This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa File: a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa (raw, json) Hash identifier: FgBOtqRo8ljlpRxPDHV51sEPqhrKkhC1Dtaz6RHUjM4= Subject key identifier: A0:E8:4B:6C:C1:93:24:C1:30:DA:06:32:2B:66:39:8D:B3:9A:36:BA Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6ACAF2D860F83DF745C75B84CC94F79605AF467F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa Signing time: Mon 08 Dec 2025 02:00:27 +0000 ROA not before: Mon 08 Dec 2025 02:00:27 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ca:f2:d8:60:f8:3d:f7:45:c7:5b:84:cc:94:f7:96:05:af:46:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 8 02:00:27 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=a01eeb5caf0364cc79b6711d254d6b4107a50e3e5f629ddfa24f220ed189427d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:34:8c:be:f9:b0:c9:84:24:70:92:4c:f3: 56:93:80:76:f1:5e:01:06:db:b8:95:51:36:d1:b0: 8e:b7:e6:34:78:35:c1:79:40:8c:b8:6d:89:c8:49: a1:43:4c:28:37:85:7c:dd:79:17:b1:4a:6a:15:e9: 34:f1:87:ad:ae:40:81:93:d7:a0:d2:92:5f:90:ff: c8:43:fa:26:02:01:b2:e2:c6:ba:d5:d7:82:73:45: 89:b9:9a:9a:0c:a5:80:ad:dd:02:99:3c:95:32:b3: 10:fe:af:0a:62:52:6f:3f:74:df:99:18:77:fe:17: 80:06:0b:d1:ed:b9:68:04:79:b3:f0:26:e2:79:ec: 00:11:bc:0d:61:40:9d:85:30:c9:ec:80:f4:41:81: 5c:e4:c5:e6:e0:a3:44:1c:d2:ea:86:b2:46:52:bf: bf:32:b5:d4:ee:3a:e3:51:17:aa:a7:ff:f3:a1:fd: 69:7c:47:24:f5:2e:51:6e:46:a8:09:04:7a:dc:09: 40:e3:ef:09:4c:09:9a:3d:a9:34:4e:3c:96:67:c2: df:38:a4:fb:d8:4f:db:f8:88:d0:c3:af:04:54:44: e7:68:fe:1f:8c:6c:5b:ba:e4:1a:22:09:f4:af:cf: 70:6e:fb:dc:aa:11:ee:81:f9:ce:77:8a:03:7c:e1: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E8:4B:6C:C1:93:24:C1:30:DA:06:32:2B:66:39:8D:B3:9A:36:BA X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a7f6e0ac-810a-4e40-a286-d05397a13e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 07:87:d8:7f:12:b3:4a:1c:9b:ae:63:58:47:b7:50:39:1b:68: 75:5e:cb:4f:d2:65:16:0a:c7:b2:46:1c:d0:57:06:51:bc:a5: 1c:53:87:64:57:78:47:53:61:b0:f1:59:61:82:dd:e2:82:1a: 0a:66:87:78:de:ae:ff:46:39:24:1f:2a:c7:d7:6f:36:d5:00: 1c:2f:1f:68:94:17:54:d8:aa:1f:90:8b:b7:29:d9:0a:04:6b: a8:08:4b:ea:73:b7:3a:24:99:ac:46:e3:cf:6e:58:8b:00:a7: 1e:f6:2d:f4:50:11:16:05:a8:b2:dd:91:2b:6f:96:42:cc:1a: 4c:51:eb:55:b4:84:f1:ce:c8:ca:a8:2b:8a:ae:ca:10:b8:15: 26:3d:98:79:ba:2c:0c:fa:1a:db:38:f9:a5:1f:59:83:e1:41: 95:86:57:d7:3b:f7:a1:70:dc:a9:9d:8f:0d:7c:dc:d1:5d:09: 53:90:67:42:a2:d9:5b:a6:8a:0d:75:b9:d9:6a:d7:e6:f7:1b: 6b:ae:d1:de:1d:37:8b:35:62:21:08:20:a8:67:70:2c:9e:cc: e0:f2:88:df:62:39:e8:7c:4b:68:4f:6f:c7:1c:14:ef:bd:83: 59:04:56:2e:df:24:ee:4a:01:95:56:e5:91:ef:82:b2:ad:22: d6:ab:41:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUasry2GD4PfdFx1uEzJT3lgWvRn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDIwMDI3WhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDFlZWI1Y2FmMDM2NGNjNzliNjcxMWQyNTRkNmI0MTA3 YTUwZTNlNWY2MjlkZGZhMjRmMjIwZWQxODk0MjdkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVNTSMvvmwyYQkcJJM81aTgHbxXgEG27iVUTbRsI635jR4 NcF5QIy4bYnISaFDTCg3hXzdeRexSmoV6TTxh62uQIGT16DSkl+Q/8hD+iYCAbLi xrrV14JzRYm5mpoMpYCt3QKZPJUysxD+rwpiUm8/dN+ZGHf+F4AGC9HtuWgEebPw JuJ57AARvA1hQJ2FMMnsgPRBgVzkxebgo0Qc0uqGskZSv78ytdTuOuNRF6qn//Oh /Wl8RyT1LlFuRqgJBHrcCUDj7wlMCZo9qTROPJZnwt84pPvYT9v4iNDDrwRUROdo /h+MbFu65BoiCfSvz3Bu+9yqEe6B+c53igN84ZXfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoOhLbMGTJMEw2gYyK2Y5jbOaNrowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E3ZjZlMGFjLTgxMGEtNGU0MC1hMjg2LWQwNTM5N2ExM2U0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAAeH2H8Ss0ocm65jWEe3UDkbaHVe y0/SZRYKx7JGHNBXBlG8pRxTh2RXeEdTYbDxWWGC3eKCGgpmh3jerv9GOSQfKsfX bzbVABwvH2iUF1TYqh+Qi7cp2QoEa6gIS+pztzokmaxG489uWIsApx72LfRQERYF qLLdkStvlkLMGkxR61W0hPHOyMqoK4quyhC4FSY9mHm6LAz6Gts4+aUfWYPhQZWG V9c796Fw3Kmdjw183NFdCVOQZ0Ki2Vumig11udlq1+b3G2uu0d4dN4s1YiEIIKhn cCyezODyiN9iOeh8S2hPb8ccFO+9g1kEVi7fJO5KAZVW5ZHvgrKtItarQaI= -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:49 2025 by rpki-client