This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa File: 2ac091c5-8143-4a71-81c4-f34c33d996aa.roa (raw, json) Hash identifier: r7X289eqBV0vOt/XFg5vQqyDqRyFd6UVN3ZO8CvIrBo= Subject key identifier: 36:3A:83:B3:3C:39:6F:35:02:F1:6D:16:F9:6F:42:60:9C:FB:89:10 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 28262678AA8C909830CB0C69BCB03C2DF013DD4E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa Signing time: Mon 08 Dec 2025 02:00:28 +0000 ROA not before: Mon 08 Dec 2025 02:00:28 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:26:26:78:aa:8c:90:98:30:cb:0c:69:bc:b0:3c:2d:f0:13:dd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 8 02:00:28 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=666753e1da2f6537b0d68deec9e1378c17df57f6a3320bd18f5e4ed84bce7338, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:77:da:73:43:35:47:30:d1:7b:4e:a1:52: 3d:2f:48:fb:f8:94:0e:1d:39:da:42:86:e0:c3:63: 89:40:28:fd:87:0d:58:bf:5d:2e:c5:90:22:a9:51: d8:4d:75:b2:a1:05:7d:c6:7c:25:32:41:87:b3:f2: 10:69:f2:cf:cf:b7:c8:9c:12:18:78:86:5b:57:4a: 95:0c:c6:ee:01:99:75:80:53:81:6c:79:37:72:ea: 5e:72:91:a9:54:8a:35:b2:e9:3e:83:76:19:93:d2: e1:4e:d0:20:bf:e0:cf:64:c7:0b:e0:5f:65:1f:a8: 35:25:11:34:79:59:ba:53:89:01:b8:4d:2c:ca:5d: 77:d4:be:ae:c7:cf:99:12:ea:e3:b3:c4:c3:21:64: a1:4b:d4:32:60:ba:c8:41:19:dc:f4:09:71:f3:a2: 9f:b7:de:6d:ce:07:88:7e:7e:e9:b8:5e:6e:19:1f: 48:34:6f:52:ec:09:b6:ea:2a:7b:00:f5:42:f2:ac: 8c:b2:6e:2c:b3:14:b7:ce:c5:f6:5e:d8:f1:01:d3: 56:bd:1c:22:66:96:d5:df:26:8a:90:fa:f0:0f:98: 70:71:c3:b3:f0:c3:61:65:9c:c9:15:47:e1:f0:6f: e7:fa:6d:35:3a:60:17:3b:99:ce:39:37:54:53:38: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3A:83:B3:3C:39:6F:35:02:F1:6D:16:F9:6F:42:60:9C:FB:89:10 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.38.0/24 Signature Algorithm: sha256WithRSAEncryption 94:16:86:f5:bf:0f:81:a0:98:de:4f:f6:d9:52:68:d4:dc:02: 2f:a3:c7:c8:06:9a:39:e9:0d:08:89:bd:a9:55:bb:b6:36:12: d1:b9:e7:70:42:2e:12:fd:e9:ba:a9:d1:f3:1d:bb:9a:02:6a: 95:d3:88:e9:a8:1e:e7:c6:9a:d2:7f:79:3f:8c:f5:0f:ca:7d: f8:44:a8:3e:a5:29:97:97:fe:2b:77:da:4c:06:7a:60:08:09: 35:f7:33:54:5f:bf:c3:9a:f9:28:79:f2:f6:b5:a7:d9:12:bc: 33:a2:0a:3d:75:0f:ea:77:2e:86:84:24:b7:6d:36:8a:bd:85: ce:19:72:c5:73:d8:f8:7b:dd:ee:b1:27:3d:a6:9a:15:d1:14: 15:b2:60:90:6e:d4:6a:07:32:94:13:a8:0f:c7:f2:34:34:74: 70:6f:a1:b9:44:e6:91:09:17:39:b9:70:18:d7:a9:a6:cd:b4: 88:5f:9f:55:06:80:89:09:82:84:5b:9f:4a:a9:ef:02:25:dd: de:e9:91:7a:16:a4:7d:33:27:47:66:6e:48:2d:04:b9:14:f1: 62:68:22:89:18:96:7f:f4:5c:12:eb:4f:dc:bf:5d:b6:e6:e1: 53:76:f6:dd:f2:17:20:57:6d:56:e4:e0:b7:d9:c9:dc:31:8e: 09:e2:7a:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKCYmeKqMkJgwywxpvLA8LfAT3U4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjA4MDIwMDI4WhcNMjYwMzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjY3NTNlMWRhMmY2NTM3YjBkNjhkZWVjOWUxMzc4YzE3 ZGY1N2Y2YTMzMjBiZDE4ZjVlNGVkODRiY2U3MzM4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNNXfac0M1RzDRe06hUj0vSPv4lA4dOdpChuDDY4lAKP2H DVi/XS7FkCKpUdhNdbKhBX3GfCUyQYez8hBp8s/Pt8icEhh4hltXSpUMxu4BmXWA U4FseTdy6l5ykalUijWy6T6DdhmT0uFO0CC/4M9kxwvgX2UfqDUlETR5WbpTiQG4 TSzKXXfUvq7Hz5kS6uOzxMMhZKFL1DJgushBGdz0CXHzop+33m3OB4h+fum4Xm4Z H0g0b1LsCbbqKnsA9ULyrIyybiyzFLfOxfZe2PEB01a9HCJmltXfJoqQ+vAPmHBx w7Pww2FlnMkVR+Hwb+f6bTU6YBc7mc45N1RTODQzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNjqDszw5bzUC8W0W+W9CYJz7iRAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJhYzA5MWM1LTgxNDMtNGE3MS04MWM0LWYzNGMzM2Q5OTZhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCYwDQYJKoZIhvcNAQELBQADggEBAJQWhvW/D4GgmN5P9tlSaNTcAi+j x8gGmjnpDQiJvalVu7Y2EtG553BCLhL96bqp0fMdu5oCapXTiOmoHufGmtJ/eT+M 9Q/KffhEqD6lKZeX/it32kwGemAICTX3M1Rfv8Oa+Sh58va1p9kSvDOiCj11D+p3 LoaEJLdtNoq9hc4ZcsVz2Ph73e6xJz2mmhXRFBWyYJBu1GoHMpQTqA/H8jQ0dHBv oblE5pEJFzm5cBjXqabNtIhfn1UGgIkJgoRbn0qp7wIl3d7pkXoWpH0zJ0dmbkgt BLkU8WJoIokYln/0XBLrT9y/Xbbm4VN29t3yFyBXbVbk4LfZydwxjgniem4= -----END CERTIFICATE-----Generated at Tue Dec 9 19:25:18 2025 by rpki-client