This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa File: e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa (raw, json) Hash identifier: yGC5wcgKdXJRoZIpNkdNrnM7OPhPWINh4GMAsUN6pjQ= Subject key identifier: 51:79:FE:3E:F6:8B:2A:BD:E4:3A:0E:2C:53:12:40:20:6A:09:80:F8 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 560C2A0C275A2A8945BED1BA08612DE1A301ABD3 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa Signing time: Wed 10 Dec 2025 04:50:04 +0000 ROA not before: Wed 10 Dec 2025 04:50:04 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 801 IP address blocks: 35.96.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0c:2a:0c:27:5a:2a:89:45:be:d1:ba:08:61:2d:e1:a3:01:ab:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Dec 10 04:50:04 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=d68ecb349d74db9d02d75c60758368556cc76185b1ed864e5d298578806e9be8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:61:5a:93:87:3c:23:e7:69:5f:a3:17:3b: b0:7b:59:0b:18:fb:77:c5:62:b8:bc:14:3d:41:64: cb:0a:0d:8e:f2:d3:bd:2e:ca:fd:a2:60:cd:80:78: ad:19:93:70:b4:4b:f6:c7:c6:35:06:fb:3c:95:0f: ef:c6:92:ab:d5:d5:5d:bb:8c:17:89:f1:ce:d6:6f: 2a:cf:2c:6e:d0:a9:4b:70:1e:23:81:c4:9e:fc:bf: 74:ab:3d:02:c8:ff:f0:47:cc:74:bf:3e:15:fa:c4: 23:c7:ba:2e:27:d4:84:a2:7b:94:0c:14:0a:94:d1: 18:89:1e:21:6a:fb:96:90:53:54:cc:19:9d:40:12: f9:aa:13:75:40:64:1e:bd:ed:34:d5:05:12:7f:70: 24:57:74:ac:38:d9:ae:6c:01:03:05:04:44:9a:84: 0b:bb:d6:23:96:08:47:af:ba:2e:0c:5f:15:f9:86: dc:80:2c:5d:fc:13:17:cb:aa:fd:d8:80:f2:f1:9c: ce:e3:08:cb:c1:a9:91:b5:f4:0e:27:e1:8c:47:a5: 0a:34:dd:8f:73:f9:cf:54:05:11:bd:7e:5d:e2:60: 0f:60:27:11:63:5c:0a:16:0f:c2:23:54:97:0c:95: 74:a7:26:af:9f:49:d0:ca:e8:b9:1e:71:4a:62:41: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:79:FE:3E:F6:8B:2A:BD:E4:3A:0E:2C:53:12:40:20:6A:09:80:F8 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.4.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:b6:3f:a6:d5:aa:47:23:02:b0:cc:96:96:5a:8a:cd:18:d2: 57:ae:7a:99:60:1d:fd:f3:0c:22:39:a5:05:c9:45:0c:5b:de: 5a:0a:ec:22:56:06:a9:ca:2b:71:ad:cc:d2:0b:b5:9a:da:12: 51:8f:5b:20:a9:12:68:19:7c:00:e9:e9:11:af:56:bf:57:d7: 5e:b0:45:3c:e6:f7:81:23:70:d6:1c:09:07:41:5b:1a:25:0b: e9:8d:d3:a9:c1:e9:0d:ac:fa:90:7e:b7:8d:cd:9c:ed:43:ec: bb:5f:d0:92:9c:db:35:89:fa:99:fe:ae:05:16:b8:61:b4:19: 46:10:c5:d0:65:ce:b1:04:4b:8f:42:87:33:21:78:64:7c:0b: 3a:13:da:8f:81:f9:ee:e3:b6:56:8f:eb:bb:a0:a2:d6:e1:74: 02:31:7a:59:a0:ff:3c:a7:5b:85:6d:62:13:5e:9d:14:74:52: d0:05:73:79:f8:81:f2:e5:6d:7b:3e:c6:82:e0:bd:f7:ac:32: a0:14:2a:21:cb:69:44:2b:b5:5b:71:44:25:a6:07:ba:ef:d9: 94:02:91:9c:93:73:a7:6f:d7:da:58:b0:32:66:6d:17:74:92: 4d:a6:ed:1d:f7:e0:c6:b3:69:fd:d9:dc:af:b8:4e:70:36:64: 00:1e:1a:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVgwqDCdaKolFvtG6CGEt4aMBq9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMjEwMDQ1MDA0WhcNMjYwMzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjhlY2IzNDlkNzRkYjlkMDJkNzVjNjA3NTgzNjg1NTZj Yzc2MTg1YjFlZDg2NGU1ZDI5ODU3ODgwNmU5YmU4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/HWFak4c8I+dpX6MXO7B7WQsY+3fFYri8FD1BZMsKDY7y 070uyv2iYM2AeK0Zk3C0S/bHxjUG+zyVD+/GkqvV1V27jBeJ8c7WbyrPLG7QqUtw HiOBxJ78v3SrPQLI//BHzHS/PhX6xCPHui4n1ISie5QMFAqU0RiJHiFq+5aQU1TM GZ1AEvmqE3VAZB697TTVBRJ/cCRXdKw42a5sAQMFBESahAu71iOWCEevui4MXxX5 htyALF38ExfLqv3YgPLxnM7jCMvBqZG19A4n4YxHpQo03Y9z+c9UBRG9fl3iYA9g JxFjXAoWD8IjVJcMlXSnJq+fSdDK6LkecUpiQdMpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUXn+PvaLKr3kOg4sUxJAIGoJgPgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U1YzFiOWI4LTk3ZjAtNDRlMC1hNGI1LTJmNmMyYTI1MzFjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAQwDQYJKoZIhvcNAQELBQADggEBAG62P6bVqkcjArDMlpZais0Y0leu eplgHf3zDCI5pQXJRQxb3loK7CJWBqnKK3GtzNILtZraElGPWyCpEmgZfADp6RGv Vr9X116wRTzm94EjcNYcCQdBWxolC+mN06nB6Q2s+pB+t43NnO1D7Ltf0JKc2zWJ +pn+rgUWuGG0GUYQxdBlzrEES49ChzMheGR8CzoT2o+B+e7jtlaP67ugotbhdAIx elmg/zynW4VtYhNenRR0UtAFc3n4gfLlbXs+xoLgvfesMqAUKiHLaUQrtVtxRCWm B7rv2ZQCkZyTc6dv19pYsDJmbRd0kk2m7R334Mazaf3Z3K+4TnA2ZAAeGow= -----END CERTIFICATE-----Generated at Thu Dec 18 08:02:32 2025 by rpki-client