This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/33dd038a-1049-4282-b78d-4d1b2a396bd6.roa File: 33dd038a-1049-4282-b78d-4d1b2a396bd6.roa (raw, json) Hash identifier: jZ5hb+Pba/goWT+DNMgKRq2O6pfygRTWQo0NqL+sGk4= Subject key identifier: 2C:58:D2:C2:D6:45:8D:1D:E2:5F:B9:CB:FC:08:B7:71:57:5A:A0:25 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3F8DD2F4697791020868D467A015CAA135487E6B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/33dd038a-1049-4282-b78d-4d1b2a396bd6.roa Signing time: Thu 13 Nov 2025 02:00:09 +0000 ROA not before: Thu 13 Nov 2025 02:00:09 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8d:d2:f4:69:77:91:02:08:68:d4:67:a0:15:ca:a1:35:48:7e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 13 02:00:09 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=0ab442d4ef4dcf4f27b7657a406da31512bef14af8fc32f9fe17e355ea7f2aaa, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:d4:fb:e3:ec:35:a3:ef:e3:ba:3a:b1:fe: c8:e7:fd:39:1c:ed:26:6f:8b:2a:e2:f4:6b:a9:e5: d0:b7:c7:0b:f2:cd:c6:44:80:4d:a2:ba:e6:97:46: 6f:07:d8:cf:02:68:14:46:1b:33:60:17:60:d0:b6: 56:79:59:e4:2b:65:42:b7:4a:70:9c:d0:aa:5a:ba: 4c:30:5e:d1:d2:9b:15:52:af:d8:72:d0:bc:e6:ef: bc:61:46:a5:92:94:aa:ce:21:15:7b:3a:4b:35:90: 2c:68:62:73:9d:4f:e0:98:c1:8a:7e:ce:d7:50:fd: 2e:e7:ed:4d:0a:58:6d:a4:1a:71:b7:cf:b9:c5:aa: 9e:7e:47:ad:43:0c:2a:9b:1d:91:a2:06:de:3f:e7: 8c:fd:c3:70:db:71:fc:38:b9:29:31:2c:11:77:32: 21:5e:52:ff:77:f6:c5:68:d4:72:2c:fa:7f:8e:ab: 88:04:df:54:a9:a8:a2:20:d0:5a:b9:27:6c:5b:39: 0b:cf:7e:25:c8:13:65:dd:a6:ab:f5:89:9e:55:e4: 03:7d:1c:08:73:89:fa:93:48:6e:05:90:d8:0f:f1: 8d:33:e1:96:4d:7c:60:d1:0e:67:f9:47:39:ef:54: 09:4a:86:6c:c3:2a:76:d4:a4:cd:ca:84:5a:a0:37: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:58:D2:C2:D6:45:8D:1D:E2:5F:B9:CB:FC:08:B7:71:57:5A:A0:25 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/33dd038a-1049-4282-b78d-4d1b2a396bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.42.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:7f:8a:4b:ea:6a:8e:32:72:71:17:e5:57:9f:85:30:aa:a7: 2a:84:93:45:6b:16:ce:a1:e9:33:7e:be:b6:83:e9:c1:d7:dc: cc:9c:de:c8:92:d2:a5:ba:0d:36:60:5b:06:50:f3:b8:cb:7a: b8:76:94:fd:b1:f7:49:0a:78:f3:89:1f:4f:99:f6:03:40:72: 95:d5:a3:2e:a1:8f:2b:40:f6:07:63:b5:e3:28:31:28:25:0f: 43:91:5c:4f:5a:1f:f6:b4:5c:e8:4f:9c:39:16:f4:0a:d4:c6: 13:ff:86:4d:f2:89:d9:1c:5e:f9:52:86:d4:94:1d:e6:5a:78: 84:44:41:80:44:86:49:1a:13:f9:aa:fa:2f:0b:d6:89:ff:19: eb:6a:d7:83:07:57:6d:58:cb:3c:12:54:0d:f6:85:44:91:49: cf:45:6d:0a:13:ca:06:8c:30:f3:a3:22:79:5d:b5:a7:65:b1: b0:20:e2:e4:42:b3:e0:29:b1:84:c2:c7:0d:b3:7a:89:b3:57: 4f:7c:3c:41:d8:ab:07:c3:d2:f0:11:26:af:05:7b:c6:68:52: e0:33:86:dc:e5:d6:46:92:1d:e0:11:38:99:f3:32:3a:6a:cd: fa:43:5c:95:37:03:dc:92:62:ac:4b:96:6e:40:53:bb:5b:88: 62:8f:51:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP43S9Gl3kQIIaNRnoBXKoTVIfmswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTEzMDIwMDA5WhcNMjUxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWI0NDJkNGVmNGRjZjRmMjdiNzY1N2E0MDZkYTMxNTEy YmVmMTRhZjhmYzMyZjlmZTE3ZTM1NWVhN2YyYWFhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKQtT74+w1o+/jujqx/sjn/Tkc7SZviyri9Gup5dC3xwvy zcZEgE2iuuaXRm8H2M8CaBRGGzNgF2DQtlZ5WeQrZUK3SnCc0KpaukwwXtHSmxVS r9hy0Lzm77xhRqWSlKrOIRV7Oks1kCxoYnOdT+CYwYp+ztdQ/S7n7U0KWG2kGnG3 z7nFqp5+R61DDCqbHZGiBt4/54z9w3Dbcfw4uSkxLBF3MiFeUv939sVo1HIs+n+O q4gE31SpqKIg0Fq5J2xbOQvPfiXIE2Xdpqv1iZ5V5AN9HAhzifqTSG4FkNgP8Y0z 4ZZNfGDRDmf5RznvVAlKhmzDKnbUpM3KhFqgN41DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULFjSwtZFjR3iX7nL/Ai3cVdaoCUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzMzZGQwMzhhLTEwNDktNDI4Mi1iNzhkLTRkMWIyYTM5NmJkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCowDQYJKoZIhvcNAQELBQADggEBAE1/ikvqao4ycnEX5VefhTCqpyqE k0VrFs6h6TN+vraD6cHX3Myc3siS0qW6DTZgWwZQ87jLerh2lP2x90kKePOJH0+Z 9gNAcpXVoy6hjytA9gdjteMoMSglD0ORXE9aH/a0XOhPnDkW9ArUxhP/hk3yidkc XvlShtSUHeZaeIREQYBEhkkaE/mq+i8L1on/Getq14MHV21YyzwSVA32hUSRSc9F bQoTygaMMPOjInldtadlsbAg4uRCs+ApsYTCxw2zeomzV098PEHYqwfD0vARJq8F e8ZoUuAzhtzl1kaSHeAROJnzMjpqzfpDXJU3A9ySYqxLlm5AU7tbiGKPUWk= -----END CERTIFICATE-----Generated at Sat Nov 22 21:36:16 2025 by rpki-client