This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a48c648b-cac3-47bc-bee4-c8421839a5ff.roa File: a48c648b-cac3-47bc-bee4-c8421839a5ff.roa (raw, json) Hash identifier: VL94vwM9MOgbX4cDzI2iJTUZBMc2PrD7/PSXqdvA05c= Subject key identifier: 2E:69:32:7D:93:4A:B4:02:07:2E:AB:96:4D:9B:AD:0A:CB:36:C3:21 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 42B888F413D2042A1170ADF0BDE69CE3B27C079A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a48c648b-cac3-47bc-bee4-c8421839a5ff.roa Signing time: Fri 28 Nov 2025 00:00:09 +0000 ROA not before: Fri 28 Nov 2025 00:00:09 +0000 ROA not after: Thu 26 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.111.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b8:88:f4:13:d2:04:2a:11:70:ad:f0:bd:e6:9c:e3:b2:7c:07:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 28 00:00:09 2025 GMT Not After : Feb 26 23:59:59 2026 GMT Subject: serialNumber=b83ed34f4e36c8b181eb4d02d0d6fcfcfaab8dc40806964ebecc52887978a652, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:cb:ad:0b:a7:d6:b8:e9:19:b7:66:fb:f1: 16:03:70:8d:69:82:cb:28:22:b3:37:09:0d:98:0b: ef:3b:4f:1d:d2:20:4d:85:3e:e1:4e:ee:34:52:cb: 8f:ef:a6:f8:0a:03:49:44:e8:92:ed:4b:3e:9e:97: 99:d5:59:e4:2c:04:6c:fa:2d:9c:68:f4:0f:f9:5a: b2:0a:3d:4b:93:c9:06:d1:42:e0:c7:fc:a4:5c:04: 52:bb:f9:81:cc:e9:92:9b:ef:f0:eb:88:53:b4:24: 3c:4e:c1:f7:ad:18:71:52:f7:5f:b5:ca:11:dc:08: b4:13:31:32:99:16:f0:ed:9c:e0:c3:e2:22:e1:27: 44:90:7d:36:a8:a5:f3:fc:da:ec:8d:ae:f0:56:2d: ca:6c:2b:40:a7:5a:34:e8:76:b3:e9:0d:9d:ec:54: 2f:95:0c:5f:f9:4c:86:3e:30:d4:09:14:5d:21:05: d4:ad:3c:f4:15:26:65:ec:52:ac:d2:1d:df:56:14: f4:30:0b:74:96:d6:7c:ad:cb:a3:48:55:30:42:e5: 97:f4:c8:dc:b9:90:9f:9c:fd:a5:41:21:7a:ff:05: d2:80:ff:8c:6b:1c:cf:75:91:09:54:4c:ff:25:8b: ce:0c:86:19:d7:31:a5:6e:54:80:44:7c:ad:dc:f6: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:69:32:7D:93:4A:B4:02:07:2E:AB:96:4D:9B:AD:0A:CB:36:C3:21 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a48c648b-cac3-47bc-bee4-c8421839a5ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.255.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:26:39:91:2c:30:26:83:8f:8e:68:cb:ed:f2:06:f7:5c:5a: 02:61:d4:1e:c4:b1:6d:b0:fa:7c:48:f2:15:c2:c3:cd:78:53: f4:6c:b4:98:50:4e:67:d8:25:7b:af:be:df:d3:3f:5a:76:d8: a7:d5:d5:2f:9e:df:c8:2a:d4:eb:ae:5b:1a:19:a5:04:c1:cb: 74:87:77:9f:32:7a:14:c7:29:cf:36:95:c3:41:e8:6a:d9:30: e2:b8:45:4b:36:66:d7:dd:61:36:be:a9:e6:f7:de:ad:6d:57: 6b:3a:16:27:c2:cb:78:d6:99:45:56:f5:c9:6d:3a:20:e2:2d: ad:c5:72:ce:d6:71:19:b6:5d:fe:68:f6:60:a1:29:11:82:f5: a5:01:97:65:1a:be:5b:ee:33:17:17:e1:93:e5:70:69:f4:db: 52:66:3a:58:0d:70:3f:1d:12:bd:b1:22:2c:38:83:7b:34:8d: 52:46:f0:94:c0:7c:54:3c:43:83:b3:10:ac:db:4b:7f:4a:4e: 8e:fa:c5:5c:da:7d:ec:81:e0:a8:3c:95:18:4c:ed:a3:7d:9a: e0:50:88:b5:1c:37:fd:38:18:3f:98:79:ba:61:af:ee:a9:e5: 9c:c3:10:7e:19:56:55:80:11:8e:3d:e4:96:f0:c3:67:4b:2b: 6e:32:d6:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQriI9BPSBCoRcK3wveac47J8B5owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTI4MDAwMDA5WhcNMjYwMjI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODNlZDM0ZjRlMzZjOGIxODFlYjRkMDJkMGQ2ZmNmY2Zh YWI4ZGM0MDgwNjk2NGViZWNjNTI4ODc5NzhhNjUyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtucutC6fWuOkZt2b78RYDcI1pgssoIrM3CQ2YC+87Tx3S IE2FPuFO7jRSy4/vpvgKA0lE6JLtSz6el5nVWeQsBGz6LZxo9A/5WrIKPUuTyQbR QuDH/KRcBFK7+YHM6ZKb7/DriFO0JDxOwfetGHFS91+1yhHcCLQTMTKZFvDtnODD 4iLhJ0SQfTaopfP82uyNrvBWLcpsK0CnWjTodrPpDZ3sVC+VDF/5TIY+MNQJFF0h BdStPPQVJmXsUqzSHd9WFPQwC3SW1nyty6NIVTBC5Zf0yNy5kJ+c/aVBIXr/BdKA /4xrHM91kQlUTP8li84MhhnXMaVuVIBEfK3c9mWbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULmkyfZNKtAIHLquWTZutCss2wyEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E0OGM2NDhiLWNhYzMtNDdiYy1iZWU0LWM4NDIxODM5YTVmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/8wDQYJKoZIhvcNAQELBQADggEBABsmOZEsMCaDj45oy+3yBvdcWgJh 1B7EsW2w+nxI8hXCw814U/RstJhQTmfYJXuvvt/TP1p22KfV1S+e38gq1OuuWxoZ pQTBy3SHd58yehTHKc82lcNB6GrZMOK4RUs2ZtfdYTa+qeb33q1tV2s6FifCy3jW mUVW9cltOiDiLa3Fcs7WcRm2Xf5o9mChKRGC9aUBl2UavlvuMxcX4ZPlcGn021Jm OlgNcD8dEr2xIiw4g3s0jVJG8JTAfFQ8Q4OzEKzbS39KTo76xVzafeyB4Kg8lRhM 7aN9muBQiLUcN/04GD+Yebphr+6p5ZzDEH4ZVlWAEY495Jbww2dLK24y1pg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:53 2025 by rpki-client