This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c7aad382-ae61-40b8-a77c-d9297773c96b.roa
File: c7aad382-ae61-40b8-a77c-d9297773c96b.roa (raw, json)
Hash identifier: 6XrcF+eGudGYexwsNY/xH3bkTWPvvPEmQFceUYaWCls=
Subject key identifier: 2E:2D:89:9E:13:04:F5:AF:69:FF:58:54:49:E4:DB:70:4B:60:64:36
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0FF05BCE00C14B74547FFA6476ACAE17A00B067D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c7aad382-ae61-40b8-a77c-d9297773c96b.roa
Signing time: Thu 13 Nov 2025 02:00:13 +0000
ROA not before: Thu 13 Nov 2025 02:00:13 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 801
IP address blocks: 35.96.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f0:5b:ce:00:c1:4b:74:54:7f:fa:64:76:ac:ae:17:a0:0b:06:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 13 02:00:13 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=9c99b9c8309c617feedbd388d092b93a502d3cded0319c497203afb4252bd9a9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:51:f3:cd:3f:5c:98:47:1b:f8:2a:6f:68:
a0:26:17:70:dc:9e:17:b7:42:77:f3:93:c5:f9:72:
19:13:4f:f7:e3:30:6e:d5:91:9d:c6:11:b9:cc:36:
54:bb:fc:83:70:1e:5b:22:5e:2f:5e:f9:bd:3d:22:
6e:42:cd:30:75:cc:47:12:db:1a:50:17:36:4f:22:
0e:9a:89:6c:cc:da:d5:7b:76:87:81:0b:86:89:65:
7a:d4:a5:e3:1d:6d:74:6f:89:f0:45:2c:89:97:d2:
06:59:9e:f8:e9:46:cb:7c:5e:bb:28:e6:2a:90:84:
b1:c5:9d:b1:db:c9:15:98:d7:a2:7c:9c:05:7f:ed:
56:70:2a:8d:fa:e6:3b:f6:e4:da:1c:f6:6b:23:03:
e8:83:6b:6c:24:53:19:6a:fd:b7:88:f3:c1:09:fe:
f4:b6:3c:ce:d6:fd:b8:28:15:f1:6b:c8:4a:4e:53:
74:ba:62:cd:ab:14:5e:06:2e:a1:94:d0:d1:ac:16:
70:e2:ba:8c:13:57:3d:55:73:c7:96:e1:01:2f:c6:
90:73:90:47:a3:4d:24:e0:ae:6d:4e:5d:03:27:c1:
75:f9:ea:80:12:31:98:b5:3f:a9:2a:cf:24:a3:30:
dc:43:10:79:19:a1:b3:77:32:16:64:1e:a0:11:56:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:89:9E:13:04:F5:AF:69:FF:58:54:49:E4:DB:70:4B:60:64:36
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c7aad382-ae61-40b8-a77c-d9297773c96b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.36.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4f:88:47:4e:6a:da:1a:53:22:56:a7:41:1d:56:6e:54:5b:
72:09:c9:51:3b:a5:8e:24:54:d0:31:65:94:b5:59:9b:55:57:
fe:fb:47:fe:d5:57:3c:21:97:38:d2:d4:67:de:4b:bc:1d:2a:
c0:40:fc:b2:ae:76:5d:e3:d4:3c:b3:23:e4:5a:8d:6b:4f:39:
82:3f:fc:c1:5e:65:44:01:91:01:68:f4:59:c8:9c:7f:88:b2:
df:e6:9a:5c:68:16:0f:e0:c1:95:39:35:e5:de:28:39:dc:1f:
8b:ae:f0:86:31:6f:03:74:37:60:de:e9:27:79:03:d8:1b:90:
27:16:f9:33:ee:e8:55:83:e5:68:2b:e1:77:37:39:4b:b6:ad:
a8:30:99:1d:b3:d9:5d:c9:f0:a9:d8:dd:db:d4:0f:b1:4e:7d:
40:55:cd:08:34:71:a5:fe:d0:fd:88:ac:af:65:43:5f:dc:37:
82:7b:f1:c6:1f:e4:49:ca:c2:b9:37:f0:17:ea:8c:49:b5:81:
42:97:a2:d4:22:8b:85:b6:17:c7:3c:53:7a:d9:8c:8f:11:23:
ab:55:af:86:9d:ce:5a:04:d9:fa:5a:7d:80:13:73:11:d0:9f:
89:a5:a1:87:c0:a1:1f:6e:ae:68:9c:62:92:8a:20:39:93:f9:
75:71:21:55
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUD/BbzgDBS3RUf/pkdqyuF6ALBn0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTEzMDIwMDEzWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5Yzk5YjljODMwOWM2MTdmZWVkYmQzODhkMDkyYjkzYTUw
MmQzY2RlZDAzMTljNDk3MjAzYWZiNDI1MmJkOWE5MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZ4FHzzT9cmEcb+CpvaKAmF3Dcnhe3Qnfzk8X5chkTT/fj
MG7VkZ3GEbnMNlS7/INwHlsiXi9e+b09Im5CzTB1zEcS2xpQFzZPIg6aiWzM2tV7
doeBC4aJZXrUpeMdbXRvifBFLImX0gZZnvjpRst8Xrso5iqQhLHFnbHbyRWY16J8
nAV/7VZwKo365jv25Noc9msjA+iDa2wkUxlq/beI88EJ/vS2PM7W/bgoFfFryEpO
U3S6Ys2rFF4GLqGU0NGsFnDiuowTVz1Vc8eW4QEvxpBzkEejTSTgrm1OXQMnwXX5
6oASMZi1P6kqzySjMNxDEHkZobN3MhZkHqARVvULAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULi2JnhME9a9p/1hUSeTbcEtgZDYwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2M3YWFkMzgyLWFlNjEtNDBiOC1hNzdjLWQ5Mjk3NzczYzk2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBAG9PiEdOatoaUyJWp0EdVm5UW3IJ
yVE7pY4kVNAxZZS1WZtVV/77R/7VVzwhlzjS1GfeS7wdKsBA/LKudl3j1DyzI+Ra
jWtPOYI//MFeZUQBkQFo9FnInH+Ist/mmlxoFg/gwZU5NeXeKDncH4uu8IYxbwN0
N2De6Sd5A9gbkCcW+TPu6FWD5Wgr4Xc3OUu2ragwmR2z2V3J8KnY3dvUD7FOfUBV
zQg0caX+0P2IrK9lQ1/cN4J78cYf5EnKwrk38BfqjEm1gUKXotQii4W2F8c8U3rZ
jI8RI6tVr4adzloE2fpafYATcxHQn4mloYfAoR9urmicYpKKIDmT+XVxIVU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:52 2025 by rpki-client