This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa File: f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa (raw, json) Hash identifier: XMatr5q0CUi65kT4F+z7I/IQ6CXJO5T2Q5xwSuL1cyY= Subject key identifier: 12:06:47:2B:9F:46:D3:F3:FA:37:41:9D:FE:8C:CA:D4:19:FB:49:F1 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7E0A897DDDD613DFF32FB5EE34D7C784AA18A590 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa Signing time: Tue 25 Nov 2025 19:40:35 +0000 ROA not before: Tue 25 Nov 2025 19:40:35 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0a:89:7d:dd:d6:13:df:f3:2f:b5:ee:34:d7:c7:84:aa:18:a5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 25 19:40:35 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=85ab52eaa06dcf2f0008828bbbc5bf057e85d700ca26c0c664e234179616dce6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:20:ca:4a:d9:54:58:4f:bc:aa:e4:4a:9d: 2f:62:9f:58:0f:a7:5c:2f:53:ae:60:fb:42:12:5e: a3:35:07:8a:ca:4a:c9:78:44:42:4f:16:0c:e4:32: 9c:ad:59:63:e5:08:2b:8b:d7:1b:fb:25:ba:6d:f3: ca:a4:6a:f7:cc:0a:4a:85:82:ef:da:7d:be:3e:e7: 3f:0b:f8:f0:da:2e:70:2f:be:2a:79:fe:10:16:f3: 3d:0e:3d:03:db:38:94:23:e1:93:dd:84:8e:d5:f1: 69:28:ff:24:63:16:ac:ba:cc:8a:71:81:25:06:9c: 56:71:b1:78:78:b1:f3:f1:fd:c7:c4:13:53:22:a8: 42:f9:db:82:68:27:6d:e1:5d:78:ae:22:3f:c3:94: 6f:30:45:1c:a3:6c:92:c6:45:36:09:25:93:fb:1a: 49:ee:62:c5:e5:c4:0d:a9:47:70:61:98:c1:00:eb: 78:73:08:af:93:fb:9e:28:9d:2f:d7:8e:a5:e8:a3: f6:72:31:92:97:85:15:30:fa:b1:e2:f9:dc:3e:bc: 6f:a3:c6:cf:bf:d6:f9:16:7d:d4:26:87:d9:48:b5: bf:5a:17:a5:da:e4:a7:44:e9:e1:06:0c:75:86:3a: 93:63:c3:f1:85:2d:a1:5c:14:5f:07:cc:dc:30:8f: df:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:06:47:2B:9F:46:D3:F3:FA:37:41:9D:FE:8C:CA:D4:19:FB:49:F1 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.28.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:86:ff:45:ea:a0:1f:06:f3:9a:15:da:e3:54:f4:18:be:d3: a0:77:79:2d:7e:69:1a:84:13:51:86:94:ff:9d:3a:aa:c3:f0: 40:af:58:d1:4c:63:c2:2d:8c:6b:c9:17:a0:60:9c:b0:30:9f: 07:ef:9c:b8:45:57:82:ff:30:fe:55:2c:e7:6f:8b:83:1c:7f: 8e:f0:ea:26:a0:13:14:c4:a7:9b:17:14:7c:67:dc:5a:42:ab: ac:02:ef:54:f6:85:81:d9:60:f8:6c:d7:6f:87:5c:3a:3f:f0: 12:3e:a7:e9:f2:f6:66:45:cb:47:e8:96:56:cc:1a:78:10:ba: ed:06:9b:a3:1e:b7:4a:c3:52:56:f9:f7:60:cb:c7:74:28:6b: ac:24:97:1f:54:db:3c:97:de:d5:7b:9e:dd:09:9d:d7:c9:6b: 0c:82:fd:7f:1d:cf:8a:6a:dc:81:f7:63:0a:f9:64:89:8d:37: b6:94:c9:5a:b6:d2:a0:1f:d8:d8:0a:80:bf:59:1c:71:a1:7a: f0:44:bc:c7:2d:43:f1:5c:e0:1a:73:c4:c8:e8:9f:6b:b8:cd: cc:03:44:16:29:dd:0b:b1:4e:c6:8e:a5:97:2b:6c:b9:47:7a: 33:46:f0:8c:7f:ce:e8:55:35:4e:7d:ea:7a:50:85:b0:15:53: 86:50:ac:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfgqJfd3WE9/zL7XuNNfHhKoYpZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTI1MTk0MDM1WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWFiNTJlYWEwNmRjZjJmMDAwODgyOGJiYmM1YmYwNTdl ODVkNzAwY2EyNmMwYzY2NGUyMzQxNzk2MTZkY2U2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMTSDKStlUWE+8quRKnS9in1gPp1wvU65g+0ISXqM1B4rK Ssl4REJPFgzkMpytWWPlCCuL1xv7Jbpt88qkavfMCkqFgu/afb4+5z8L+PDaLnAv vip5/hAW8z0OPQPbOJQj4ZPdhI7V8Wko/yRjFqy6zIpxgSUGnFZxsXh4sfPx/cfE E1MiqEL524JoJ23hXXiuIj/DlG8wRRyjbJLGRTYJJZP7GknuYsXlxA2pR3BhmMEA 63hzCK+T+54onS/XjqXoo/ZyMZKXhRUw+rHi+dw+vG+jxs+/1vkWfdQmh9lItb9a F6Xa5KdE6eEGDHWGOpNjw/GFLaFcFF8HzNwwj98JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEgZHK59G0/P6N0Gd/ozK1Bn7SfEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y3MjM2ZGYxLWQ2YWQtNGZjNy1iNjFjLTViNzBmY2RkOTAyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBwwDQYJKoZIhvcNAQELBQADggEBAJuG/0XqoB8G85oV2uNU9Bi+06B3 eS1+aRqEE1GGlP+dOqrD8ECvWNFMY8ItjGvJF6BgnLAwnwfvnLhFV4L/MP5VLOdv i4Mcf47w6iagExTEp5sXFHxn3FpCq6wC71T2hYHZYPhs12+HXDo/8BI+p+ny9mZF y0follbMGngQuu0Gm6Met0rDUlb592DLx3Qoa6wklx9U2zyX3tV7nt0JndfJawyC /X8dz4pq3IH3Ywr5ZImNN7aUyVq20qAf2NgKgL9ZHHGhevBEvMctQ/Fc4BpzxMjo n2u4zcwDRBYp3QuxTsaOpZcrbLlHejNG8Ix/zuhVNU596npQhbAVU4ZQrMQ= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:29 2025 by rpki-client