This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa File: 9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa (raw, json) Hash identifier: /qus0xZ005ebzQp4ex5elJQhy+F0yrgnpkm6X443ZHk= Subject key identifier: 77:00:87:B4:DE:08:13:07:04:69:23:9A:52:48:D5:F6:21:8D:79:2B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 12DFD8C17A5BF06AC5DB6971A5D0F0438BAEA034 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa Signing time: Mon 08 Dec 2025 02:00:04 +0000 ROA not before: Mon 08 Dec 2025 02:00:04 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:df:d8:c1:7a:5b:f0:6a:c5:db:69:71:a5:d0:f0:43:8b:ae:a0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 8 02:00:04 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=2256fd07078ef75a10dbc936d95f6cb96e26a8508f8a44c0a2afa40e539863f9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:2c:1d:65:e4:67:9a:fb:b0:d3:0f:50:00: cc:3a:18:84:fa:e0:63:be:74:05:e2:06:73:67:0a: 79:c2:48:a5:26:b3:62:68:8d:8a:5b:d9:61:74:85: 22:98:ee:e7:fa:1a:1d:ae:17:71:86:8d:ff:d2:6b: d8:c9:fd:47:0e:d1:00:02:4e:88:ee:9c:f1:fb:a4: 85:96:75:2e:c9:69:3a:98:6f:6d:0f:88:8b:06:24: b7:38:6d:ee:6c:b3:c3:45:1f:1e:f9:b7:ea:ae:a5: cb:64:1b:90:e1:37:25:79:a8:24:7c:4b:03:cc:3d: fb:38:0d:c0:d1:7f:a3:82:34:94:95:63:20:26:df: 45:b3:e1:58:13:19:e5:a6:ae:2f:8c:d7:db:49:95: b4:f2:3b:2e:b8:05:31:02:eb:05:10:44:6a:a9:6d: ea:29:5c:09:f8:e8:2b:c1:7b:ad:c9:1f:06:6d:77: d3:77:13:0f:89:48:0b:9b:62:6e:e8:1a:16:75:b9: 69:bc:5c:8b:46:66:c5:00:bb:bc:ff:fa:7c:e8:7a: 5d:ce:07:ec:06:1b:d6:87:e6:4b:3b:9d:1f:8e:df: a8:2e:7b:bb:f3:b5:40:97:57:c6:c0:8b:bc:d4:97: 85:e2:c3:8f:82:21:d1:fe:b3:ff:53:05:90:d3:3d: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:00:87:B4:DE:08:13:07:04:69:23:9A:52:48:D5:F6:21:8D:79:2B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 04:5e:d8:f7:cb:a7:26:9a:bd:4d:cc:8b:69:35:65:91:a8:8f: 3f:47:ca:34:f8:00:e6:c3:06:1f:8e:b3:54:10:2d:b3:bc:4d: 22:36:fe:e3:6f:2d:43:8d:1c:a2:56:33:a2:f3:5d:45:88:8b: 89:9d:4b:94:02:bd:01:15:58:a2:8e:01:1c:91:18:9d:7c:5c: 6c:ef:cc:cf:b6:b2:5e:a2:f8:9c:78:6c:d0:b2:e0:74:ba:80: f1:e7:96:88:23:d3:82:8d:89:1c:8e:69:ed:4d:f1:c5:71:37: fd:47:fb:be:aa:ef:7f:a4:cf:99:0b:68:c8:a4:cf:cc:d3:3b: a1:9b:c9:0d:81:60:36:73:2e:8a:5b:80:61:bb:c1:57:e6:80: 7e:7e:ab:81:72:16:67:51:6c:f4:5c:8c:2f:58:b4:89:d2:d4: e5:1d:02:59:07:7b:81:92:08:0c:00:18:b0:1a:70:4b:a8:d2: 00:9f:5d:92:5c:16:06:de:38:89:4c:10:2a:3e:76:31:64:07: 2c:12:e5:c7:50:e6:e5:b5:79:3d:31:eb:da:79:2d:47:c4:0a: 23:ec:86:9b:a7:c6:e1:c7:9f:39:d6:b2:82:22:d7:3a:c1:a5: 56:20:94:4f:df:8e:ed:e9:9c:bf:e2:d0:1f:67:ef:80:5a:99: ec:04:96:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEt/YwXpb8GrF22lxpdDwQ4uuoDQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDIwMDA0WhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjU2ZmQwNzA3OGVmNzVhMTBkYmM5MzZkOTVmNmNiOTZl MjZhODUwOGY4YTQ0YzBhMmFmYTQwZTUzOTg2M2Y5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQNywdZeRnmvuw0w9QAMw6GIT64GO+dAXiBnNnCnnCSKUm s2JojYpb2WF0hSKY7uf6Gh2uF3GGjf/Sa9jJ/UcO0QACTojunPH7pIWWdS7JaTqY b20PiIsGJLc4be5ss8NFHx75t+qupctkG5DhNyV5qCR8SwPMPfs4DcDRf6OCNJSV YyAm30Wz4VgTGeWmri+M19tJlbTyOy64BTEC6wUQRGqpbeopXAn46CvBe63JHwZt d9N3Ew+JSAubYm7oGhZ1uWm8XItGZsUAu7z/+nzoel3OB+wGG9aH5ks7nR+O36gu e7vztUCXV8bAi7zUl4Xiw4+CIdH+s/9TBZDTPcRzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdwCHtN4IEwcEaSOaUkjV9iGNeSswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljYWY1MGQ3LTE1MTEtNDhhNy1hYmNmLWQyNjFkZWQ3ZjdjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBAARe2PfLpyaavU3Mi2k1ZZGojz9H yjT4AObDBh+Os1QQLbO8TSI2/uNvLUONHKJWM6LzXUWIi4mdS5QCvQEVWKKOARyR GJ18XGzvzM+2sl6i+Jx4bNCy4HS6gPHnlogj04KNiRyOae1N8cVxN/1H+76q73+k z5kLaMikz8zTO6GbyQ2BYDZzLopbgGG7wVfmgH5+q4FyFmdRbPRcjC9YtInS1OUd AlkHe4GSCAwAGLAacEuo0gCfXZJcFgbeOIlMECo+djFkBywS5cdQ5uW1eT0x69p5 LUfECiPshpunxuHHnznWsoIi1zrBpVYglE/fju3pnL/i0B9n74BamewElrQ= -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:09 2025 by rpki-client