This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa File: 0be6e662-afc9-4903-9919-894f035a475c.roa (raw, json) Hash identifier: cYoq3BwQJIa/5KjyVpwjeYPju8E6JRf2S1UYo2ZxwNQ= Subject key identifier: FC:C3:F3:1F:EE:9E:5C:95:B6:57:A4:B6:40:87:43:D4:74:BE:03:9B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0B23B28DEBF9B97DF7F44B2E2841A02C62E51BAB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa Signing time: Thu 13 Nov 2025 01:50:08 +0000 ROA not before: Thu 13 Nov 2025 01:50:08 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:23:b2:8d:eb:f9:b9:7d:f7:f4:4b:2e:28:41:a0:2c:62:e5:1b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 13 01:50:08 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=d4a0072525186740e0552b491d5c3af5e9cabd54f618e2e8649e57568021699a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:97:4e:75:5f:6d:76:f3:05:9f:8f:9f:34: 36:fa:ba:44:0f:a7:20:d3:96:fe:f7:3d:c3:59:ea: 4a:1c:08:79:a2:51:16:0f:e5:a8:df:6c:2b:6f:58: 83:bc:e0:85:c1:a1:ab:af:74:bd:a8:e9:05:16:a1: e3:55:28:99:52:bf:bf:c7:3e:df:28:92:10:04:54: 38:85:fc:70:e9:8c:47:98:ac:b8:dc:b8:18:dd:18: a8:01:d9:01:b1:46:95:c4:64:cc:ed:d2:60:1a:99: da:15:88:43:57:3f:48:f1:47:e9:28:75:17:87:f2: 45:df:44:df:1d:31:29:88:3a:60:e4:1d:39:34:eb: 9b:64:8e:26:59:9c:61:a9:bc:6d:f4:50:79:ba:39: 89:16:37:8f:35:76:ac:03:92:a1:e2:18:d9:d9:d3: 6e:5c:a1:fb:f0:62:1e:08:0a:d8:d5:bd:ef:52:13: 4c:99:20:ef:3a:4a:b9:a0:6d:22:54:f3:c3:8c:10: 15:16:d3:1c:82:03:ec:9a:54:6e:7a:de:c7:6b:69: 5c:5b:d1:c6:26:9d:bf:35:f2:79:35:9a:67:52:9c: 96:01:e2:18:13:a9:4c:70:4c:22:de:1c:c4:61:7e: de:af:00:ac:3c:47:1b:a0:ec:fd:2e:f3:d9:5f:aa: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C3:F3:1F:EE:9E:5C:95:B6:57:A4:B6:40:87:43:D4:74:BE:03:9B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:63:4e:88:c6:33:bd:70:a1:f8:51:9f:d1:59:d2:18:98:7a: 97:60:0c:22:c5:37:65:e2:16:2c:76:eb:a4:12:21:18:0a:6c: 86:d7:f8:50:59:8d:4c:a3:fb:4a:bb:b7:d4:70:f3:48:4d:f0: 43:b9:e1:22:00:d8:ca:5d:6d:63:4f:81:92:b3:ec:fb:18:64: ba:2f:dc:6a:47:de:b4:bd:3b:ce:71:34:96:f6:8d:f2:aa:24: 1b:6e:dc:b9:b2:34:61:34:55:86:c2:9c:9e:fa:4e:24:1f:b5: 43:15:39:bd:00:a5:ca:74:be:ae:73:1a:f1:a0:e3:21:1a:1f: dc:a9:c8:4d:f8:a9:ac:e2:73:d7:17:95:d1:e8:d8:f6:70:e0: f9:e9:57:67:cf:57:d1:07:71:37:e6:9d:4d:4c:ef:17:8a:22: 79:65:60:07:cd:2d:cf:fe:93:27:ca:1d:4d:d4:3b:53:88:54: e6:f5:4a:c2:58:87:44:47:e7:d9:8c:76:a6:d9:0b:e3:aa:22: 8f:fa:5a:52:b2:24:5f:9d:36:d3:25:14:86:27:04:cf:37:e9: 25:cc:85:6c:24:c5:e1:ce:e1:b2:5a:fa:24:30:c8:83:5d:44: 86:9f:a4:ea:ad:fe:73:78:c7:b5:f7:97:3f:ca:cf:45:79:e2: cc:1e:e6:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCyOyjev5uX339EsuKEGgLGLlG6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTEzMDE1MDA4WhcNMjUxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGEwMDcyNTI1MTg2NzQwZTA1NTJiNDkxZDVjM2FmNWU5 Y2FiZDU0ZjYxOGUyZTg2NDllNTc1NjgwMjE2OTlhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB0JdOdV9tdvMFn4+fNDb6ukQPpyDTlv73PcNZ6kocCHmi URYP5ajfbCtvWIO84IXBoauvdL2o6QUWoeNVKJlSv7/HPt8okhAEVDiF/HDpjEeY rLjcuBjdGKgB2QGxRpXEZMzt0mAamdoViENXP0jxR+kodReH8kXfRN8dMSmIOmDk HTk065tkjiZZnGGpvG30UHm6OYkWN481dqwDkqHiGNnZ025cofvwYh4ICtjVve9S E0yZIO86SrmgbSJU88OMEBUW0xyCA+yaVG563sdraVxb0cYmnb818nk1mmdSnJYB 4hgTqUxwTCLeHMRhft6vAKw8Rxug7P0u89lfqhcpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/MPzH+6eXJW2V6S2QIdD1HS+A5swHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBiZTZlNjYyLWFmYzktNDkwMy05OTE5LTg5NGYwMzVhNDc1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBAD1jTojGM71wofhRn9FZ0hiYepdg DCLFN2XiFix266QSIRgKbIbX+FBZjUyj+0q7t9Rw80hN8EO54SIA2MpdbWNPgZKz 7PsYZLov3GpH3rS9O85xNJb2jfKqJBtu3LmyNGE0VYbCnJ76TiQftUMVOb0Apcp0 vq5zGvGg4yEaH9ypyE34qazic9cXldHo2PZw4PnpV2fPV9EHcTfmnU1M7xeKInll YAfNLc/+kyfKHU3UO1OIVOb1SsJYh0RH59mMdqbZC+OqIo/6WlKyJF+dNtMlFIYn BM836SXMhWwkxeHO4bJa+iQwyINdRIafpOqt/nN4x7X3lz/Kz0V54swe5hA= -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:06 2025 by rpki-client