This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa
File: 5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa (raw, json)
Hash identifier: GoHfFnYxck4oSRE/vh2NO9rl33xIjT9yUyT0t3kEdQk=
Subject key identifier: 8E:E4:3A:0B:F4:52:6C:78:03:E3:D0:70:6E:E0:48:12:0E:3D:74:6B
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 1BC5446587437919EEA20361B0CC25F240D4C2AD
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa
Signing time: Mon 08 Dec 2025 02:00:32 +0000
ROA not before: Mon 08 Dec 2025 02:00:32 +0000
ROA not after: Sun 08 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 11 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c5:44:65:87:43:79:19:ee:a2:03:61:b0:cc:25:f2:40:d4:c2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 8 02:00:32 2025 GMT
Not After : Mar 8 23:59:59 2026 GMT
Subject: serialNumber=dd2e5c866ca8f56d03e7f7aee86a7824a98394cc294d56e4bb8bc63aa62d3f3c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:29:5a:79:78:dd:3e:e1:ba:5e:13:c2:9d:
68:fb:fc:0f:3e:f8:86:98:6d:ba:6d:d4:f9:22:a8:
ad:77:45:63:5d:d5:01:26:63:22:f2:dd:92:fd:68:
52:63:28:ba:97:f7:00:af:52:ce:34:c9:e8:fb:5e:
f1:0f:8b:2b:a1:30:27:62:ca:68:d5:6d:97:62:7c:
30:80:c4:58:76:2f:88:13:09:ad:d3:5b:3b:33:ab:
3e:b0:a1:be:2c:3c:66:e5:4e:44:e6:84:d2:27:4c:
ec:ae:9e:a4:b4:9f:d4:03:b3:5d:08:6e:d2:fd:01:
bd:1d:52:96:f9:bf:72:99:31:19:ec:72:e8:99:bc:
6f:58:fe:2b:c7:0b:e9:ae:63:a4:a3:c4:af:cd:f1:
d0:f7:df:39:c9:bc:ba:de:5f:c4:fc:3d:22:58:1a:
30:3e:e9:2f:bb:4d:50:7f:10:ea:eb:9d:3a:73:d7:
a0:d0:b2:4b:3c:a2:f8:92:42:35:c6:96:b9:16:e6:
2e:5f:c3:3e:bd:61:2d:9b:47:3b:4d:8c:bc:0b:ed:
27:12:87:56:80:a9:32:47:0c:94:03:b0:f2:22:f9:
78:e6:a7:9c:d6:40:44:fd:71:2d:4c:09:9b:09:e0:
00:43:92:6f:45:62:c9:bc:41:16:e6:9f:17:19:cc:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:3A:0B:F4:52:6C:78:03:E3:D0:70:6E:E0:48:12:0E:3D:74:6B
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.40.0/24
Signature Algorithm: sha256WithRSAEncryption
10:23:f8:a7:ee:bc:40:41:08:5e:2c:f7:96:a1:0a:d5:77:c2:
31:11:ac:68:d7:4a:11:ba:f2:4f:b5:ac:ea:29:8c:64:27:de:
2f:ad:e0:b2:79:b9:57:a4:4e:e2:a1:93:ee:dc:86:88:bb:4d:
e1:5e:21:74:10:16:4e:62:2b:05:9c:db:12:94:51:52:92:8b:
80:82:a9:dc:3c:09:18:48:9e:ac:05:76:33:f2:83:ef:8f:9f:
8e:b8:6c:c9:87:90:3f:98:ca:5a:9b:bc:83:f3:82:8b:d3:04:
8d:4c:7c:3d:21:cb:58:c7:75:fc:5c:0c:74:09:1f:d1:0a:b7:
99:e4:ca:90:90:f4:82:e0:55:a9:07:86:13:61:50:df:0f:c7:
5e:79:d7:7d:1f:b2:cd:93:8a:68:c9:ab:e0:36:aa:45:9e:27:
57:8b:8f:cd:31:3f:b7:d8:42:cb:e7:c2:7c:cf:73:32:40:cb:
69:b5:44:09:db:b0:27:a1:66:dd:53:4d:35:c6:f7:5e:42:52:
3f:c4:e8:ea:48:4e:31:eb:8b:f4:64:da:c8:a6:b9:56:84:da:
ba:69:90:6d:8b:09:6e:36:11:b1:7b:a0:48:f5:a4:b0:b5:fa:
37:06:96:84:22:a2:ec:92:6c:56:df:75:0f:70:c6:49:9d:a2:
f6:af:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 19:25:19 2025 by rpki-client