This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa File: 909e65c8-aef7-492e-84d6-88536c902cda.roa (raw, json) Hash identifier: rDh+X/7+Lobw67GZoZckZXhWfEpEwmlZS5M9tcOjAX0= Subject key identifier: 43:EE:B5:1B:72:DA:B6:15:1D:D4:7A:92:BF:C8:95:38:8F:83:C3:7E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6A0DF753CEAF62B34B4EF7A7D7EB808B83770F03 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa Signing time: Tue 25 Nov 2025 19:40:08 +0000 ROA not before: Tue 25 Nov 2025 19:40:08 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0d:f7:53:ce:af:62:b3:4b:4e:f7:a7:d7:eb:80:8b:83:77:0f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 25 19:40:08 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=43f99ec08770329674c4a11afd663e842520c85a5836f433a5ce51664ec01b4d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:8b:52:8f:7e:dd:ac:0d:fe:cc:76:2c:13: 45:f1:c3:81:b5:7e:aa:ab:e4:41:92:e9:39:5a:e2: ce:36:03:91:e0:cd:89:b4:52:ca:92:91:62:02:7d: 77:20:10:fd:f6:9f:93:61:84:79:a1:b1:34:e9:ed: 72:a1:c4:a1:9a:2b:b0:89:a1:65:16:34:d8:dc:ce: c8:1f:bd:48:31:67:c0:08:d9:a0:de:a8:05:e5:22: 7e:83:65:8c:44:37:b2:16:2d:1c:ea:12:59:87:74: c2:6e:8c:f5:05:16:d0:d1:fb:09:44:f0:47:18:30: ee:2e:16:88:3f:08:09:ea:bc:55:57:52:05:e9:41: 68:3c:35:fd:2e:0d:a5:6c:19:b5:13:3f:f4:46:b3: 16:3e:91:7a:b1:90:6f:de:0f:27:3a:ff:b9:13:8f: b5:ee:bf:6f:ed:ab:54:e9:7a:ed:3e:f4:c8:c0:9c: ce:e4:83:7e:55:06:c6:e0:b4:0a:f5:da:95:be:b0: 02:e6:a1:ec:c3:a8:2e:d1:a4:79:1a:0a:61:dc:87: 74:76:ed:20:d0:0a:73:ab:9e:56:27:f8:8a:d4:85: e0:39:f5:09:8c:5c:17:34:ed:32:87:1e:6c:53:e4: 1f:6f:88:4d:55:8b:0a:aa:6d:5a:9c:0a:89:d2:91: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EE:B5:1B:72:DA:B6:15:1D:D4:7A:92:BF:C8:95:38:8F:83:C3:7E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 86:4f:aa:7f:fb:40:86:86:ba:94:0a:39:80:59:1c:f2:b1:30: 9e:ba:bd:2f:e4:eb:1b:11:0d:b6:bc:1e:77:55:6f:4f:48:f0: 5e:0b:e3:50:13:9f:9a:4c:41:fd:6b:e5:a9:ae:bf:d5:e2:83: 13:82:b9:89:8a:df:db:7e:44:b9:11:09:1c:91:57:5c:52:81: 04:9a:2e:a0:30:85:14:44:3c:f9:85:a5:8e:ec:c4:7b:33:d7: 0d:ac:85:6f:01:f8:e5:39:f3:c6:ec:c2:44:36:d9:1d:96:e5: de:b6:74:5a:07:3d:8f:37:2b:22:59:2d:83:22:16:81:1f:24: 30:26:1a:23:f1:f3:55:c4:39:1e:de:88:db:76:95:7b:07:a0: c7:38:ac:18:d0:75:c5:13:82:b3:a0:00:17:da:b2:00:d6:f8: a2:e8:dc:c8:21:b4:b4:79:d5:08:6c:29:6d:e3:9d:b4:1a:db: d9:85:f3:c0:90:06:88:05:4f:15:bd:e0:84:be:6c:9f:e3:c3: 91:7b:4a:45:b8:9d:b5:ca:02:27:aa:95:7d:71:1e:b2:59:24: 62:a2:b6:5d:bb:fa:8d:b7:59:96:fb:e7:85:30:d9:27:57:65: 82:79:90:3b:fe:5b:42:96:2c:73:1e:e9:cd:2e:55:eb:a9:ab: 3d:3f:41:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUag33U86vYrNLTven1+uAi4N3DwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTI1MTk0MDA4WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2Y5OWVjMDg3NzAzMjk2NzRjNGExMWFmZDY2M2U4NDI1 MjBjODVhNTgzNmY0MzNhNWNlNTE2NjRlYzAxYjRkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9fotSj37drA3+zHYsE0Xxw4G1fqqr5EGS6Tla4s42A5Hg zYm0UsqSkWICfXcgEP32n5NhhHmhsTTp7XKhxKGaK7CJoWUWNNjczsgfvUgxZ8AI 2aDeqAXlIn6DZYxEN7IWLRzqElmHdMJujPUFFtDR+wlE8EcYMO4uFog/CAnqvFVX UgXpQWg8Nf0uDaVsGbUTP/RGsxY+kXqxkG/eDyc6/7kTj7Xuv2/tq1Tpeu0+9MjA nM7kg35VBsbgtAr12pW+sALmoezDqC7RpHkaCmHch3R27SDQCnOrnlYn+IrUheA5 9QmMXBc07TKHHmxT5B9viE1ViwqqbVqcConSkaHnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ+61G3LathUd1HqSv8iVOI+Dw34wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkwOWU2NWM4LWFlZjctNDkyZS04NGQ2LTg4NTM2YzkwMmNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBQwDQYJKoZIhvcNAQELBQADggEBAIZPqn/7QIaGupQKOYBZHPKxMJ66 vS/k6xsRDba8HndVb09I8F4L41ATn5pMQf1r5amuv9XigxOCuYmK39t+RLkRCRyR V1xSgQSaLqAwhRREPPmFpY7sxHsz1w2shW8B+OU588bswkQ22R2W5d62dFoHPY83 KyJZLYMiFoEfJDAmGiPx81XEOR7eiNt2lXsHoMc4rBjQdcUTgrOgABfasgDW+KLo 3MghtLR51QhsKW3jnbQa29mF88CQBogFTxW94IS+bJ/jw5F7SkW4nbXKAieqlX1x HrJZJGKitl27+o23WZb754Uw2SdXZYJ5kDv+W0KWLHMe6c0uVeupqz0/QcY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:10 2025 by rpki-client