This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa File: 9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa (raw, json) Hash identifier: rnmJQ3wpyzpbT5fUTXGCqfCGF0BFKGKTHWSFBECjzcQ= Subject key identifier: 6A:B9:FF:EB:E5:73:CF:30:6E:A6:BC:C8:D0:33:7C:7C:1E:C7:2E:8D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 057C98EDD8FB2A65A2738AB6C0F2BC216ED4E707 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa Signing time: Thu 13 Nov 2025 02:00:07 +0000 ROA not before: Thu 13 Nov 2025 02:00:07 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7c:98:ed:d8:fb:2a:65:a2:73:8a:b6:c0:f2:bc:21:6e:d4:e7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 13 02:00:07 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=f7c8fb6e03102c33ec85ff856393827223d9b1dd70c7cca74a1bbcc8c3b1a313, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:07:f1:96:11:dc:a4:45:3b:83:57:e7:1e:2c: b0:40:06:62:4f:1f:6e:5b:0a:5d:9f:e0:bd:9b:f4: cc:5f:99:35:e2:74:72:a3:d5:59:20:7d:bf:ed:69: a9:1b:34:3a:e7:c3:37:f1:c6:cb:4a:a3:be:19:15: fd:70:cd:b3:63:73:7a:25:75:59:64:52:b3:40:81: 76:ee:ec:d1:1b:a5:49:3c:0c:03:65:f9:e6:e0:b3: ff:6a:5f:12:9c:bf:ca:85:46:d7:50:cc:42:a6:48: 1e:e3:bb:d2:7a:7d:27:df:a5:e6:d7:c8:7b:06:b5: dc:6b:b0:c2:f6:87:41:a8:db:66:d2:1d:53:fe:c7: 2b:3b:53:e4:9f:c8:e1:f4:e6:5a:16:f3:93:4e:a4: a9:41:81:06:06:79:e3:14:ff:52:e1:94:f3:23:e4: bd:22:c1:d7:eb:0e:c9:ce:b1:49:ac:6b:ca:5b:8d: 20:f5:fe:53:67:64:50:8e:2e:a7:7f:74:e9:8f:cd: 4e:aa:52:f4:30:19:70:aa:7d:c0:48:c3:d8:34:20: e8:79:c9:1b:d8:9a:cc:8b:0b:1b:9e:ea:06:df:10: ab:9a:86:e0:e5:51:8e:64:c4:95:80:3a:68:f4:08: 74:64:7a:0c:c7:73:d2:a3:62:6c:3d:fd:70:07:64: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:FF:EB:E5:73:CF:30:6E:A6:BC:C8:D0:33:7C:7C:1E:C7:2E:8D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 28:c8:24:cf:1d:cf:e8:e1:6c:09:3f:5b:a4:7e:4f:d0:22:70: f0:f5:fa:83:7a:d8:5b:10:fa:a1:e5:43:21:5a:98:b0:da:b0: 8b:7d:65:c2:da:1c:43:67:a6:5f:a8:26:bb:40:39:dc:bf:f0: 11:63:e9:6b:f1:f3:91:99:f0:3b:ec:8e:2a:70:f9:b4:db:67: cc:39:05:ea:ba:1f:03:9d:8a:bc:35:93:38:1a:a0:29:f7:b9: 15:74:b0:4c:de:f2:a8:e1:11:cf:93:7b:13:70:fb:b4:ca:67: c5:9b:ad:c7:f2:30:52:02:cb:d7:60:c7:36:46:03:41:73:30: 3e:e5:2e:a2:01:60:c4:73:db:c0:46:8a:f0:30:d7:60:30:d5: a9:65:70:d8:2d:a9:3c:11:d5:0e:8b:c5:83:cc:d7:50:86:59: 06:ee:49:17:20:4e:7a:ed:9a:c6:d9:5e:2c:99:30:ed:01:0c: 44:fe:72:b0:da:8f:de:87:5b:b7:bc:ca:af:12:2e:c7:4f:aa: 26:a0:86:47:51:27:84:ea:aa:dc:73:bb:1f:3f:ce:73:a4:ef: 55:1a:dd:b2:30:1a:3f:40:20:98:59:bb:da:3b:5a:46:87:e2: d7:57:04:16:83:c7:0e:b1:14:43:61:d1:52:7f:ea:71:56:6e: 89:8c:a1:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBXyY7dj7KmWic4q2wPK8IW7U5wcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTEzMDIwMDA3WhcNMjUxMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2M4ZmI2ZTAzMTAyYzMzZWM4NWZmODU2MzkzODI3MjIz ZDliMWRkNzBjN2NjYTc0YTFiYmNjOGMzYjFhMzEzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLB/GWEdykRTuDV+ceLLBABmJPH25bCl2f4L2b9MxfmTXi dHKj1Vkgfb/taakbNDrnwzfxxstKo74ZFf1wzbNjc3oldVlkUrNAgXbu7NEbpUk8 DANl+ebgs/9qXxKcv8qFRtdQzEKmSB7ju9J6fSffpebXyHsGtdxrsML2h0Go22bS HVP+xys7U+SfyOH05loW85NOpKlBgQYGeeMU/1LhlPMj5L0iwdfrDsnOsUmsa8pb jSD1/lNnZFCOLqd/dOmPzU6qUvQwGXCqfcBIw9g0IOh5yRvYmsyLCxue6gbfEKua huDlUY5kxJWAOmj0CHRkegzHc9KjYmw9/XAHZNeZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUarn/6+VzzzBuprzI0DN8fB7HLo0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljYWY1MGQ3LTE1MTEtNDhhNy1hYmNmLWQyNjFkZWQ3ZjdjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBACjIJM8dz+jhbAk/W6R+T9AicPD1 +oN62FsQ+qHlQyFamLDasIt9ZcLaHENnpl+oJrtAOdy/8BFj6Wvx85GZ8Dvsjipw +bTbZ8w5Beq6HwOdirw1kzgaoCn3uRV0sEze8qjhEc+TexNw+7TKZ8WbrcfyMFIC y9dgxzZGA0FzMD7lLqIBYMRz28BGivAw12Aw1allcNgtqTwR1Q6LxYPM11CGWQbu SRcgTnrtmsbZXiyZMO0BDET+crDaj96HW7e8yq8SLsdPqiaghkdRJ4Tqqtxzux8/ znOk71Ua3bIwGj9AIJhZu9o7WkaH4tdXBBaDxw6xFENh0VJ/6nFWbomMoXM= -----END CERTIFICATE-----Generated at Sat Nov 22 21:41:28 2025 by rpki-client