This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/06068fda-8886-4835-9c88-81ea15fda48e.roa File: 06068fda-8886-4835-9c88-81ea15fda48e.roa (raw, json) Hash identifier: 3g6bEja1Cis3yO0GoNZ5ZyAUtJoDkAovDydO0viVc74= Subject key identifier: D2:6B:93:1A:CB:3E:F7:C0:7E:7A:5E:7B:D3:84:9B:B8:93:54:52:1B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3A1637A5A13F979ACCEA7225663539C3C0F58B54 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/06068fda-8886-4835-9c88-81ea15fda48e.roa Signing time: Sat 15 Nov 2025 05:00:07 +0000 ROA not before: Sat 15 Nov 2025 05:00:07 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:16:37:a5:a1:3f:97:9a:cc:ea:72:25:66:35:39:c3:c0:f5:8b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 15 05:00:07 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=e561fbaeaab691624db35c0f5445bc0c5a9290a32dd2493a2c2e5e960ed7fb97, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:e6:08:6d:b8:9b:66:04:69:2c:43:40:dd: e8:32:4a:9c:05:97:95:16:58:a7:89:55:86:60:73: f9:67:58:49:92:e2:ad:94:86:ce:ba:ff:d9:dc:3e: b2:97:80:56:65:f6:27:d5:16:3f:cb:ed:a3:08:1e: 36:fb:5c:1e:15:0b:48:dd:07:fa:8f:2b:55:76:04: 44:5a:83:31:06:87:77:c0:40:9d:5b:a8:3a:53:c9: ef:65:5e:45:7c:38:2a:f3:42:7d:c3:84:9b:2c:68: 4b:24:a8:40:f1:b3:0d:67:23:c6:c7:fe:2a:01:4a: ed:fc:ed:08:f4:42:6f:c1:5e:b9:e8:ac:ff:24:d0: 22:8f:3e:e9:1d:d6:40:ae:98:58:e9:ef:77:26:8d: 98:8c:60:cf:d7:4d:4e:70:87:b1:68:22:16:89:6d: 64:c9:e8:67:fe:4d:67:7e:45:fb:39:9f:b2:05:9b: b7:e8:08:a7:a0:fe:d3:1c:d0:01:ab:c0:80:2e:19: e4:f7:a3:07:4d:60:0a:ea:23:36:a5:cd:14:af:98: d4:7c:ae:c8:75:7d:39:32:9e:54:c8:5c:47:bf:32: d1:07:c5:c8:ec:0b:1a:f3:27:17:d8:80:5b:ca:90: 60:be:d2:b3:21:9a:d8:88:6c:ff:5a:f1:51:15:6f: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6B:93:1A:CB:3E:F7:C0:7E:7A:5E:7B:D3:84:9B:B8:93:54:52:1B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/06068fda-8886-4835-9c88-81ea15fda48e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.47.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:e4:b4:9f:41:9c:48:54:73:f9:4b:3c:64:67:7b:40:22:d2: 86:ec:6e:81:8b:8a:8d:12:84:1a:aa:1f:41:92:2e:55:8b:ac: e3:52:e4:96:23:fb:49:91:91:2c:c8:da:92:eb:69:4c:66:a0: bb:aa:6d:1a:97:48:10:68:63:37:dd:80:ec:ff:3d:f0:83:6a: 00:46:a4:69:ba:e1:06:da:a5:fd:a5:36:d6:44:a2:31:6c:69: bc:34:7e:47:88:af:e1:ab:d1:3d:08:c2:1a:cd:96:20:2d:26: 88:77:ec:c7:97:8e:62:cb:0c:ed:e7:73:c1:e6:1e:4d:31:0b: a9:9e:40:0c:93:5c:3b:1a:4f:1e:0b:13:4b:46:25:9e:19:84: 9b:f0:6e:98:f3:3a:bf:7e:41:59:24:3a:9c:ba:b2:72:dd:05: 9f:2d:ae:56:a4:23:b5:b4:3e:33:87:cf:30:83:48:ed:b0:83: 6b:1d:bf:2a:8a:5a:42:21:10:63:86:54:73:30:db:d6:61:0c: c4:31:a3:54:97:6b:4e:f1:aa:e9:13:1c:e1:f0:cd:68:5a:39: 0d:db:a8:24:0d:73:b5:7a:c0:a3:ff:39:8e:50:6e:ef:28:c8: 5a:a2:fc:54:fb:00:30:5c:a1:fd:ab:7f:44:2c:63:17:0a:b4: 84:ca:0d:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOhY3paE/l5rM6nIlZjU5w8D1i1QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTE1MDUwMDA3WhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTYxZmJhZWFhYjY5MTYyNGRiMzVjMGY1NDQ1YmMwYzVh OTI5MGEzMmRkMjQ5M2EyYzJlNWU5NjBlZDdmYjk3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdtOYIbbibZgRpLENA3egySpwFl5UWWKeJVYZgc/lnWEmS 4q2Uhs66/9ncPrKXgFZl9ifVFj/L7aMIHjb7XB4VC0jdB/qPK1V2BERagzEGh3fA QJ1bqDpTye9lXkV8OCrzQn3DhJssaEskqEDxsw1nI8bH/ioBSu387Qj0Qm/BXrno rP8k0CKPPukd1kCumFjp73cmjZiMYM/XTU5wh7FoIhaJbWTJ6Gf+TWd+Rfs5n7IF m7foCKeg/tMc0AGrwIAuGeT3owdNYArqIzalzRSvmNR8rsh1fTkynlTIXEe/MtEH xcjsCxrzJxfYgFvKkGC+0rMhmtiIbP9a8VEVb9IDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0muTGss+98B+el5704SbuJNUUhswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA2MDY4ZmRhLTg4ODYtNDgzNS05Yzg4LTgxZWExNWZkYTQ4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC8wDQYJKoZIhvcNAQELBQADggEBAD7ktJ9BnEhUc/lLPGRne0Ai0obs boGLio0ShBqqH0GSLlWLrONS5JYj+0mRkSzI2pLraUxmoLuqbRqXSBBoYzfdgOz/ PfCDagBGpGm64Qbapf2lNtZEojFsabw0fkeIr+Gr0T0IwhrNliAtJoh37MeXjmLL DO3nc8HmHk0xC6meQAyTXDsaTx4LE0tGJZ4ZhJvwbpjzOr9+QVkkOpy6snLdBZ8t rlakI7W0PjOHzzCDSO2wg2sdvyqKWkIhEGOGVHMw29ZhDMQxo1SXa07xqukTHOHw zWhaOQ3bqCQNc7V6wKP/OY5Qbu8oyFqi/FT7ADBcof2rf0QsYxcKtITKDVM= -----END CERTIFICATE-----Generated at Fri Nov 21 17:46:11 2025 by rpki-client