This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0caf918e-8a10-460b-9b1e-9b0af1917667.roa File: 0caf918e-8a10-460b-9b1e-9b0af1917667.roa (raw, json) Hash identifier: KBJIJtPw+quTcD5AD6a807IAbZ8Utg9x5juiVskxXOU= Subject key identifier: 91:F0:9D:5C:B8:04:53:DC:9F:28:F2:F0:16:1B:1B:1A:98:95:58:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2528A75CB5F00CEAD236E98D555E6A6CE94F44 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0caf918e-8a10-460b-9b1e-9b0af1917667.roa Signing time: Tue 25 Nov 2025 00:10:05 +0000 ROA not before: Tue 25 Nov 2025 00:10:05 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.130.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:28:a7:5c:b5:f0:0c:ea:d2:36:e9:8d:55:5e:6a:6c:e9:4f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:10:05 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=f814c7397a9e1eac210772591e8bc33bfc863bf08ac676a32b4e4d4bee4449a0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:1a:9f:01:93:2b:6f:1f:d3:4a:10:54:47: 82:6a:38:40:b4:c4:af:13:60:80:90:14:98:92:4b: 65:0f:0e:1b:5d:6f:b9:ed:1f:ea:11:57:cc:dd:41: 71:23:d2:bb:ed:ac:90:cb:2c:c4:ef:a3:8e:3b:8d: a1:8c:8a:34:54:6b:f3:91:2a:31:3a:1e:7c:b1:8a: 22:0f:81:b7:89:93:5a:7b:b4:e5:3f:d1:95:7e:c4: 98:67:06:09:b6:39:08:5c:cb:70:cf:56:6d:16:d4: 10:51:bc:4a:06:4d:e1:0a:bc:e3:69:32:0e:d1:22: d6:2f:3f:dc:ed:8c:18:45:b5:96:c4:68:4f:34:cb: 92:3e:2c:22:67:8e:88:8a:ed:0e:37:b0:61:e9:bd: bd:23:ca:f1:17:c4:64:ec:ea:78:f8:86:35:a0:58: 5d:f6:4f:6f:54:db:76:2a:d4:14:7e:b5:b2:dc:67: 61:ce:d1:91:68:d2:99:07:8f:71:ea:17:b4:bc:5f: 32:ff:c6:6b:7a:26:18:50:e4:96:86:c1:57:74:6d: b5:a2:4d:72:04:a8:eb:79:58:81:3b:5c:aa:d2:9c: e2:6d:46:e5:06:fc:20:40:ff:f8:ab:00:ee:80:d8: ac:fd:db:c6:6d:12:2c:47:bf:9b:69:e2:0c:04:8d: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F0:9D:5C:B8:04:53:DC:9F:28:F2:F0:16:1B:1B:1A:98:95:58:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0caf918e-8a10-460b-9b1e-9b0af1917667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.130.0.0/21 Signature Algorithm: sha256WithRSAEncryption 83:2c:53:4d:d4:1f:ba:2c:ed:95:a3:ec:ec:14:26:ba:52:0d: ab:4b:c9:2b:65:23:51:23:f2:ea:5f:bc:c2:d2:01:80:bb:64: 6d:5f:f3:1e:7c:28:cd:d0:57:7d:2e:86:79:dc:17:ea:8d:75: 99:58:88:29:e5:6e:57:7c:c3:23:9a:1a:c2:f6:a8:9e:44:06: 78:b9:32:1d:c8:0f:68:af:fa:91:63:12:f8:f9:90:60:38:fd: d5:36:d6:8b:22:a8:3c:07:28:c2:a3:0f:3e:0d:6e:ab:49:06: f3:78:02:32:e3:9e:32:2b:fe:bd:9f:3e:1d:f6:34:f4:12:8b: e3:11:a9:46:2a:95:53:83:0d:18:d4:3e:81:f2:52:ff:37:d8: 74:fb:bb:4d:bf:4c:59:49:b6:13:58:13:66:d9:bd:27:7c:90: fd:29:13:99:bb:1d:3a:57:41:b8:0b:c1:76:13:db:c6:ed:29: ec:d2:b2:99:fe:d6:6b:ea:2e:fb:db:b2:0e:ab:2e:78:e3:64: f7:2e:3b:5a:18:72:ba:d7:1a:d4:00:84:88:a0:c2:76:14:7c: 7f:73:7f:75:46:c5:49:ed:30:d8:9c:5e:05:2d:0a:21:2d:e0: 7f:ab:26:96:d1:f8:10:85:50:b3:fe:04:e7:6a:12:a6:71:41: 76:e7:92:21 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITJSinXLXwDOrSNumNVV5qbOlPRDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTExMjUwMDEwMDVaFw0yNjAyMjMyMzU5NTla MHoxSTBHBgNVBAUTQGY4MTRjNzM5N2E5ZTFlYWMyMTA3NzI1OTFlOGJjMzNiZmM4 NjNiZjA4YWM2NzZhMzJiNGU0ZDRiZWU0NDQ5YTAxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAL9vGp8BkytvH9NKEFRHgmo4QLTErxNggJAUmJJLZQ8OG11v ue0f6hFXzN1BcSPSu+2skMssxO+jjjuNoYyKNFRr85EqMToefLGKIg+Bt4mTWnu0 5T/RlX7EmGcGCbY5CFzLcM9WbRbUEFG8SgZN4Qq842kyDtEi1i8/3O2MGEW1lsRo TzTLkj4sImeOiIrtDjewYem9vSPK8RfEZOzqePiGNaBYXfZPb1TbdirUFH61stxn Yc7RkWjSmQePceoXtLxfMv/Ga3omGFDklobBV3RttaJNcgSo63lYgTtcqtKc4m1G 5Qb8IED/+KsA7oDYrP3bxm0SLEe/m2niDASNTN8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSR8J1cuART3J8o8vAWGxsamJVYMjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMGNhZjkxOGUtOGExMC00NjBiLTliMWUtOWIwYWYxOTE3NjY3LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAw2CADANBgkqhkiG9w0BAQsFAAOCAQEAgyxTTdQfuiztlaPs7BQmulINq0vJ K2UjUSPy6l+8wtIBgLtkbV/zHnwozdBXfS6GedwX6o11mViIKeVuV3zDI5oawvao nkQGeLkyHcgPaK/6kWMS+PmQYDj91TbWiyKoPAcowqMPPg1uq0kG83gCMuOeMiv+ vZ8+HfY09BKL4xGpRiqVU4MNGNQ+gfJS/zfYdPu7Tb9MWUm2E1gTZtm9J3yQ/SkT mbsdOldBuAvBdhPbxu0p7NKymf7Wa+ou+9uyDqsueONk9y47Whhyutca1ACEiKDC dhR8f3N/dUbFSe0w2JxeBS0KIS3gf6smltH4EIVQs/4E52oSpnFBdueSIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:27 2025 by rpki-client