This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa
File: 6b90b1f9-6b22-4e82-af32-2981da75246a.roa (raw, json)
Hash identifier: zbH4qPh2QbugV5oo7/hQIAlPjL30i3tRd4AOnn/sGe4=
Subject key identifier: 26:4C:BA:76:CB:79:CB:03:1A:F6:09:24:35:87:B1:81:77:00:3B:84
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 686C2DD4EB6FD8721CA2F2C93822AB4D5AABF24F
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa
Signing time: Sat 29 Nov 2025 02:50:06 +0000
ROA not before: Sat 29 Nov 2025 02:50:06 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:6c:2d:d4:eb:6f:d8:72:1c:a2:f2:c9:38:22:ab:4d:5a:ab:f2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 29 02:50:06 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=c1ebe41a581fd2d188a914e663bd5825d6ccb300837db926045a05a1e9d2af7f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:b6:93:83:84:15:d1:9b:36:33:b8:53:73:
90:80:13:9c:2a:7d:65:7e:c8:33:cd:10:3c:ed:90:
07:5c:75:fc:72:7d:eb:3b:34:9f:bc:b2:9f:ef:42:
6f:bb:9d:14:dc:78:a9:44:32:d5:60:95:de:d5:98:
fd:77:36:11:6a:31:f1:11:3a:cb:eb:5d:79:fe:a7:
3b:14:39:1e:70:c9:66:41:d0:70:aa:7a:34:90:5c:
83:dd:5b:8c:3d:fc:d1:95:57:a0:93:72:a1:cd:af:
e6:e9:d0:5d:40:50:3c:79:3b:e9:18:a2:c6:04:89:
a8:0f:97:21:98:78:6a:d0:cf:34:74:35:25:22:5d:
3a:55:34:0e:52:b9:c5:40:d4:35:52:cf:70:a5:81:
7b:42:cb:e2:95:4f:8d:6b:6a:1c:84:e6:f1:d0:58:
6c:5f:d6:c6:07:f5:05:90:66:66:c8:8a:94:4b:d7:
bd:54:1d:ba:1e:8a:4c:d6:56:dd:d5:84:93:7a:dc:
eb:90:69:16:3b:15:70:3d:78:9c:ed:ba:d4:30:52:
32:af:43:20:56:6a:58:df:cd:a0:35:31:5d:d0:c0:
4d:d1:c9:e8:cd:38:6e:9c:45:9b:b9:d7:d5:ce:09:
19:b5:6c:31:f9:ae:b4:a7:d3:7b:7b:1a:70:fb:88:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:BA:76:CB:79:CB:03:1A:F6:09:24:35:87:B1:81:77:00:3B:84
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:aa:22:bb:b1:1a:be:6a:d0:33:9a:ee:47:f8:14:fb:a8:16:
07:5c:80:ee:a7:67:69:4f:64:4d:69:c7:e0:68:51:98:2f:d6:
3c:58:e6:e8:7d:55:9b:a3:e5:bc:f0:b6:04:0a:69:6b:61:71:
38:2b:7a:8c:23:49:6c:d6:aa:e3:67:10:cb:db:0f:a3:2d:1b:
1e:41:a5:23:06:24:df:9f:e7:f5:6a:37:4a:c1:e9:fe:91:f4:
51:f6:64:d0:c8:16:04:a9:6b:50:2a:65:81:84:ac:f7:ae:72:
77:5d:33:31:64:b7:e4:e4:37:dc:8a:76:e4:02:25:bf:ca:04:
d1:89:0f:29:06:1c:34:99:62:9a:74:c6:5b:07:55:d7:30:c0:
92:94:33:66:0c:a0:00:df:76:8b:a9:f2:a3:80:84:65:2d:58:
04:9b:db:a7:d1:5c:74:d8:7e:f8:f3:a7:45:00:72:e2:5f:9e:
0e:85:c4:85:04:f4:c6:06:4d:7a:45:91:51:a8:3e:7b:14:4b:
77:5f:3f:ca:ef:09:73:6e:e4:4f:1d:8c:7f:f9:c3:d2:aa:3a:
30:b9:da:81:25:61:f6:65:19:2a:f1:0d:5a:fd:89:bd:72:9e:
ff:93:19:65:6a:33:7f:1b:17:4a:d5:56:8f:d5:ce:63:a6:e9:
3f:10:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:09:41 2025 by rpki-client