabJqQcyT60+3SWpdIlL07YpjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXyYGNFK1qx2HfT2Y7mkc4EQyBi4wHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzM3MWI2ZjU0LTQ5NjYtNGE0Yy1iM2JmLWFiMGM2MDFiZmZjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYCMwDQYJKoZIhvcNAQELBQADggEBAFyR8QELysVXQf6wVM6dC2i59745
Ay1J46bpt8KzIAZ1Vm9kRVrF8cWGFXYn2Bft9xPDfj/ZOAr6oJN4gQHPwX9eesv9
tZtFssShhIKRIw0D7QOS2K7kh9PdVWZU/YEJPi06zGt/fHpI+SphJR4BKFwetDfb
KU5iIC8MoqvChdgIjm3naj2SoVHd3vtEi0yMj8rzdE+hhIAma5n1OpWO4BBI3s+u
6UvS9kptGV68PwoukbFSdTLF3AR/s88uJFT9vicWfSNvc9Vt1NS58yqrbzSwEzsd
pnyYDJS+06K6hofjev2gXyZIXFCnwsrQspJ5WUU7fuxZ622T0C3YE5g5aJQ=
-----END CERTIFICATE-----
Generated at Tue Dec 9 19:25:31 2025 by rpki-client