This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d938f74c-c91f-4c87-a7eb-dddd6ea2d749.roa File: d938f74c-c91f-4c87-a7eb-dddd6ea2d749.roa (raw, json) Hash identifier: Kv3YjK4PmaT7dF2RVanXha0b/Qv7HT0/bp/cQrdHxF4= Subject key identifier: 26:9C:A8:EC:8C:7D:B9:F7:52:7F:2C:59:72:55:65:EC:E5:27:79:BD Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 252A1DB5B287125DDF16360E094F20578997682B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d938f74c-c91f-4c87-a7eb-dddd6ea2d749.roa Signing time: Mon 08 Dec 2025 01:50:12 +0000 ROA not before: Mon 08 Dec 2025 01:50:12 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2a:1d:b5:b2:87:12:5d:df:16:36:0e:09:4f:20:57:89:97:68:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 8 01:50:12 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=a0a79f68cdace92a4c81e18b1c7c9a39560032c3474104ba09e22487023cf3e8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:5b:df:03:99:61:cd:db:75:66:ef:0c:a7: 32:6a:68:b6:8b:3a:e9:85:53:bf:e9:e1:61:59:0f: fa:fe:f6:d8:4b:73:57:57:19:a4:05:e7:de:83:d4: d4:10:e2:53:b9:ca:97:a7:50:9f:2a:4c:56:63:a2: 44:22:05:4b:e9:eb:f9:b2:e1:6b:30:2d:52:45:7b: 71:5f:72:08:42:97:c8:8b:36:1b:2b:db:b1:94:54: 4e:02:da:17:a3:34:9d:00:2b:64:0c:9c:e8:a9:94: 05:84:d3:5a:4b:10:40:a8:48:b8:52:82:53:8c:31: 16:13:f3:33:6c:da:f7:b9:e6:d3:5a:d3:a0:21:93: 6a:03:d2:bf:93:b0:9c:42:73:fc:dd:25:19:53:9f: 6b:3f:2c:22:48:8b:fd:c1:27:e0:9b:35:42:43:3e: 79:c7:f3:2c:40:23:94:c3:54:c4:1f:97:fa:fd:56: d2:4e:d8:fe:79:fe:fa:a3:5b:28:d4:a8:ca:3d:ce: f4:c1:94:86:31:66:3f:f5:0f:de:ad:fe:54:4d:a3: 53:62:87:eb:1b:0a:35:12:c3:41:ee:0f:c1:2a:c2: 67:10:20:3c:92:96:e2:27:e2:f4:f2:51:98:3c:b4: 4f:a7:41:78:17:59:c9:71:6f:3a:62:a3:8c:a9:79: f7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:A8:EC:8C:7D:B9:F7:52:7F:2C:59:72:55:65:EC:E5:27:79:BD X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d938f74c-c91f-4c87-a7eb-dddd6ea2d749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.44.0/24 Signature Algorithm: sha256WithRSAEncryption 92:28:82:b5:64:f0:a3:89:5e:65:9a:c4:3e:48:a4:a1:be:34: 95:a9:83:5f:4c:2c:e1:cd:8d:e4:fe:04:8f:34:26:e9:6d:91: 37:e6:9b:81:9d:bb:6a:33:5e:03:3e:e9:69:cf:df:0e:21:49: 37:55:38:4b:cc:bd:46:c8:8b:00:32:c4:bf:a1:ee:8f:ed:4a: 36:cb:2b:3f:6c:1e:c8:a7:70:a1:c3:c9:5e:b4:8f:0b:61:17: e9:1c:55:68:a1:9e:03:80:f5:2b:58:21:a2:ac:c1:0f:c6:4f: 7a:84:ad:a8:d3:c5:0d:a6:47:b1:9a:c4:62:81:2d:cf:c2:92: 9e:ca:90:21:62:2f:33:01:b0:bc:3e:0f:17:28:c3:fb:de:b6: 39:14:3b:b4:69:f8:49:11:bf:91:bd:c5:1b:b5:ec:e7:e5:9e: 79:94:a0:f8:7a:d4:5a:e8:4c:04:a6:1e:82:94:30:b4:50:89: 68:fb:da:e2:0a:7c:c5:dd:ec:5b:33:26:9a:7a:d7:47:f7:90: 0f:37:0a:93:5c:31:01:a8:3f:f2:92:9d:6a:d3:5c:96:ab:d0: 31:93:e2:93:d7:81:53:81:8f:ab:a2:a5:b7:4e:cd:c8:db:0b: 95:88:09:d8:dd:09:5c:ac:8b:76:10:27:bc:64:6e:ed:e3:5d: dc:f9:be:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJSodtbKHEl3fFjYOCU8gV4mXaCswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDE1MDEyWhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGE3OWY2OGNkYWNlOTJhNGM4MWUxOGIxYzdjOWEzOTU2 MDAzMmMzNDc0MTA0YmEwOWUyMjQ4NzAyM2NmM2U4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9VVvfA5lhzdt1Zu8MpzJqaLaLOumFU7/p4WFZD/r+9thL c1dXGaQF596D1NQQ4lO5ypenUJ8qTFZjokQiBUvp6/my4WswLVJFe3FfcghCl8iL Nhsr27GUVE4C2hejNJ0AK2QMnOiplAWE01pLEECoSLhSglOMMRYT8zNs2ve55tNa 06Ahk2oD0r+TsJxCc/zdJRlTn2s/LCJIi/3BJ+CbNUJDPnnH8yxAI5TDVMQfl/r9 VtJO2P55/vqjWyjUqMo9zvTBlIYxZj/1D96t/lRNo1Nih+sbCjUSw0HuD8EqwmcQ IDySluIn4vTyUZg8tE+nQXgXWclxbzpio4ypeferAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJpyo7Ix9ufdSfyxZclVl7OUneb0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q5MzhmNzRjLWM5MWYtNGM4Ny1hN2ViLWRkZGQ2ZWEyZDc0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCwwDQYJKoZIhvcNAQELBQADggEBAJIogrVk8KOJXmWaxD5IpKG+NJWp g19MLOHNjeT+BI80JultkTfmm4Gdu2ozXgM+6WnP3w4hSTdVOEvMvUbIiwAyxL+h 7o/tSjbLKz9sHsincKHDyV60jwthF+kcVWihngOA9StYIaKswQ/GT3qErajTxQ2m R7GaxGKBLc/Ckp7KkCFiLzMBsLw+Dxcow/vetjkUO7Rp+EkRv5G9xRu17OflnnmU oPh61FroTASmHoKUMLRQiWj72uIKfMXd7FszJpp610f3kA83CpNcMQGoP/KSnWrT XJar0DGT4pPXgVOBj6uipbdOzcjbC5WICdjdCVysi3YQJ7xkbu3jXdz5vgs= -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:24 2025 by rpki-client