This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa File: ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa (raw, json) Hash identifier: PweNAOcNfb+PELLrFswB5T/hKiQ2qmc5nPlyb20wmVc= Subject key identifier: 6D:11:5D:27:F9:F7:75:C5:07:EB:DB:D0:9B:C2:4B:56:7B:00:C7:09 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 49583F7B42AC44F12C42845B43F888DF5CB86E6C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa Signing time: Sat 29 Nov 2025 02:50:09 +0000 ROA not before: Sat 29 Nov 2025 02:50:09 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:58:3f:7b:42:ac:44:f1:2c:42:84:5b:43:f8:88:df:5c:b8:6e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 29 02:50:09 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=13ae36e4b3bbc7e3e1924bbe4a8afa24a2ca681799d94d1b2eab96c5e5b4bc3f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:36:fb:87:08:6a:dc:12:6e:1e:fc:51:49: 34:18:76:fb:2d:61:fb:cf:d1:a0:9b:8c:e7:06:c5: 37:b5:75:fc:41:ba:6c:04:66:a2:a3:13:87:23:de: a4:fa:9a:9a:33:2b:a6:95:92:db:93:11:5b:5f:5f: 31:74:90:05:df:99:66:c0:d7:56:06:df:24:29:81: d8:4c:b9:33:c3:83:32:93:94:de:ae:d6:6d:52:31: 35:d6:cd:6d:6f:c6:1c:85:7d:9b:37:50:7d:e9:b1: 41:4c:b1:0a:80:61:b2:01:cd:e9:d3:8b:2a:02:aa: 0a:c3:0e:41:95:df:a8:3c:f7:73:4b:b7:34:37:a3: dc:1c:39:62:cb:00:31:b8:e4:14:31:b5:78:c7:8b: 05:94:bf:33:16:a1:d7:55:4d:4f:dd:61:eb:a6:98: c8:17:32:b3:75:06:34:86:72:94:fb:6b:55:97:ab: 64:1b:2b:36:5b:ba:fe:32:53:01:57:37:c5:11:d5: 2b:c2:77:46:6e:1f:31:59:3c:0a:cf:6f:34:b4:df: 94:bf:8c:bc:71:48:c9:41:c8:98:10:66:35:a8:3d: cd:fd:20:75:6c:50:63:0a:e5:36:84:e4:87:1f:1e: 65:ca:d1:24:41:ff:d0:15:82:d1:8c:6e:62:84:94: 3b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:11:5D:27:F9:F7:75:C5:07:EB:DB:D0:9B:C2:4B:56:7B:00:C7:09 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.32.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:63:86:e1:1d:55:8f:26:52:04:bf:df:56:6c:9a:31:b5:31: 74:ef:a2:aa:b7:34:b5:83:b6:92:bf:50:e7:cf:61:f1:9d:5b: 5e:85:bd:27:4a:d5:8a:3c:f1:cb:36:6d:63:0a:5a:23:ca:25: ab:49:91:9d:4b:dd:fa:7b:57:d3:5b:0a:c0:82:f0:d5:90:07: 87:32:20:88:0a:e7:57:2e:d5:3b:1d:2a:39:c9:72:02:4a:05: 41:aa:72:ab:53:cd:44:35:d2:3e:f0:7e:73:cb:52:bc:34:f7: bf:5a:ce:59:fa:d2:9f:03:ea:ad:23:f0:8c:f1:97:53:21:05: 47:20:28:d1:83:fe:45:a7:62:9a:9a:50:fc:b6:4e:d5:c8:c0: f7:ed:82:35:d7:1b:de:07:85:4b:25:35:9f:12:43:9e:04:df: fd:64:e1:a0:0d:90:e0:c9:0e:d7:97:9a:a5:54:fa:b1:50:d9: 9b:e3:b0:fc:61:2f:8d:01:e9:0d:c0:c7:03:d6:2a:71:cb:2c: 85:7c:2d:7a:8d:1c:e3:e6:40:93:65:84:e6:f9:d4:e4:11:bf: 8d:7f:03:ec:4c:a2:b4:48:a8:07:2c:8c:11:5a:ef:81:2e:9e: 31:7e:1d:7d:a0:db:ad:1e:26:fe:88:7f:53:67:31:d8:e9:b6: b7:13:09:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSVg/e0KsRPEsQoRbQ/iI31y4bmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTI5MDI1MDA5WhcNMjYwMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2FlMzZlNGIzYmJjN2UzZTE5MjRiYmU0YThhZmEyNGEy Y2E2ODE3OTlkOTRkMWIyZWFiOTZjNWU1YjRiYzNmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmsTb7hwhq3BJuHvxRSTQYdvstYfvP0aCbjOcGxTe1dfxB umwEZqKjE4cj3qT6mpozK6aVktuTEVtfXzF0kAXfmWbA11YG3yQpgdhMuTPDgzKT lN6u1m1SMTXWzW1vxhyFfZs3UH3psUFMsQqAYbIBzenTiyoCqgrDDkGV36g893NL tzQ3o9wcOWLLADG45BQxtXjHiwWUvzMWoddVTU/dYeummMgXMrN1BjSGcpT7a1WX q2QbKzZbuv4yUwFXN8UR1SvCd0ZuHzFZPArPbzS035S/jLxxSMlByJgQZjWoPc39 IHVsUGMK5TaE5IcfHmXK0SRB/9AVgtGMbmKElDsZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbRFdJ/n3dcUH69vQm8JLVnsAxwkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FjMzNjODhkLWE2NTItNDZmNy1hYTgwLTlkNjNiYmFjYzgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCAwDQYJKoZIhvcNAQELBQADggEBAB1jhuEdVY8mUgS/31ZsmjG1MXTv oqq3NLWDtpK/UOfPYfGdW16FvSdK1Yo88cs2bWMKWiPKJatJkZ1L3fp7V9NbCsCC 8NWQB4cyIIgK51cu1TsdKjnJcgJKBUGqcqtTzUQ10j7wfnPLUrw0979azln60p8D 6q0j8Izxl1MhBUcgKNGD/kWnYpqaUPy2TtXIwPftgjXXG94HhUslNZ8SQ54E3/1k 4aANkODJDteXmqVU+rFQ2ZvjsPxhL40B6Q3AxwPWKnHLLIV8LXqNHOPmQJNlhOb5 1OQRv41/A+xMorRIqAcsjBFa74EunjF+HX2g260eJv6If1NnMdjptrcTCZs= -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:06 2025 by rpki-client