This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17428170-47b5-40b1-8882-bb95915d3ed7.roa File: 17428170-47b5-40b1-8882-bb95915d3ed7.roa (raw, json) Hash identifier: yQmRv45DDoB3uvQSbZf/SrJwWWREjE7R/SGuNNI6Gtk= Subject key identifier: 1C:68:C6:90:69:B1:E2:DE:B0:4A:D2:6F:B2:44:F8:E1:D2:49:0B:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1191EB0F1EBDB4F889D3FD7BE9A2B16F8739C2C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17428170-47b5-40b1-8882-bb95915d3ed7.roa Signing time: Thu 27 Nov 2025 00:00:22 +0000 ROA not before: Thu 27 Nov 2025 00:00:22 +0000 ROA not after: Wed 25 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 66.109.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:91:eb:0f:1e:bd:b4:f8:89:d3:fd:7b:e9:a2:b1:6f:87:39:c2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 27 00:00:22 2025 GMT Not After : Feb 25 23:59:59 2026 GMT Subject: serialNumber=895e744c78d826d8ac5fd0f70ba62c07791422be03e3156894095ca42b28ea8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:a3:c9:9a:89:79:7d:48:61:7d:f4:bb:91: 55:aa:ed:90:db:a4:14:2c:37:2a:ad:36:60:e6:76: e5:4a:ef:52:13:56:a8:5c:89:90:2f:90:59:69:22: a8:1e:6b:9a:0b:b4:38:01:d1:ac:17:e0:1b:3e:31: 5e:c2:33:9c:72:f6:5f:25:fe:c8:2f:51:7e:ad:8e: 39:8e:b6:37:03:d5:88:71:2a:47:bd:f9:5c:6d:6e: 4a:3f:8e:93:c5:ce:3d:c3:8b:ab:b2:7d:d7:74:47: 0d:71:74:7d:af:28:0a:76:94:50:68:d5:da:e1:71: 46:d8:f2:55:cd:ef:8e:67:e0:57:50:91:59:f4:9d: 99:65:ca:da:7f:0e:64:2e:fe:50:e1:37:a9:6d:db: 1d:d3:89:8b:c4:c1:d7:0f:c9:90:21:4d:91:3f:87: ab:d0:9d:ed:13:d5:a2:ee:2a:c7:1b:43:a0:12:e6: 12:25:db:5b:a3:b4:d3:0d:79:f6:93:fa:2e:8e:1c: 66:b0:9c:60:be:d4:6f:c1:28:11:09:e8:17:df:f9: 17:73:47:e3:3a:a9:3d:ac:bc:a7:78:b0:5c:e6:d0: 5a:28:e5:1a:be:14:e6:ef:e1:bd:4a:66:05:22:25: 5f:de:f4:c2:af:dd:60:e7:80:4e:71:57:61:07:34: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:C6:90:69:B1:E2:DE:B0:4A:D2:6F:B2:44:F8:E1:D2:49:0B:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17428170-47b5-40b1-8882-bb95915d3ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.109.64.0/20 Signature Algorithm: sha256WithRSAEncryption 2f:00:1d:c4:99:42:fe:f2:76:25:ad:b3:ea:26:d8:1d:74:07: f9:f3:5a:06:f2:cb:26:9e:97:ec:6a:0a:a8:28:68:4f:bd:e2: 84:72:dd:c1:77:25:e7:2c:50:67:d6:4a:7e:8b:5e:58:90:e8: ef:f2:d0:83:16:55:cb:27:72:c0:8f:22:af:f0:52:74:4c:14: 0d:1f:97:bc:71:ab:66:9a:f5:1f:9f:75:b8:14:05:c9:c4:ab: 95:7f:fc:52:db:37:83:ae:d2:72:5d:45:72:08:29:6a:e4:fe: d0:5f:4b:2e:61:0d:31:0c:c3:0e:2c:eb:46:31:67:69:b3:06: dd:d6:f2:bd:62:33:98:f1:6a:9a:ef:27:7a:dc:ff:ef:d3:f4: 5e:83:b0:96:c1:ca:87:00:f8:7a:b4:23:2f:cb:ee:cd:f8:77: de:ab:6d:57:56:08:e9:da:75:07:8c:7a:cd:ab:38:7a:c4:39: 39:b9:bc:f3:7b:26:72:32:67:2d:15:5a:eb:fb:d1:33:12:64: 5b:5e:a9:e2:00:ea:04:53:37:21:be:2e:53:9f:dd:4f:03:f6: da:83:3d:9c:11:b8:2c:96:b2:e0:bb:8a:3a:4d:28:94:3e:11: b7:dd:8f:7e:dd:a5:d3:c3:6f:12:4a:b9:ea:3c:09:85:84:d0: ff:31:1e:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEZHrDx69tPiJ0/176aKxb4c5wsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI3MDAwMDIyWhcNMjYwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTVlNzQ0Yzc4ZDgyNmQ4YWM1ZmQwZjcwYmE2MmMwNzc5 MTQyMmJlMDNlMzE1Njg5NDA5NWNhNDJiMjhlYThjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClQKPJmol5fUhhffS7kVWq7ZDbpBQsNyqtNmDmduVK71IT VqhciZAvkFlpIqgea5oLtDgB0awX4Bs+MV7CM5xy9l8l/sgvUX6tjjmOtjcD1Yhx Kke9+Vxtbko/jpPFzj3Di6uyfdd0Rw1xdH2vKAp2lFBo1drhcUbY8lXN745n4FdQ kVn0nZllytp/DmQu/lDhN6lt2x3TiYvEwdcPyZAhTZE/h6vQne0T1aLuKscbQ6AS 5hIl21ujtNMNefaT+i6OHGawnGC+1G/BKBEJ6Bff+RdzR+M6qT2svKd4sFzm0Foo 5Rq+FObv4b1KZgUiJV/e9MKv3WDngE5xV2EHNPq1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHGjGkGmx4t6wStJvskT44dJJC24wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3NDI4MTcwLTQ3YjUtNDBiMS04ODgyLWJiOTU5MTVkM2VkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARCbUAwDQYJKoZIhvcNAQELBQADggEBAC8AHcSZQv7ydiWts+om2B10B/nz Wgbyyyael+xqCqgoaE+94oRy3cF3JecsUGfWSn6LXliQ6O/y0IMWVcsncsCPIq/w UnRMFA0fl7xxq2aa9R+fdbgUBcnEq5V//FLbN4Ou0nJdRXIIKWrk/tBfSy5hDTEM ww4s60YxZ2mzBt3W8r1iM5jxaprvJ3rc/+/T9F6DsJbByocA+Hq0Iy/L7s34d96r bVdWCOnadQeMes2rOHrEOTm5vPN7JnIyZy0VWuv70TMSZFteqeIA6gRTNyG+LlOf 3U8D9tqDPZwRuCyWsuC7ijpNKJQ+Ebfdj37dpdPDbxJKueo8CYWE0P8xHn4= -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:58 2025 by rpki-client