This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cb336a48-8f3f-4a38-8d83-16df977c3695.roa
File: cb336a48-8f3f-4a38-8d83-16df977c3695.roa (raw, json)
Hash identifier: C5CazSQvioPsl1YXlBcxSXVpWKLct4blQayxCwV3pdw=
Subject key identifier: B9:B2:2E:EA:8F:73:28:D0:D0:AD:3C:B3:55:AD:09:88:23:12:7D:2C
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 60C7621509DDB855C4C26D9F89267EA5E331A163
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cb336a48-8f3f-4a38-8d83-16df977c3695.roa
Signing time: Thu 13 Nov 2025 02:00:12 +0000
ROA not before: Thu 13 Nov 2025 02:00:12 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 801
IP address blocks: 35.96.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c7:62:15:09:dd:b8:55:c4:c2:6d:9f:89:26:7e:a5:e3:31:a1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 13 02:00:12 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=76ecf529f1c40eaeeb8e7a2a7a3fe43ede97f535ba436ddd212f78d59e31e704, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:41:f2:55:47:80:42:37:9a:c9:23:59:2a:
c9:11:14:db:f8:3e:6c:73:c4:67:9b:ed:cd:ae:e0:
6d:d5:ea:57:b2:7d:47:5b:91:b1:9a:80:bf:d4:40:
53:63:46:d3:f8:db:e1:75:97:9d:d2:8b:aa:19:f4:
4e:28:76:99:cc:b8:fc:5a:41:7a:c8:09:37:dc:83:
27:f0:f4:a4:5d:5c:d2:1c:6f:23:0b:18:52:37:54:
45:eb:34:ff:c3:9f:40:d1:08:f2:61:62:35:5d:3f:
22:ce:13:0d:42:15:2a:a3:54:73:6e:85:8b:4c:2c:
6a:22:f9:6a:06:5c:8b:de:02:0a:58:cf:42:61:a5:
2e:d2:b2:74:e3:ca:db:1f:18:96:68:23:e2:6b:3c:
27:15:a3:fc:16:29:44:66:81:4b:2a:c6:59:74:fc:
f2:c3:1d:51:49:fe:d2:95:1e:bd:a8:64:6f:51:b5:
1e:1c:fa:e8:a6:9c:92:12:07:e3:91:b5:72:d6:a8:
5f:1b:1b:9d:79:a4:4a:04:bb:b4:d3:6d:5d:7d:ac:
d7:f8:6c:96:81:fd:d0:1b:b8:7c:47:16:6c:a8:cb:
61:46:cf:9a:d1:30:7e:df:a2:b4:26:20:bb:fd:ba:
ee:94:08:ce:20:d3:86:31:db:0d:39:4b:9c:aa:b0:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B2:2E:EA:8F:73:28:D0:D0:AD:3C:B3:55:AD:09:88:23:12:7D:2C
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cb336a48-8f3f-4a38-8d83-16df977c3695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.39.0/24
Signature Algorithm: sha256WithRSAEncryption
22:67:fd:85:60:1d:b9:4a:d0:96:13:29:9f:54:81:7c:c1:ec:
a8:2f:0e:83:93:f1:49:2c:29:de:8b:db:3a:20:2f:6c:b9:88:
40:d3:2d:e9:11:e8:0d:0a:58:19:b2:1e:1c:a9:ae:17:2c:89:
f1:7c:e9:b0:d5:ff:ec:bf:33:88:7e:ff:d4:ae:5f:51:e2:49:
c1:ac:e4:72:c3:95:a3:45:c9:d9:54:fc:cd:af:92:90:a8:da:
4e:b1:15:9e:7f:50:12:48:23:f2:ac:2d:1c:fa:18:e8:66:b4:
9e:6b:68:f1:47:9a:48:f0:42:73:76:b7:e8:bf:ab:e3:8f:92:
c3:92:45:66:3c:bc:fd:a7:94:57:1f:cc:86:8c:37:10:28:c0:
fc:1b:78:39:7b:de:f3:f3:e0:6c:4e:10:d3:3f:d9:58:23:74:
a3:0a:ef:2f:05:cd:9d:e8:d5:d7:b7:11:bf:4c:6c:97:a3:a6:
a1:9e:38:d9:c6:e9:bb:83:14:08:59:a4:bf:ef:bb:d5:8c:a8:
ac:37:79:de:c5:b0:d2:6c:b7:5d:07:1c:88:9c:ff:e0:e2:9e:
29:a0:58:11:d4:d4:80:5b:20:68:6d:7a:3b:3b:f4:14:b8:b6:
7c:7d:ce:c5:3b:02:43:62:a3:41:d5:1e:bc:eb:eb:43:68:c5:
cb:1d:f8:13
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYMdiFQnduFXEwm2fiSZ+peMxoWMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTEzMDIwMDEyWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NmVjZjUyOWYxYzQwZWFlZWI4ZTdhMmE3YTNmZTQzZWRl
OTdmNTM1YmE0MzZkZGQyMTJmNzhkNTllMzFlNzA0MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCs00HyVUeAQjeaySNZKskRFNv4PmxzxGeb7c2u4G3V6ley
fUdbkbGagL/UQFNjRtP42+F1l53Si6oZ9E4odpnMuPxaQXrICTfcgyfw9KRdXNIc
byMLGFI3VEXrNP/Dn0DRCPJhYjVdPyLOEw1CFSqjVHNuhYtMLGoi+WoGXIveAgpY
z0JhpS7SsnTjytsfGJZoI+JrPCcVo/wWKURmgUsqxll0/PLDHVFJ/tKVHr2oZG9R
tR4c+uimnJISB+ORtXLWqF8bG515pEoEu7TTbV19rNf4bJaB/dAbuHxHFmyoy2FG
z5rRMH7forQmILv9uu6UCM4g04Yx2w05S5yqsI+JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUubIu6o9zKNDQrTyzVa0JiCMSfSwwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2NiMzM2YTQ4LThmM2YtNGEzOC04ZDgzLTE2ZGY5NzdjMzY5NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYCcwDQYJKoZIhvcNAQELBQADggEBACJn/YVgHblK0JYTKZ9UgXzB7Kgv
DoOT8UksKd6L2zogL2y5iEDTLekR6A0KWBmyHhyprhcsifF86bDV/+y/M4h+/9Su
X1HiScGs5HLDlaNFydlU/M2vkpCo2k6xFZ5/UBJII/KsLRz6GOhmtJ5raPFHmkjw
QnN2t+i/q+OPksOSRWY8vP2nlFcfzIaMNxAowPwbeDl73vPz4GxOENM/2VgjdKMK
7y8FzZ3o1de3Eb9MbJejpqGeONnG6buDFAhZpL/vu9WMqKw3ed7FsNJst10HHIic
/+DinimgWBHU1IBbIGhtejs79BS4tnx9zsU7AkNio0HVHrzr60Noxcsd+BM=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:14 2025 by rpki-client