This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d69bc1d5-8269-497f-a53a-bbb55896ac25.roa File: d69bc1d5-8269-497f-a53a-bbb55896ac25.roa (raw, json) Hash identifier: O/5vVrR2lTV0yhY1Vu52WGaeRUKpB04e9ZQLRLDa8Xs= Subject key identifier: 3F:D2:9F:3E:7E:34:F2:30:2C:79:9F:75:4D:BF:40:77:5F:72:63:DE Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 44C70EA26401135F1FAF62A78FDC615249278309 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d69bc1d5-8269-497f-a53a-bbb55896ac25.roa Signing time: Mon 08 Dec 2025 01:50:11 +0000 ROA not before: Mon 08 Dec 2025 01:50:11 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c7:0e:a2:64:01:13:5f:1f:af:62:a7:8f:dc:61:52:49:27:83:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 8 01:50:11 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=f4c092aba44eb113eacdc627ea37fc756aa37936594078bafc7699245163dc35, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:f0:b9:11:b5:ce:c9:e7:70:d7:42:69:61: 00:22:12:a3:88:1b:15:69:ad:8f:aa:0c:24:84:19: 3d:cd:6a:36:a2:3e:47:bb:72:71:82:66:0f:18:3b: e4:b4:79:6e:c5:da:96:21:e4:d4:ab:2d:83:70:80: 5d:47:e8:ee:90:c9:6d:11:6b:96:03:23:27:58:53: 40:84:bb:fb:0c:e1:e4:90:f9:14:74:84:86:0a:b4: b7:6e:42:fc:a3:0b:d1:58:03:ca:49:61:c9:e8:e1: 49:7b:ea:e5:1a:45:84:f4:d9:56:7e:da:52:c8:dc: a9:b5:89:63:e2:31:2b:aa:12:08:16:f5:30:cc:9e: e2:e5:79:20:7a:72:41:a3:a2:1e:1f:f5:8e:fd:c1: 7e:e9:75:37:73:bc:ce:57:a3:f9:f3:d3:09:dd:7f: ff:46:a6:ab:53:5e:67:04:e1:74:58:47:29:aa:cd: 1d:e6:63:40:a9:72:63:91:69:2d:97:b2:59:07:7f: ed:23:fb:97:f5:00:6b:63:c1:4e:d2:30:2c:b8:84: 0d:5a:d7:bc:d2:a7:d1:b0:ad:83:34:de:0e:ba:fc: a2:45:1c:44:19:b7:a3:29:49:e5:a4:51:10:f5:e0: 9c:b3:bb:12:a6:e3:69:08:b7:0c:25:2c:ec:5c:1b: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D2:9F:3E:7E:34:F2:30:2C:79:9F:75:4D:BF:40:77:5F:72:63:DE X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d69bc1d5-8269-497f-a53a-bbb55896ac25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.44.0/24 Signature Algorithm: sha256WithRSAEncryption 90:d4:f8:74:61:be:4d:4b:6f:05:90:80:9c:c4:8c:79:95:87: ce:69:77:79:48:20:c4:4a:ec:88:a7:88:13:43:74:ef:b4:3d: da:09:c6:f9:47:87:78:32:02:f4:52:79:27:a2:cb:49:e5:1c: 0d:84:aa:9c:4f:67:4d:0f:22:d5:5d:28:3c:0d:b8:a2:9a:13: 9e:4e:54:60:60:2b:39:cf:7c:6b:4f:ca:d6:e8:e7:05:7f:70: 90:a9:3b:1e:ff:35:75:b6:ba:47:68:de:27:f1:fe:aa:7f:2c: a4:0a:74:28:7b:39:c6:5a:0c:80:d5:d5:8a:85:9e:1b:b0:0c: 50:c2:d8:3c:7d:38:9b:fd:e5:d4:b0:9e:61:8a:1b:98:9a:91: 07:a1:66:0f:39:5a:dc:06:bf:b9:f5:f4:8f:23:7e:e9:c3:9a: ff:98:11:2e:62:8c:65:00:b7:57:14:59:b4:b3:d4:1c:70:5e: ca:a8:66:7c:03:d1:c2:ea:18:a8:c1:47:c2:24:ff:25:45:e4: 5b:11:cf:40:ab:90:30:f1:a0:4b:25:cb:3e:c2:47:30:4f:21: ea:01:8e:6b:89:c1:d9:0e:92:15:72:91:fc:fe:86:e9:db:b0: 33:2a:68:b2:15:e5:d3:8d:d1:ab:8e:d9:6b:0c:f1:3c:3a:fe: fd:37:6c:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURMcOomQBE18fr2Knj9xhUkkngwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDE1MDExWhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGMwOTJhYmE0NGViMTEzZWFjZGM2MjdlYTM3ZmM3NTZh YTM3OTM2NTk0MDc4YmFmYzc2OTkyNDUxNjNkYzM1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK/vC5EbXOyedw10JpYQAiEqOIGxVprY+qDCSEGT3Najai Pke7cnGCZg8YO+S0eW7F2pYh5NSrLYNwgF1H6O6QyW0Ra5YDIydYU0CEu/sM4eSQ +RR0hIYKtLduQvyjC9FYA8pJYcno4Ul76uUaRYT02VZ+2lLI3Km1iWPiMSuqEggW 9TDMnuLleSB6ckGjoh4f9Y79wX7pdTdzvM5Xo/nz0wndf/9GpqtTXmcE4XRYRymq zR3mY0CpcmORaS2XslkHf+0j+5f1AGtjwU7SMCy4hA1a17zSp9GwrYM03g66/KJF HEQZt6MpSeWkURD14JyzuxKm42kItwwlLOxcGy55AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP9KfPn408jAseZ91Tb9Ad19yY94wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q2OWJjMWQ1LTgyNjktNDk3Zi1hNTNhLWJiYjU1ODk2YWMyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCwwDQYJKoZIhvcNAQELBQADggEBAJDU+HRhvk1LbwWQgJzEjHmVh85p d3lIIMRK7IiniBNDdO+0PdoJxvlHh3gyAvRSeSeiy0nlHA2EqpxPZ00PItVdKDwN uKKaE55OVGBgKznPfGtPytbo5wV/cJCpOx7/NXW2ukdo3ifx/qp/LKQKdCh7OcZa DIDV1YqFnhuwDFDC2Dx9OJv95dSwnmGKG5iakQehZg85WtwGv7n19I8jfunDmv+Y ES5ijGUAt1cUWbSz1BxwXsqoZnwD0cLqGKjBR8Ik/yVF5FsRz0CrkDDxoEslyz7C RzBPIeoBjmuJwdkOkhVykfz+hunbsDMqaLIV5dON0auO2WsM8Tw6/v03bEc= -----END CERTIFICATE-----Generated at Sun Dec 21 05:54:10 2025 by rpki-client