This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa File: 040e375f-0cc8-46f8-8435-facc3d4d127e.roa (raw, json) Hash identifier: Tcs67SXcd0fXqB9AarESor7TH6spmroRZVY5wYyQbi4= Subject key identifier: 99:85:44:77:0F:68:08:51:69:34:40:50:6F:E0:53:D5:73:9A:93:DC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2741EAB7791D1CBBBB6AF0E4641BE5DD1205853E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa Signing time: Mon 08 Dec 2025 02:00:05 +0000 ROA not before: Mon 08 Dec 2025 02:00:05 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:41:ea:b7:79:1d:1c:bb:bb:6a:f0:e4:64:1b:e5:dd:12:05:85:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 8 02:00:05 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=c496f6712e3ff3eff8201a642025185aa13b7c6cc3216c0eecfecd0e742783ff, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:81:24:00:66:ab:fe:ea:42:c8:b7:41:96:da: 8d:1d:9b:54:9a:fb:39:e5:2f:94:a1:a0:a9:d0:05: 17:2e:96:1f:5b:98:9b:a9:9e:a9:93:a4:f3:55:fb: ac:b0:71:26:7a:9d:13:a7:d5:52:9f:09:45:7f:7b: 27:44:69:c7:4d:b0:a9:17:6b:4a:f2:9e:f8:0c:df: 8a:a7:85:e2:00:8e:7c:2b:18:ba:2e:40:e8:ea:bc: 82:ad:8a:de:ea:10:ea:fa:e7:e3:cc:aa:72:b9:f3: 44:ce:48:00:46:18:44:6e:ef:e3:ad:b4:2f:fb:04: ab:10:d6:80:09:80:71:8c:b9:c7:32:ac:3e:91:0f: e0:c7:71:c9:ce:99:b3:ae:cb:f8:9d:76:e4:08:0d: c7:ea:2e:be:16:59:73:33:4e:0f:42:5e:d8:be:ed: d4:c4:e9:44:6f:c5:81:40:84:8d:db:48:aa:35:6d: da:b1:40:5e:90:23:78:7b:52:8d:28:a0:68:51:0c: 16:42:80:41:50:f1:4d:fc:56:7a:9f:82:3c:85:bf: 77:b3:90:65:b7:02:95:e3:48:f8:b1:0a:31:d4:2a: 03:94:01:a1:4d:75:c3:81:47:5f:a4:71:e8:86:51: ff:ee:d9:09:82:aa:16:82:52:9b:fc:0b:43:39:19: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:85:44:77:0F:68:08:51:69:34:40:50:6F:E0:53:D5:73:9A:93:DC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:2f:69:a0:d4:54:8b:11:64:2c:dc:5b:27:2c:92:d1:f3:5b: b4:6b:db:de:63:3c:b8:4d:2d:31:f4:63:9a:fa:03:67:dd:33: 0f:17:59:9e:c6:6d:f1:9d:5e:ee:cf:40:33:12:78:55:53:e6: e1:b9:ef:64:48:61:06:56:3e:de:b0:48:ff:67:d8:23:78:75: 6f:dc:48:47:f0:57:53:55:de:7c:ee:28:de:58:16:80:c3:13: 52:30:b5:2a:7d:67:25:96:8c:81:7b:77:ed:fc:4f:58:b6:ff: 5b:86:f8:26:17:4d:1c:56:7a:65:3c:da:30:0b:1f:0c:f4:a9: 55:d2:1e:0f:00:68:2b:92:5f:4c:a0:ed:b8:bd:5d:84:d0:b8: 28:c1:d1:c9:73:73:6a:59:2f:3b:5c:ef:35:d5:c7:00:23:00: 53:d4:be:39:68:b2:cb:a6:11:a0:72:9f:47:98:d7:b7:82:17: ec:80:51:73:e9:a9:1f:f8:27:6f:3d:d0:53:5a:51:35:37:c1: d8:36:8b:aa:57:97:f8:51:58:2b:60:5d:3e:90:55:fd:1d:dc: 59:3e:c5:5f:a2:11:5e:aa:d6:11:97:4d:53:4f:f5:af:c9:90: 9f:4a:cf:bc:58:61:d7:9f:ed:47:74:6b:31:2c:6e:b6:83:fb: c3:5a:5a:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ0Hqt3kdHLu7avDkZBvl3RIFhT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDIwMDA1WhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDk2ZjY3MTJlM2ZmM2VmZjgyMDFhNjQyMDI1MTg1YWEx M2I3YzZjYzMyMTZjMGVlY2ZlY2QwZTc0Mjc4M2ZmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIgSQAZqv+6kLIt0GW2o0dm1Sa+znlL5ShoKnQBRculh9b mJupnqmTpPNV+6ywcSZ6nROn1VKfCUV/eydEacdNsKkXa0rynvgM34qnheIAjnwr GLouQOjqvIKtit7qEOr65+PMqnK580TOSABGGERu7+OttC/7BKsQ1oAJgHGMuccy rD6RD+DHccnOmbOuy/idduQIDcfqLr4WWXMzTg9CXti+7dTE6URvxYFAhI3bSKo1 bdqxQF6QI3h7Uo0ooGhRDBZCgEFQ8U38VnqfgjyFv3ezkGW3ApXjSPixCjHUKgOU AaFNdcOBR1+kceiGUf/u2QmCqhaCUpv8C0M5GXaXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmYVEdw9oCFFpNEBQb+BT1XOak9wwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA0MGUzNzVmLTBjYzgtNDZmOC04NDM1LWZhY2MzZDRkMTI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBAJsvaaDUVIsRZCzcWycsktHzW7Rr 295jPLhNLTH0Y5r6A2fdMw8XWZ7GbfGdXu7PQDMSeFVT5uG572RIYQZWPt6wSP9n 2CN4dW/cSEfwV1NV3nzuKN5YFoDDE1IwtSp9ZyWWjIF7d+38T1i2/1uG+CYXTRxW emU82jALHwz0qVXSHg8AaCuSX0yg7bi9XYTQuCjB0clzc2pZLztc7zXVxwAjAFPU vjlossumEaByn0eY17eCF+yAUXPpqR/4J2890FNaUTU3wdg2i6pXl/hRWCtgXT6Q Vf0d3Fk+xV+iEV6q1hGXTVNP9a/JkJ9Kz7xYYdef7Ud0azEsbraD+8NaWqI= -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:04 2025 by rpki-client