This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c2d03cc6-f4a8-43c1-9778-0cfd9163675d.roa File: c2d03cc6-f4a8-43c1-9778-0cfd9163675d.roa (raw, json) Hash identifier: HSbqdNAy7WX8/on51DGoVTvVqz/9ZtM9fDLEdPGiw/g= Subject key identifier: 52:40:7C:2C:6E:C7:8A:D2:E9:27:2C:B7:19:23:5B:71:42:67:AF:F1 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 047FDC94593BF96D72BCFE6B1AFAD37B686BA53A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c2d03cc6-f4a8-43c1-9778-0cfd9163675d.roa Signing time: Tue 18 Nov 2025 00:30:13 +0000 ROA not before: Tue 18 Nov 2025 00:30:13 +0000 ROA not after: Mon 16 Feb 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7f:dc:94:59:3b:f9:6d:72:bc:fe:6b:1a:fa:d3:7b:68:6b:a5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 18 00:30:13 2025 GMT Not After : Feb 16 23:59:59 2026 GMT Subject: serialNumber=f785000e479d9a947e249b5bc8b7382a723d98a62ec6ed8273d4af0645e5a964, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:d6:31:f6:32:46:74:98:15:40:2a:86:db: 80:e3:bc:73:5d:d3:52:8b:a2:1d:c1:12:ea:9f:6e: fb:69:df:7a:6c:71:c1:36:c6:b7:0d:cd:a2:a8:d7: 5c:39:80:12:ad:61:c5:e6:8c:bd:64:65:8c:5c:bd: 82:28:27:1b:2e:a4:a3:0c:ca:37:15:a5:74:5c:95: de:c8:49:71:c1:d1:21:a5:7e:1c:5b:80:2f:a8:09: 29:54:e7:79:cc:fb:76:e7:7f:bb:c5:d8:35:46:98: 8d:af:84:c8:ca:b3:d7:67:e6:21:9a:28:a5:34:52: 90:b4:4a:44:68:24:3a:eb:66:10:d5:dc:64:a2:ff: fb:69:44:b7:b6:01:49:7d:b9:80:13:df:04:5e:70: 23:43:4e:b3:0f:29:42:22:da:71:20:77:30:39:91: 8d:bb:f2:b1:b2:3d:45:b8:85:b2:fc:8e:1c:fa:aa: 1c:39:ca:b3:4b:cc:62:bf:fe:9c:14:69:81:58:f9: 6e:1e:c9:43:3e:b9:b6:a9:53:55:b6:de:7a:5f:a7: da:ff:18:6d:8e:41:e4:19:e2:23:23:fe:af:49:36: ff:ea:3c:16:e2:3e:d0:be:15:86:49:13:e9:f1:42: 00:50:63:90:4c:62:27:9b:03:07:fc:56:2b:b5:0f: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:40:7C:2C:6E:C7:8A:D2:E9:27:2C:B7:19:23:5B:71:42:67:AF:F1 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c2d03cc6-f4a8-43c1-9778-0cfd9163675d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/12 Signature Algorithm: sha256WithRSAEncryption 50:23:e7:43:dc:a4:18:4a:af:4d:ea:9a:7c:d2:75:ce:0a:47: e7:b2:ae:19:ad:1a:1d:26:53:74:25:18:69:2c:8e:b1:44:b4: 71:86:da:91:68:c0:9f:82:ef:9d:ba:f3:ac:fd:5d:d1:2a:30: e4:ce:56:c0:15:b6:fb:04:04:81:2b:17:ba:2f:22:c4:26:43: 15:cb:69:4d:f3:db:5c:56:3f:da:5a:a6:ed:c4:e4:46:5f:d9: a9:a4:55:78:7a:29:d6:ef:9d:3a:6b:20:a1:7d:0f:e7:ce:9c: dd:a5:7f:a6:3d:56:c2:31:97:ce:ca:ba:d3:d4:c0:cc:01:47: 6b:13:d5:39:11:ad:09:2e:66:95:fc:b6:58:f2:68:9f:16:99: bc:0e:72:1b:4a:d7:d3:33:cf:94:6d:6c:51:66:a9:61:2d:68: fa:f0:62:58:f3:4f:0e:be:f8:e7:bf:92:40:12:41:82:24:76: a7:5f:aa:21:ae:4d:53:ed:de:85:66:8b:4b:9c:58:8e:72:7d: 83:56:53:66:9b:a5:c9:77:75:a4:34:d6:48:fe:23:28:dd:25: 3e:44:42:42:ac:7c:73:b4:88:b4:12:55:2c:99:69:c1:07:78: cc:27:0d:87:9b:d5:8c:b1:70:5b:29:06:ee:3b:f5:4b:a2:d5: 99:b9:d8:c1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBH/clFk7+W1yvP5rGvrTe2hrpTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTE4MDAzMDEzWhcNMjYwMjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzg1MDAwZTQ3OWQ5YTk0N2UyNDliNWJjOGI3MzgyYTcy M2Q5OGE2MmVjNmVkODI3M2Q0YWYwNjQ1ZTVhOTY0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+qNYx9jJGdJgVQCqG24DjvHNd01KLoh3BEuqfbvtp33ps ccE2xrcNzaKo11w5gBKtYcXmjL1kZYxcvYIoJxsupKMMyjcVpXRcld7ISXHB0SGl fhxbgC+oCSlU53nM+3bnf7vF2DVGmI2vhMjKs9dn5iGaKKU0UpC0SkRoJDrrZhDV 3GSi//tpRLe2AUl9uYAT3wRecCNDTrMPKUIi2nEgdzA5kY278rGyPUW4hbL8jhz6 qhw5yrNLzGK//pwUaYFY+W4eyUM+ubapU1W23npfp9r/GG2OQeQZ4iMj/q9JNv/q PBbiPtC+FYZJE+nxQgBQY5BMYiebAwf8Viu1D+QHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUkB8LG7HitLpJyy3GSNbcUJnr/EwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2MyZDAzY2M2LWY0YTgtNDNjMS05Nzc4LTBjZmQ5MTYzNjc1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQjYDANBgkqhkiG9w0BAQsFAAOCAQEAUCPnQ9ykGEqvTeqafNJ1zgpH57Ku Ga0aHSZTdCUYaSyOsUS0cYbakWjAn4LvnbrzrP1d0Sow5M5WwBW2+wQEgSsXui8i xCZDFctpTfPbXFY/2lqm7cTkRl/ZqaRVeHop1u+dOmsgoX0P586c3aV/pj1WwjGX zsq609TAzAFHaxPVORGtCS5mlfy2WPJonxaZvA5yG0rX0zPPlG1sUWapYS1o+vBi WPNPDr7457+SQBJBgiR2p1+qIa5NU+3ehWaLS5xYjnJ9g1ZTZpulyXd1pDTWSP4j KN0lPkRCQqx8c7SItBJVLJlpwQd4zCcNh5vVjLFwWykG7jv1S6LVmbnYwQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:34:00 2025 by rpki-client