This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa
File: dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa (raw, json)
Hash identifier: sy5yr1l60wAw+knuWq54hHkoYEHs+v88eIWVWmHYG9E=
Subject key identifier: C1:4D:74:74:E7:D3:26:88:B0:BD:51:20:1F:83:0D:5D:D9:10:00:92
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 64ED0BC249A6EFB1E03B87418E5CFE803D95B5A1
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa
Signing time: Sat 29 Nov 2025 02:50:12 +0000
ROA not before: Sat 29 Nov 2025 02:50:12 +0000
ROA not after: Fri 27 Feb 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ed:0b:c2:49:a6:ef:b1:e0:3b:87:41:8e:5c:fe:80:3d:95:b5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 29 02:50:12 2025 GMT
Not After : Feb 27 23:59:59 2026 GMT
Subject: serialNumber=73414bc6c4be151038203ef8061a4786909d8ce57c0e98cd644152d66193b7ac, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:a9:34:86:ec:18:bf:c6:4c:60:03:ce:20:
e4:94:f1:62:f5:fd:f4:f0:2f:9c:88:1f:ae:eb:4b:
bb:f9:0a:27:2c:e2:e0:d7:cf:3d:0e:f6:f3:52:69:
e6:d3:c0:9e:2b:ca:da:b1:d3:26:2e:00:55:20:70:
62:1d:1e:a0:e3:5d:9b:ee:3b:81:51:9a:db:1f:35:
95:93:ce:0f:69:09:86:2d:46:9a:90:88:04:dd:36:
84:f4:76:c5:ff:2b:c5:1d:12:66:ba:86:f1:0f:96:
8d:68:4c:03:a5:5a:6e:d8:1f:60:3e:ae:43:ee:83:
60:bc:4a:df:33:0e:fb:3f:ab:7c:a6:ef:0d:36:a1:
21:90:12:b2:bb:27:16:d5:c5:6b:8f:f8:1d:c3:78:
d5:4b:d2:e8:8f:5f:5b:45:d7:46:ed:5e:fc:77:84:
06:60:eb:ea:57:17:a8:73:64:a7:c7:94:49:b3:05:
da:9e:87:ac:e6:6c:2a:f0:f5:0d:f2:9f:a5:e5:90:
d6:4a:3d:e7:3f:f6:f8:49:cc:86:2d:80:f4:98:7f:
78:be:79:77:61:7a:db:a7:1d:15:8a:4f:3d:9e:84:
58:5b:95:7a:99:6b:58:74:1e:00:f7:de:a1:b7:4e:
e6:74:2d:c9:f0:10:2b:b2:a7:f5:c8:0c:ff:ad:33:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:74:74:E7:D3:26:88:B0:BD:51:20:1F:83:0D:5D:D9:10:00:92
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dc822c01-1717-4e45-a5a8-3a5dc916c76d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.11.0/24
Signature Algorithm: sha256WithRSAEncryption
94:63:58:88:6e:30:71:a1:12:a4:b4:b9:b3:df:2d:f0:f3:0f:
e4:c7:1d:47:9f:49:44:6c:1d:49:31:b0:85:10:f1:c6:f3:6b:
eb:7a:8b:d3:a8:c5:e4:fd:af:52:e5:91:39:96:de:06:16:9c:
d3:d2:f9:b0:a7:ab:60:2a:19:cd:3d:04:9d:e6:10:af:57:81:
98:a0:85:50:32:c6:b8:8c:b9:e6:05:b4:22:c9:b8:87:55:dc:
69:e0:3b:d5:61:13:99:89:bb:76:d9:d2:87:b2:55:6f:96:e8:
91:e5:c4:9e:04:b4:ea:5e:cc:41:70:40:75:91:7c:38:6a:b1:
a1:f7:f9:32:51:8c:57:93:36:c2:18:5c:bc:a1:3d:77:f4:02:
52:69:46:40:23:0f:55:6a:02:dd:bb:64:4f:3d:9f:3a:a6:32:
8b:06:3c:4c:d5:76:f6:f6:bd:4a:e5:67:7c:fb:00:d8:dd:b5:
bd:60:a3:87:88:81:f9:5a:b4:e7:4f:05:66:9b:71:79:8d:78:
55:10:f1:b0:14:0f:01:0a:c5:f3:8e:db:cf:27:f2:97:a1:e2:
4b:2c:83:da:71:ec:d7:b6:f1:78:b5:8a:35:a8:f8:40:32:98:
f7:67:6f:76:e5:cd:d3:30:3a:52:c9:a9:21:62:5e:e2:85:4c:
ce:24:56:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:12:07 2025 by rpki-client