This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa File: 8ac8d230-2c50-472b-aaac-384834352fef.roa (raw, json) Hash identifier: 4Ajh5qyOX64wk/1/fqR+XrFasqiP5oC9cl/NFldrqAM= Subject key identifier: 5E:99:E9:5E:42:D0:68:67:B0:2C:65:F2:1F:96:8F:06:D8:83:08:3A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5FE8A016A2B2D284288A464BB681673EA996EB03 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa Signing time: Thu 13 Nov 2025 02:00:14 +0000 ROA not before: Thu 13 Nov 2025 02:00:14 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e8:a0:16:a2:b2:d2:84:28:8a:46:4b:b6:81:67:3e:a9:96:eb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 13 02:00:14 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=d0d4e4dc8834af7da62b2be80f0b73afd165c5a899516a364eb74140c8929528, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:64:cd:ee:1b:1b:8a:11:72:d4:e8:f3:4f: 63:91:81:a3:67:c6:93:5b:ae:88:27:21:2e:d2:d9: 35:c1:07:4d:c7:04:3d:7d:59:43:43:89:52:76:e8: 92:ee:a9:8a:cd:91:98:0e:3e:6c:bd:f6:77:cc:4a: 8e:a0:72:03:0e:a7:9a:16:6f:88:f6:32:21:06:fb: 9b:b7:8b:2d:df:c8:75:0e:90:8e:30:04:8e:7a:89: 5a:ad:4f:25:e7:03:81:bd:97:ed:31:96:7f:a6:7f: b3:4d:51:7d:9d:5d:91:47:93:08:c0:78:8e:8b:12: 5f:5d:dc:b0:75:e4:e5:dc:d4:e8:5a:6a:e8:83:72: 14:6d:34:91:09:75:4e:0c:69:d2:64:c3:e9:09:fc: 35:96:1a:2b:42:ba:fd:f8:2d:49:31:3a:67:7a:49: 9c:06:d5:bd:19:4a:a7:f8:01:9e:b0:05:d4:d2:4a: e5:99:6e:ad:8c:42:fc:a2:36:b0:f7:d0:9b:3c:c9: 08:a7:26:71:1f:6e:08:c0:3a:19:8c:95:2c:fd:61: 8c:51:b7:df:61:96:45:93:b9:c2:03:29:67:10:a8: 78:2c:dc:83:2c:10:d2:62:2a:e4:6f:17:85:c5:63: ac:a2:bb:d4:af:f0:90:6c:84:9f:0c:8c:9e:91:0a: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:99:E9:5E:42:D0:68:67:B0:2C:65:F2:1F:96:8F:06:D8:83:08:3A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.36.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:d5:87:82:18:33:e7:d3:bd:18:44:c1:93:93:3c:57:8c:60: c6:5e:01:5e:75:a6:22:c5:0c:2b:71:f0:5e:8f:9c:1a:14:85: 16:88:6f:18:5c:e1:59:2f:b8:91:a7:cb:4b:ad:d3:40:54:15: 5f:4d:51:f7:a8:2f:f9:af:49:a7:c1:ca:bd:0e:47:12:be:2b: e0:f8:b8:6e:4c:63:a9:f4:88:0e:76:8f:36:79:5e:ae:d9:ff: 2b:38:4c:92:00:66:37:c7:20:1d:a4:b8:0f:13:a2:97:90:03: a7:c9:14:df:56:26:d3:4b:79:0e:d2:20:27:c2:3f:45:99:8e: fb:6f:3e:2d:24:57:95:7a:76:b8:ad:f5:4c:2b:77:0b:34:16: f2:7d:aa:c4:b9:64:5a:3f:a2:a1:41:8b:94:a0:ff:71:a6:e8: cf:31:03:5c:ea:6c:98:ad:cc:e8:b0:0b:c8:b7:31:0c:4a:5a: 39:dc:a7:fe:a6:43:26:a5:86:6a:fd:7d:14:db:91:ee:93:86: 7b:86:e1:ce:1b:4d:f3:d9:a1:2c:e6:ac:08:3a:14:d9:00:16: 79:08:85:3e:06:c7:0a:70:c1:ba:d2:97:fc:89:f7:7d:58:8e: f4:da:45:6f:61:7a:ae:5e:24:b0:50:92:68:d7:59:22:57:53: 6c:95:15:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX+igFqKy0oQoikZLtoFnPqmW6wMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTEzMDIwMDE0WhcNMjUxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGQ0ZTRkYzg4MzRhZjdkYTYyYjJiZTgwZjBiNzNhZmQx NjVjNWE4OTk1MTZhMzY0ZWI3NDE0MGM4OTI5NTI4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwsmTN7hsbihFy1OjzT2ORgaNnxpNbrognIS7S2TXBB03H BD19WUNDiVJ26JLuqYrNkZgOPmy99nfMSo6gcgMOp5oWb4j2MiEG+5u3iy3fyHUO kI4wBI56iVqtTyXnA4G9l+0xln+mf7NNUX2dXZFHkwjAeI6LEl9d3LB15OXc1Oha auiDchRtNJEJdU4MadJkw+kJ/DWWGitCuv34LUkxOmd6SZwG1b0ZSqf4AZ6wBdTS SuWZbq2MQvyiNrD30Js8yQinJnEfbgjAOhmMlSz9YYxRt99hlkWTucIDKWcQqHgs 3IMsENJiKuRvF4XFY6yiu9Sv8JBshJ8MjJ6RCphVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXpnpXkLQaGewLGXyH5aPBtiDCDowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhhYzhkMjMwLTJjNTAtNDcyYi1hYWFjLTM4NDgzNDM1MmZlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBAF/Vh4IYM+fTvRhEwZOTPFeMYMZe AV51piLFDCtx8F6PnBoUhRaIbxhc4VkvuJGny0ut00BUFV9NUfeoL/mvSafByr0O RxK+K+D4uG5MY6n0iA52jzZ5Xq7Z/ys4TJIAZjfHIB2kuA8TopeQA6fJFN9WJtNL eQ7SICfCP0WZjvtvPi0kV5V6drit9Uwrdws0FvJ9qsS5ZFo/oqFBi5Sg/3Gm6M8x A1zqbJitzOiwC8i3MQxKWjncp/6mQyalhmr9fRTbke6ThnuG4c4bTfPZoSzmrAg6 FNkAFnkIhT4GxwpwwbrSl/yJ931YjvTaRW9heq5eJLBQkmjXWSJXU2yVFX8= -----END CERTIFICATE-----Generated at Fri Nov 28 19:40:53 2025 by rpki-client