This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa
File: cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa (raw, json)
Hash identifier: ZvcjnKwCeXqTG1BLxlkdJJTGpU4XcXeY0bEUkTEeVLo=
Subject key identifier: 76:48:A7:FB:1B:F8:31:A7:AD:20:83:F3:A2:2B:5F:3F:5C:1C:DC:7B
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5564B5993AC5159310CDEC8365082F5E4D828269
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa
Signing time: Wed 10 Dec 2025 04:50:03 +0000
ROA not before: Wed 10 Dec 2025 04:50:03 +0000
ROA not after: Tue 10 Mar 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:64:b5:99:3a:c5:15:93:10:cd:ec:83:65:08:2f:5e:4d:82:82:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 10 04:50:03 2025 GMT
Not After : Mar 10 23:59:59 2026 GMT
Subject: serialNumber=fce8e7518c3ed650cc7834cff7063433b784787e84af6bcfcf417bf6ac481b1a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:66:23:23:34:13:52:fd:64:67:02:55:44:
4a:6d:ac:49:a7:6f:b4:8e:24:05:b8:1d:9a:94:52:
db:fc:b7:1a:d7:e0:6f:91:72:f6:22:fa:50:00:a1:
9c:e0:9f:d3:bc:51:fb:87:5e:df:36:68:5c:db:a5:
39:9d:6d:82:b0:cd:3a:fe:b1:5a:3b:8b:95:03:d6:
0d:dd:33:e9:37:91:32:32:a0:a1:59:48:0c:92:9d:
79:a9:47:bb:27:cc:ba:9c:1c:10:82:c3:13:cc:85:
61:d6:cb:ee:04:8b:15:5f:bb:a4:c1:6a:e2:58:8e:
85:fb:7e:54:a9:8e:9a:9c:75:7a:c2:a2:87:9d:9e:
b7:fb:31:55:ef:dd:0e:fa:05:c4:00:b4:b9:8a:c2:
83:81:3c:a6:10:22:b2:56:01:c6:f9:1f:d7:d3:73:
43:50:09:02:84:4e:4a:77:79:5f:18:a1:c5:c9:ec:
bb:94:fa:b3:ca:5e:78:ac:3d:27:40:21:eb:e5:ab:
f7:ad:6f:c9:b5:30:bd:7d:c5:e0:9c:ab:5c:46:da:
5c:41:59:be:e6:a8:d4:c0:f7:45:03:37:3e:c1:42:
3f:19:7b:85:26:46:3c:d5:17:98:80:5f:d9:b6:53:
67:22:a8:48:bd:74:15:90:61:69:25:82:32:db:22:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:48:A7:FB:1B:F8:31:A7:AD:20:83:F3:A2:2B:5F:3F:5C:1C:DC:7B
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cf7c8f4a-0827-444b-b6e4-9a45ca69f600.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:43:44:4c:6a:be:66:f1:f4:e7:38:f5:ee:a0:54:24:5a:f2:
d8:11:98:77:05:81:3f:34:77:85:64:cb:2e:1b:12:3d:df:7f:
61:25:93:45:ff:41:87:3c:7c:88:21:c7:be:56:03:c0:2e:60:
5a:cd:4d:61:32:b4:a1:15:23:c9:b7:5e:15:2c:fc:95:d0:ad:
08:85:32:0e:31:0d:f1:3d:40:8b:41:a6:35:34:24:3e:4b:10:
06:cd:b9:45:cb:5c:21:eb:4f:2d:03:17:d3:bf:16:0a:2f:9e:
83:70:fe:b5:1f:25:0f:e8:92:9c:3e:33:40:35:33:48:01:9f:
10:ea:89:e6:ad:5e:55:6c:72:fc:97:63:e5:06:0b:88:22:6d:
12:cb:48:a2:22:91:aa:5d:01:2a:b9:54:48:15:4a:e2:ad:b6:
c3:73:c3:d3:94:e4:ee:28:cc:96:48:9e:7c:c5:aa:33:32:3f:
0e:f8:d9:4a:75:44:6e:0e:7f:6b:ed:95:97:ea:ed:53:c8:32:
76:da:3c:42:d4:0f:ea:d0:e5:d0:b3:ab:38:15:7b:e4:07:a7:
a2:b2:0a:98:64:38:f6:a2:2e:0f:15:5f:c7:67:4e:78:30:6f:
f1:ce:e7:88:a8:bd:ca:fa:44:1c:ca:bb:4f:2f:af:09:5e:39:
38:90:b5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:54:47 2025 by rpki-client