This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa File: 7c33d577-2251-4085-bace-8c3b8f2bada2.roa (raw, json) Hash identifier: IGHzMu58WN4pkt2Qi9223sf2+JZc7HYE/3BKGvr73MA= Subject key identifier: 67:4D:AA:D2:CF:ED:A7:FD:46:6B:2A:61:BA:80:27:15:02:87:60:28 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 26C53D8FB1175398DBBB3E7F551053EB14841FA9 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa Signing time: Sun 16 Nov 2025 00:00:05 +0000 ROA not before: Sun 16 Nov 2025 00:00:05 +0000 ROA not after: Sun 21 Dec 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c5:3d:8f:b1:17:53:98:db:bb:3e:7f:55:10:53:eb:14:84:1f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 16 00:00:05 2025 GMT Not After : Dec 21 23:59:59 2025 GMT Subject: serialNumber=447b13fdeebc28c55e6dc62be1e11815d8d9f01ec037f3729a5eca7021e8478c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:aa:6d:e9:bb:04:1a:99:f5:7c:6f:c0:c1: 9b:dc:92:9a:e8:47:1c:f7:e0:be:7e:da:f8:6f:7c: cc:ea:20:e4:df:de:94:47:5d:54:2a:1c:f7:d9:a6: a1:f2:35:bb:d3:4f:6b:b1:81:1e:ef:d9:08:c7:9f: a8:6d:ad:70:d8:dc:91:14:5f:9a:60:14:35:de:ed: 32:32:0b:83:48:83:45:af:57:eb:d6:14:c7:ca:4e: 4e:1f:07:aa:2c:54:4c:c6:2d:76:1f:dd:61:21:19: 61:ed:be:46:45:d5:8c:e8:7f:cc:d5:00:a6:3d:65: 07:94:d0:2a:bd:0c:38:8f:9e:b0:66:9e:a7:6a:67: 60:29:e9:aa:d7:13:64:ab:45:97:72:58:33:56:6c: 91:3e:7c:26:78:79:d0:c6:3f:b1:04:a4:93:e5:2f: cb:d5:77:e5:55:96:e6:86:80:47:9e:44:7b:65:0d: 8d:cc:8d:68:1a:1a:8f:76:48:66:03:0d:fc:c4:27: 6a:53:71:97:1e:61:b8:78:b0:fe:b9:59:e1:12:b9: 14:3c:77:3c:22:fc:89:6f:db:fe:8c:ca:17:fd:aa: ee:e7:3b:b6:f0:38:43:11:2d:42:76:ca:99:76:9e: 14:48:14:93:f8:27:fa:90:5d:34:c7:a2:87:ea:82: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4D:AA:D2:CF:ED:A7:FD:46:6B:2A:61:BA:80:27:15:02:87:60:28 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.1.0/24 Signature Algorithm: sha256WithRSAEncryption 22:7b:d2:a2:a0:86:a3:f5:db:a6:9e:a8:21:85:d0:16:71:af: 3e:0b:a4:d1:1b:17:da:05:ef:2c:4e:73:90:37:e6:9c:5b:0f: ae:1d:04:29:95:12:86:53:cb:9f:b9:a3:18:93:2e:bd:39:9a: 66:06:78:94:38:34:e4:ea:35:4e:f9:cc:11:d1:a7:98:72:5d: b2:75:18:fb:d0:1c:0e:72:fc:74:8d:77:cf:8a:48:d9:83:71: f4:18:79:9a:ea:81:1d:46:22:e4:06:83:43:d1:ca:13:d1:4f: 61:b7:30:a2:90:e3:35:3d:36:8e:98:c7:38:d8:8c:b1:b7:b6: 0c:6c:72:65:90:da:52:00:c6:19:95:38:a3:8d:c4:f1:b1:46: 25:af:e2:51:3d:37:6f:9a:ad:5c:33:3f:72:b6:63:31:c5:28: c8:f9:10:a8:b7:82:67:d2:76:d7:1a:98:ae:40:9a:5a:23:45: 05:27:53:a4:34:b7:04:5b:6b:71:98:46:37:2a:13:89:51:b5: 3c:96:80:98:c7:b3:96:c9:04:ee:63:2f:72:00:35:a7:8c:83: 0a:7c:cb:a5:05:6f:8d:6e:78:61:22:10:41:6f:02:17:5b:b4: 92:60:8a:9e:9a:c1:d6:f4:d8:6b:9f:cb:7c:ab:17:e3:1b:75: cb:e3:ab:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJsU9j7EXU5jbuz5/VRBT6xSEH6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTE2MDAwMDA1WhcNMjUxMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDdiMTNmZGVlYmMyOGM1NWU2ZGM2MmJlMWUxMTgxNWQ4 ZDlmMDFlYzAzN2YzNzI5YTVlY2E3MDIxZTg0NzhjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJKqpt6bsEGpn1fG/AwZvckproRxz34L5+2vhvfMzqIOTf 3pRHXVQqHPfZpqHyNbvTT2uxgR7v2QjHn6htrXDY3JEUX5pgFDXe7TIyC4NIg0Wv V+vWFMfKTk4fB6osVEzGLXYf3WEhGWHtvkZF1Yzof8zVAKY9ZQeU0Cq9DDiPnrBm nqdqZ2Ap6arXE2SrRZdyWDNWbJE+fCZ4edDGP7EEpJPlL8vVd+VVluaGgEeeRHtl DY3MjWgaGo92SGYDDfzEJ2pTcZceYbh4sP65WeESuRQ8dzwi/Ilv2/6Myhf9qu7n O7bwOEMRLUJ2ypl2nhRIFJP4J/qQXTTHoofqglvlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ02q0s/tp/1GayphuoAnFQKHYCgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzdjMzNkNTc3LTIyNTEtNDA4NS1iYWNlLThjM2I4ZjJiYWRhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAEwDQYJKoZIhvcNAQELBQADggEBACJ70qKghqP126aeqCGF0BZxrz4L pNEbF9oF7yxOc5A35pxbD64dBCmVEoZTy5+5oxiTLr05mmYGeJQ4NOTqNU75zBHR p5hyXbJ1GPvQHA5y/HSNd8+KSNmDcfQYeZrqgR1GIuQGg0PRyhPRT2G3MKKQ4zU9 No6YxzjYjLG3tgxscmWQ2lIAxhmVOKONxPGxRiWv4lE9N2+arVwzP3K2YzHFKMj5 EKi3gmfSdtcamK5AmlojRQUnU6Q0twRba3GYRjcqE4lRtTyWgJjHs5bJBO5jL3IA NaeMgwp8y6UFb41ueGEiEEFvAhdbtJJgip6awdb02Gufy3yrF+Mbdcvjq/E= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:48 2025 by rpki-client