This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d7e791f4-bbcd-4e1c-a866-5f58dc127512.roa File: d7e791f4-bbcd-4e1c-a866-5f58dc127512.roa (raw, json) Hash identifier: 6xnyy/01CWruytEbg5Zpe6JDooQSYJP9jS+FQuN7q9Y= Subject key identifier: B7:D8:EC:0B:F4:BE:49:39:B7:EE:AB:0E:22:D1:13:72:3D:E9:03:53 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5B22F7FCE4387500DE221B7921ADFF3D0FE7E89E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d7e791f4-bbcd-4e1c-a866-5f58dc127512.roa Signing time: Mon 08 Dec 2025 02:00:06 +0000 ROA not before: Mon 08 Dec 2025 02:00:06 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:22:f7:fc:e4:38:75:00:de:22:1b:79:21:ad:ff:3d:0f:e7:e8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 8 02:00:06 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=e4d0aaab3dec2d58da768a892c5dc0dc776278d3fa02eae98c11bb8e9b4286eb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:66:93:77:5d:96:bf:6e:b8:ed:18:ad:65: 0d:64:5c:28:7e:c3:19:23:fd:ac:ac:c4:78:bb:60: fb:20:f2:e0:58:d3:ae:7c:95:a7:f7:44:2f:96:f8: 7e:27:3e:4e:d4:fa:58:96:2d:0e:33:25:f2:a8:3c: 1d:09:ac:50:2f:21:92:27:c2:07:98:9a:5d:f4:c1: ba:00:a9:4e:da:f6:6d:97:7d:e7:5b:4f:75:6c:5b: 13:04:01:22:6d:30:aa:17:11:48:6a:41:76:28:7d: 75:73:7b:50:c4:58:da:a5:ff:6d:25:c5:8c:15:0a: fb:87:f0:87:32:aa:46:e4:dd:4b:55:f9:96:c5:c5: ad:a4:52:1e:9d:1e:48:62:9c:e7:2a:c0:ee:ea:cc: 04:3d:37:36:ae:8a:42:ed:d6:fa:0e:18:59:9a:73: bc:29:f3:43:9b:1c:85:fa:53:ed:3f:c0:2a:65:d5: d3:1a:98:59:14:bb:1a:bd:1a:6b:1f:1f:d7:ea:5a: 8f:36:18:93:17:f6:f1:d1:73:5b:83:97:9c:b2:3b: 11:d5:a5:5b:fe:9b:35:45:d4:16:65:b4:57:2e:51: ca:0c:6c:40:1b:89:c7:ec:09:9d:91:60:e6:bd:d7: 9c:9a:5f:fd:bb:48:ec:09:2d:55:f0:b6:11:3a:ab: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D8:EC:0B:F4:BE:49:39:B7:EE:AB:0E:22:D1:13:72:3D:E9:03:53 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d7e791f4-bbcd-4e1c-a866-5f58dc127512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.42.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:20:2d:dd:0d:f3:29:90:d9:48:29:f6:ca:9b:e2:5f:e0:70: 2f:a5:45:55:78:bf:37:1a:fa:b9:37:3f:ad:90:b8:1b:91:8b: a0:d2:44:48:b1:d8:1d:1a:7a:c5:2c:9f:02:b6:d3:12:65:95: 98:07:d9:0d:83:40:5e:5f:05:3d:c8:57:77:c6:fd:d5:95:c6: 07:35:4f:89:07:c8:ac:d9:5a:14:d4:ab:e2:c8:cd:00:80:1f: af:20:39:50:b3:9b:9c:60:3a:e2:a0:46:3e:09:f9:b6:c3:ee: 93:bd:23:23:d1:5c:5b:e0:ec:e4:36:8f:5d:b8:06:ad:17:5a: bb:90:6c:19:bf:52:41:19:be:d5:d4:0d:0e:10:9e:57:71:3a: 8f:0f:fe:45:a8:63:4b:de:82:51:4a:42:8e:34:27:6a:02:b6: 9d:92:51:ec:4f:5f:ea:89:f9:3f:f4:3e:d7:be:9c:fb:1e:3e: 75:0f:3a:55:80:ec:f4:aa:ae:79:00:e3:0a:cf:33:b9:c0:4f: 92:41:9e:42:25:e8:42:0a:a8:6b:de:46:8d:c1:92:e6:cd:86: 84:e4:1e:23:10:e1:bf:84:c0:d5:66:2b:1a:bc:6b:14:ce:51: 93:4b:5b:5e:44:12:20:57:d4:01:2a:24:60:ef:b0:37:90:6c: 63:79:9f:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWyL3/OQ4dQDeIht5Ia3/PQ/n6J4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDIwMDA2WhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGQwYWFhYjNkZWMyZDU4ZGE3NjhhODkyYzVkYzBkYzc3 NjI3OGQzZmEwMmVhZTk4YzExYmI4ZTliNDI4NmViMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMP2aTd12Wv2647RitZQ1kXCh+wxkj/aysxHi7YPsg8uBY 0658laf3RC+W+H4nPk7U+liWLQ4zJfKoPB0JrFAvIZInwgeYml30wboAqU7a9m2X fedbT3VsWxMEASJtMKoXEUhqQXYofXVze1DEWNql/20lxYwVCvuH8Icyqkbk3UtV +ZbFxa2kUh6dHkhinOcqwO7qzAQ9NzauikLt1voOGFmac7wp80ObHIX6U+0/wCpl 1dMamFkUuxq9GmsfH9fqWo82GJMX9vHRc1uDl5yyOxHVpVv+mzVF1BZltFcuUcoM bEAbicfsCZ2RYOa915yaX/27SOwJLVXwthE6q62xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUt9jsC/S+STm37qsOItETcj3pA1MwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q3ZTc5MWY0LWJiY2QtNGUxYy1hODY2LTVmNThkYzEyNzUxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCowDQYJKoZIhvcNAQELBQADggEBAG4gLd0N8ymQ2Ugp9sqb4l/gcC+l RVV4vzca+rk3P62QuBuRi6DSREix2B0aesUsnwK20xJllZgH2Q2DQF5fBT3IV3fG /dWVxgc1T4kHyKzZWhTUq+LIzQCAH68gOVCzm5xgOuKgRj4J+bbD7pO9IyPRXFvg 7OQ2j124Bq0XWruQbBm/UkEZvtXUDQ4QnldxOo8P/kWoY0veglFKQo40J2oCtp2S UexPX+qJ+T/0Pte+nPsePnUPOlWA7PSqrnkA4wrPM7nAT5JBnkIl6EIKqGveRo3B kubNhoTkHiMQ4b+EwNVmKxq8axTOUZNLW15EEiBX1AEqJGDvsDeQbGN5n0I= -----END CERTIFICATE-----Generated at Sun Dec 21 03:53:36 2025 by rpki-client