This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa File: 0be6e662-afc9-4903-9919-894f035a475c.roa (raw, json) Hash identifier: iWdvXaqRdqUmnhQgiptO/XjvEJJHXrjuUcbi2FLJqdg= Subject key identifier: C4:95:BB:05:FE:45:73:C5:8B:33:5C:13:E2:F5:C5:A7:76:38:C2:F7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 586BD7CBA28E1E13C83720354701B8AD884803CE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6b:d7:cb:a2:8e:1e:13:c8:37:20:35:47:01:b8:ad:88:48:03:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=777307e6dac801953d104dcb42f90982ea253a2bed4ef6b7b7f88f0f1a95837f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:86:22:c9:44:9b:b2:72:70:6c:d8:9b:87: 73:7f:cd:c1:fb:59:3b:a9:79:e0:52:49:2e:2c:85: 86:bd:51:c5:c9:3b:0f:ba:fb:1f:d2:cf:51:43:67: 77:3c:07:b1:31:a4:80:4c:28:f3:44:45:bf:75:f6: b4:bc:db:8f:00:66:60:3a:2a:09:64:38:93:9f:1c: bd:e7:0a:db:e4:a3:48:bd:8d:99:26:7a:98:75:ce: 2f:c1:12:3e:00:ad:6c:fa:24:38:33:67:c4:59:ed: 5a:83:a5:28:21:7b:9e:35:d6:44:fa:f5:73:e8:4b: eb:08:45:7b:e7:e9:d9:ea:cb:9c:c5:ed:17:f6:bd: 80:06:ef:a8:e8:3b:08:6a:71:b4:30:51:11:7e:68: e5:4f:70:f4:dd:09:ff:36:b9:8e:04:5f:5e:30:09: ff:29:e8:79:c3:3d:07:d3:7a:16:5f:22:e4:11:6a: 19:22:d3:1c:cf:b6:33:b9:25:bf:f8:74:53:25:d3: 6e:b8:60:55:fc:67:24:55:11:28:07:62:36:eb:9b: e6:ca:42:66:9d:31:d2:73:fb:0c:0d:b4:ed:93:76: b7:ff:c9:da:29:98:cc:34:4e:51:2d:ca:05:63:ff: 47:61:91:a0:ad:13:6f:0f:19:78:9f:d2:b1:f1:2b: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:95:BB:05:FE:45:73:C5:8B:33:5C:13:E2:F5:C5:A7:76:38:C2:F7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:87:23:e9:f3:05:b0:95:59:a9:b1:01:45:08:9c:51:cf:53: 1a:c0:62:10:97:b8:55:4b:ab:0d:5e:f3:1a:c7:f6:68:05:67: 43:ba:a2:b4:b9:7f:03:00:c6:0d:bf:86:3f:9e:98:35:e2:15: f6:9a:ca:ea:37:01:b2:21:7d:51:cc:94:14:74:a2:9d:79:2c: 35:79:bc:1f:b5:06:56:14:14:e0:f3:07:6f:1d:04:b2:b4:7a: 27:e1:31:b4:90:b8:10:38:3d:cc:1a:5e:d6:d0:f4:6c:81:67: 8b:a8:a5:10:98:53:4b:01:5d:e9:b1:1d:59:9c:d1:3c:9b:e8: 52:dd:fc:cc:10:8c:00:32:75:56:53:db:19:54:3d:9b:cb:03: 18:2c:79:50:94:c8:73:9c:2c:41:49:22:a8:94:8c:99:43:27: b7:a6:be:9b:82:ce:1e:4c:70:7a:d7:bf:24:a3:7b:68:61:81: b1:8c:a9:71:3a:ee:ee:90:30:95:73:9b:84:e5:c4:4a:ac:e9: 34:80:3c:16:e6:1c:f9:87:51:51:22:ba:54:80:6d:82:61:27: 84:ff:e2:be:e7:21:6f:41:f1:a0:07:ba:86:9c:0b:20:00:ec: 54:43:21:da:db:b6:ca:0e:e0:d6:d4:2e:f5:04:5f:01:e8:7c: ac:4d:94:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWGvXy6KOHhPINyA1RwG4rYhIA84wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDIwMDMxWhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzczMDdlNmRhYzgwMTk1M2QxMDRkY2I0MmY5MDk4MmVh MjUzYTJiZWQ0ZWY2YjdiN2Y4OGYwZjFhOTU4MzdmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA1YYiyUSbsnJwbNibh3N/zcH7WTupeeBSSS4shYa9UcXJ Ow+6+x/Sz1FDZ3c8B7ExpIBMKPNERb919rS8248AZmA6KglkOJOfHL3nCtvko0i9 jZkmeph1zi/BEj4ArWz6JDgzZ8RZ7VqDpSghe5411kT69XPoS+sIRXvn6dnqy5zF 7Rf2vYAG76joOwhqcbQwURF+aOVPcPTdCf82uY4EX14wCf8p6HnDPQfTehZfIuQR ahki0xzPtjO5Jb/4dFMl0264YFX8ZyRVESgHYjbrm+bKQmadMdJz+wwNtO2Tdrf/ ydopmMw0TlEtygVj/0dhkaCtE28PGXif0rHxKzJ5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxJW7Bf5Fc8WLM1wT4vXFp3Y4wvcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBiZTZlNjYyLWFmYzktNDkwMy05OTE5LTg5NGYwMzVhNDc1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBAFyHI+nzBbCVWamxAUUInFHPUxrA YhCXuFVLqw1e8xrH9mgFZ0O6orS5fwMAxg2/hj+emDXiFfaayuo3AbIhfVHMlBR0 op15LDV5vB+1BlYUFODzB28dBLK0eifhMbSQuBA4PcwaXtbQ9GyBZ4uopRCYU0sB XemxHVmc0Tyb6FLd/MwQjAAydVZT2xlUPZvLAxgseVCUyHOcLEFJIqiUjJlDJ7em vpuCzh5McHrXvySje2hhgbGMqXE67u6QMJVzm4TlxEqs6TSAPBbmHPmHUVEiulSA bYJhJ4T/4r7nIW9B8aAHuoacCyAA7FRDIdrbtsoO4NbULvUEXwHofKxNlDY= -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:44 2025 by rpki-client