This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18951ac6-7bbb-484b-a1b7-f792619509f6.roa File: 18951ac6-7bbb-484b-a1b7-f792619509f6.roa (raw, json) Hash identifier: tS4/C6jdFB/imqVBkRoAlusaiOPTbst19saS39A/CVk= Subject key identifier: 6E:1B:32:19:0B:15:1E:60:13:DE:2F:86:9F:19:79:A3:2D:B1:5C:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11BC6CDACBD3D5DAA7BF1246471A4E618512B140 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18951ac6-7bbb-484b-a1b7-f792619509f6.roa Signing time: Tue 25 Nov 2025 00:50:05 +0000 ROA not before: Tue 25 Nov 2025 00:50:05 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 63.246.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bc:6c:da:cb:d3:d5:da:a7:bf:12:46:47:1a:4e:61:85:12:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:50:05 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=1c9ec3ee6690588a56dc48ae46864d9f59d92265ddd664cd416a7a27af4186dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:d7:1c:14:d7:40:b9:5f:90:d8:19:61:83: 18:a4:b3:90:85:22:a3:d8:ce:23:09:5e:81:ea:85: e9:a8:4f:ef:64:d2:4c:b6:a3:0f:0d:b3:25:d7:d7: 38:f1:58:23:1d:18:2c:1c:0b:85:98:57:7a:54:2d: 2a:a7:cc:59:cd:2b:c1:2c:53:a9:07:2c:95:c2:fe: 3c:ad:f6:08:56:08:5a:95:65:04:aa:9a:18:a8:57: ef:21:77:2c:8e:57:bc:42:60:22:7e:cf:dc:a8:45: 0a:60:95:9a:66:df:bd:2b:81:48:8e:96:0b:d7:71: 69:9a:06:b4:b3:35:2a:d8:c0:b8:19:e7:ab:e4:ab: 97:7e:7c:d0:1b:3f:9d:0f:f1:54:41:a6:a7:87:80: b2:be:11:e6:5c:c3:2e:b1:f0:d7:0e:46:3a:13:92: 1b:f6:dc:e0:58:42:6c:13:38:3c:2e:1b:48:de:aa: 5b:69:f9:4e:1a:01:f2:17:70:ca:70:87:a8:e6:48: 37:ca:cd:8e:76:c8:2b:40:40:d9:a1:1d:98:ca:a7: 1c:94:2f:f0:ee:06:26:cb:51:d5:62:ae:3f:d9:72: 24:fc:bc:7f:59:58:76:f3:3a:61:51:8c:0c:58:40: 08:81:23:36:9b:16:b6:9e:56:8a:4f:60:18:81:47: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1B:32:19:0B:15:1E:60:13:DE:2F:86:9F:19:79:A3:2D:B1:5C:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18951ac6-7bbb-484b-a1b7-f792619509f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.246.124.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:5c:cb:8f:70:e1:d3:1b:1f:1c:25:56:bf:e1:10:5a:b2:8a: 89:16:2b:7d:7a:f4:7c:e5:1f:89:c5:0e:85:09:50:cb:a9:93: c1:ca:92:0e:7e:ac:5b:81:96:3e:f4:fc:2a:e2:38:e5:c8:95: 7d:d4:37:1e:05:ad:88:25:12:a6:92:2d:49:b5:20:26:70:52: 8e:6a:c8:71:97:f3:62:46:c0:97:83:4b:28:2b:f5:07:9a:27: af:24:43:e1:c6:99:63:bc:9b:7b:45:9f:7c:cf:ed:98:c3:b4: 61:df:75:6d:00:3e:9b:63:53:1d:7e:30:af:a5:70:dd:4f:70: fb:d1:82:ef:1e:68:f6:ac:71:46:fa:c5:81:11:50:e9:4b:f4: 76:40:9c:fe:41:a3:48:ee:f6:dd:75:c0:0f:cd:9e:4e:0b:6b: a9:8a:94:5f:3c:35:ee:c4:e3:b1:c3:7a:7e:27:35:c0:4f:9b: 21:27:d2:92:8c:21:a8:54:5e:6f:c7:d1:93:0b:45:44:40:f7: 32:ed:cf:14:ae:c9:eb:3f:1b:24:02:64:75:62:c4:59:5c:47: f6:57:03:43:17:b3:eb:8d:f0:5a:75:26:a1:0d:82:ef:88:47: 54:0f:0e:32:e8:62:58:b9:00:8a:7d:8e:cb:96:ec:8a:b3:2a: d3:65:08:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEbxs2svT1dqnvxJGRxpOYYUSsUAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDA1MDA1WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzllYzNlZTY2OTA1ODhhNTZkYzQ4YWU0Njg2NGQ5ZjU5 ZDkyMjY1ZGRkNjY0Y2Q0MTZhN2EyN2FmNDE4NmRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/pNccFNdAuV+Q2Blhgxiks5CFIqPYziMJXoHqhemoT+9k 0ky2ow8NsyXX1zjxWCMdGCwcC4WYV3pULSqnzFnNK8EsU6kHLJXC/jyt9ghWCFqV ZQSqmhioV+8hdyyOV7xCYCJ+z9yoRQpglZpm370rgUiOlgvXcWmaBrSzNSrYwLgZ 56vkq5d+fNAbP50P8VRBpqeHgLK+EeZcwy6x8NcORjoTkhv23OBYQmwTODwuG0je qltp+U4aAfIXcMpwh6jmSDfKzY52yCtAQNmhHZjKpxyUL/DuBibLUdVirj/ZciT8 vH9ZWHbzOmFRjAxYQAiBIzabFraeVopPYBiBR/7rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbhsyGQsVHmAT3i+Gnxl5oy2xXIAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4OTUxYWM2LTdiYmItNDg0Yi1hMWI3LWY3OTI2MTk1MDlmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI/9nwwDQYJKoZIhvcNAQELBQADggEBAJ9cy49w4dMbHxwlVr/hEFqyiokW K3169HzlH4nFDoUJUMupk8HKkg5+rFuBlj70/CriOOXIlX3UNx4FrYglEqaSLUm1 ICZwUo5qyHGX82JGwJeDSygr9QeaJ68kQ+HGmWO8m3tFn3zP7ZjDtGHfdW0APptj Ux1+MK+lcN1PcPvRgu8eaPascUb6xYERUOlL9HZAnP5Bo0ju9t11wA/Nnk4La6mK lF88Ne7E47HDen4nNcBPmyEn0pKMIahUXm/H0ZMLRURA9zLtzxSuyes/GyQCZHVi xFlcR/ZXA0MXs+uN8Fp1JqENgu+IR1QPDjLoYli5AIp9jsuW7IqzKtNlCOw= -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:12 2025 by rpki-client