This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001d631f-3920-4b24-a9e8-b7d40e1c5971.roa File: 001d631f-3920-4b24-a9e8-b7d40e1c5971.roa (raw, json) Hash identifier: Vh0Mj7MnkgkCKPoRRKSRwpfJlWu8daG1aIm6vhrP4/I= Subject key identifier: 00:FA:70:45:E8:24:4D:CC:FF:BA:94:D5:35:23:FE:D0:F7:62:13:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 546B9ACFB44840F54C2FF4D5743C0E181A30DC93 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001d631f-3920-4b24-a9e8-b7d40e1c5971.roa Signing time: Sat 22 Nov 2025 00:40:14 +0000 ROA not before: Sat 22 Nov 2025 00:40:14 +0000 ROA not after: Fri 20 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6b:9a:cf:b4:48:40:f5:4c:2f:f4:d5:74:3c:0e:18:1a:30:dc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:40:14 2025 GMT Not After : Feb 20 23:59:59 2026 GMT Subject: serialNumber=fab35dace036a998f1ae589270a4cb01dc8f5edc9b18a310fd97fc5f705bce4f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:88:38:52:20:65:38:68:fa:b1:38:3c:7b: 3f:93:04:ef:f4:e8:ae:69:19:55:84:d3:ae:b4:ac: 5e:7a:06:e6:e0:38:33:f3:9c:92:8d:88:1a:6c:46: 5a:fc:18:64:cd:97:3d:e6:9e:44:ad:48:f9:4a:37: 41:61:8f:98:2a:bb:5a:14:a0:0e:2b:17:de:9b:15: 30:e1:12:10:36:7e:d3:62:af:0e:10:4e:31:66:72: 91:d8:b7:0f:c0:60:09:58:a4:27:43:7a:f9:d2:fa: 73:1e:0c:81:e2:7f:af:76:39:07:ed:0c:07:ad:e7: 77:a6:f0:4f:3a:bc:0c:6e:a2:b9:1a:e7:9e:97:fa: ec:0a:ab:19:ee:03:ec:d6:5d:e2:6c:07:31:b8:bf: 84:71:0b:dc:b2:98:e6:bb:c7:4b:65:21:b6:c5:98: c3:80:47:a6:65:a3:f8:dd:3a:a0:d5:56:06:7e:93: 4f:28:d1:18:79:55:78:25:2a:56:cb:eb:86:d8:9e: 85:4a:4c:9f:12:6e:a5:55:df:c3:6a:1b:4a:9b:1c: 1d:09:46:38:ec:9f:01:0e:d0:a1:77:1b:3d:47:89: 7c:e3:fc:51:aa:e4:ec:2a:02:e4:6a:ef:30:ac:89: cf:9d:2b:e9:39:3e:66:b3:72:c6:52:e3:2a:49:2e: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:70:45:E8:24:4D:CC:FF:BA:94:D5:35:23:FE:D0:F7:62:13:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001d631f-3920-4b24-a9e8-b7d40e1c5971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.109.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:f0:48:74:3a:d8:87:c3:1c:31:80:0b:3a:71:97:52:01:f0: b7:3c:6b:a3:b1:83:fa:24:f9:ea:fa:d6:df:da:43:e8:a6:d2: 5b:a2:bc:5f:13:c7:23:75:62:6d:16:38:2b:07:cf:98:c6:54: 8a:9b:5b:d5:72:95:a9:27:0e:90:30:d5:d8:fa:63:48:f2:a4: a6:fc:94:42:7c:61:b9:ac:72:3b:3a:cb:43:b0:28:11:f1:fe: 78:41:8e:ca:64:80:33:fe:4a:e9:c4:e6:4a:ca:df:c2:10:3f: 8d:67:bd:fe:16:94:19:88:94:3b:61:2b:19:f2:78:ca:99:1c: 96:a8:87:e3:03:83:42:2b:8c:c7:2a:fd:90:d2:f7:5d:d3:d6: b6:c5:c3:c7:e4:7c:25:c6:e7:e4:9a:e6:1b:4a:99:c3:b3:a7: ce:6c:ee:db:3f:11:fd:1f:c8:f6:d8:a9:fa:87:a8:fa:89:34: aa:05:50:a9:69:0b:0c:e9:04:16:4f:92:b2:54:6e:96:bf:74: e6:47:40:9a:10:dd:54:0d:72:ca:8f:e3:e8:3d:8c:0c:ac:57: 08:a6:90:74:4c:a0:c6:48:80:59:59:16:56:58:be:38:ce:4b: 5d:b7:93:8c:02:3f:87:69:d6:7d:12:88:df:81:7f:dc:b4:cc: 31:b6:27:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVGuaz7RIQPVML/TVdDwOGBow3JMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDA0MDE0WhcNMjYwMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWIzNWRhY2UwMzZhOTk4ZjFhZTU4OTI3MGE0Y2IwMWRj OGY1ZWRjOWIxOGEzMTBmZDk3ZmM1ZjcwNWJjZTRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU1Yg4UiBlOGj6sTg8ez+TBO/06K5pGVWE0660rF56Bubg ODPznJKNiBpsRlr8GGTNlz3mnkStSPlKN0Fhj5gqu1oUoA4rF96bFTDhEhA2ftNi rw4QTjFmcpHYtw/AYAlYpCdDevnS+nMeDIHif692OQftDAet53em8E86vAxuorka 556X+uwKqxnuA+zWXeJsBzG4v4RxC9yymOa7x0tlIbbFmMOAR6Zlo/jdOqDVVgZ+ k08o0Rh5VXglKlbL64bYnoVKTJ8SbqVV38NqG0qbHB0JRjjsnwEO0KF3Gz1HiXzj /FGq5OwqAuRq7zCsic+dK+k5PmazcsZS4ypJLsB/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAPpwRegkTcz/upTVNSP+0PdiE6kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAwMWQ2MzFmLTM5MjAtNGIyNC1hOWU4LWI3ZDQwZTFjNTk3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/G0wDQYJKoZIhvcNAQELBQADggEBAIrwSHQ62IfDHDGACzpxl1IB8Lc8 a6Oxg/ok+er61t/aQ+im0luivF8TxyN1Ym0WOCsHz5jGVIqbW9VylaknDpAw1dj6 Y0jypKb8lEJ8Ybmscjs6y0OwKBHx/nhBjspkgDP+SunE5krK38IQP41nvf4WlBmI lDthKxnyeMqZHJaoh+MDg0IrjMcq/ZDS913T1rbFw8fkfCXG5+Sa5htKmcOzp85s 7ts/Ef0fyPbYqfqHqPqJNKoFUKlpCwzpBBZPkrJUbpa/dOZHQJoQ3VQNcsqP4+g9 jAysVwimkHRMoMZIgFlZFlZYvjjOS123k4wCP4dp1n0SiN+Bf9y0zDG2J/k= -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:05 2025 by rpki-client