This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20f17517-4992-480d-9d79-b11ee8e9ff75.roa File: 20f17517-4992-480d-9d79-b11ee8e9ff75.roa (raw, json) Hash identifier: cVc/U3ztmAmXFYNsA3j7q/VDCr3V3rCJzRDJ2BKtoOM= Subject key identifier: D1:B8:FF:D9:B8:09:30:0A:C1:CB:C2:1F:DF:E4:84:53:60:45:CE:BE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A56236F51E7E291E54D65F4327C756C570C7BD1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20f17517-4992-480d-9d79-b11ee8e9ff75.roa Signing time: Sat 06 Dec 2025 02:10:31 +0000 ROA not before: Sat 06 Dec 2025 02:10:31 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.236.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:56:23:6f:51:e7:e2:91:e5:4d:65:f4:32:7c:75:6c:57:0c:7b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:10:31 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=23769da956aa35ad2fe497691fc6805cbe83d2d2d288733a454775e12605d58d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:8a:68:c5:e4:56:d3:0f:a8:97:70:f0:10: 94:c2:2b:d2:07:4f:dc:4d:42:4e:ba:d2:a6:e5:ee: e9:00:10:31:43:16:8a:63:04:c3:50:f3:80:0c:c8: 3a:70:47:2b:20:80:29:b7:b3:48:0b:69:57:0e:25: 6c:0d:71:75:e9:16:16:dd:5c:37:f9:cf:7b:6a:fb: 7b:e3:c0:bb:08:8d:66:2b:d2:31:65:ee:cd:cf:b2: 2c:36:b7:ac:e8:ba:d6:ed:06:9a:19:90:2d:6d:81: cf:0b:1a:24:7a:58:db:0e:fc:64:3c:62:fa:20:0d: 75:44:3a:b6:bd:f4:b7:22:5f:6a:b1:35:18:76:33: 0e:19:c3:b6:a2:00:a8:9c:d8:2d:51:7a:c9:1a:99: 47:f6:d4:01:45:80:c0:a7:21:f0:cd:c2:d8:d7:a2: f5:dd:92:fc:a1:51:11:72:de:7d:70:20:46:9c:9c: 15:f2:0f:a9:65:af:6f:66:5a:f3:62:23:d6:9f:55: ce:9a:dd:98:8c:56:de:d4:ca:0a:bf:a4:50:0b:ed: b3:c6:e4:f9:e9:9b:61:d5:22:40:2a:2f:af:e0:db: a3:f8:52:32:5c:ba:cb:3a:ab:0c:52:27:a5:da:5d: 12:a3:51:8b:bf:2e:7d:8a:73:5c:9f:90:87:80:1e: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B8:FF:D9:B8:09:30:0A:C1:CB:C2:1F:DF:E4:84:53:60:45:CE:BE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20f17517-4992-480d-9d79-b11ee8e9ff75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.136.0/21 Signature Algorithm: sha256WithRSAEncryption a8:ff:7e:83:da:b5:54:37:e8:da:d9:f8:f3:c7:01:6a:6c:6c: 98:ec:23:9a:69:ef:3f:33:e6:b8:88:fd:ed:fa:e2:70:03:f4: 50:a4:39:72:f9:68:d6:7d:aa:93:48:0c:be:4c:55:39:21:68: b0:f3:76:2e:2b:ff:86:d4:6f:ab:ea:9a:0b:1e:ce:55:1c:a6: 95:9b:3a:ec:a3:1e:a3:f8:ee:d2:ab:25:cb:1f:a0:e7:b1:ce: 35:e7:cf:7d:0f:8d:a1:dc:9a:f1:ae:7c:91:0e:cc:d3:c4:2b: 05:d1:d0:57:03:7f:de:a4:4c:14:78:b9:f3:8a:e9:08:4d:5a: 9f:df:2f:a7:74:b0:a5:8a:31:53:f2:1a:22:b0:e7:57:c0:eb: d3:b0:83:29:f6:76:6a:a4:af:42:89:44:85:6a:58:db:77:30: 1a:76:0f:1a:a2:af:2e:b7:fc:c3:eb:0d:50:e4:81:a6:75:0e: 73:05:d4:bc:5d:43:20:42:4b:34:da:a2:19:cf:54:bb:61:64: d0:5d:e8:53:20:2b:44:f4:00:f3:08:62:94:3a:41:70:fc:7c: 9e:b7:11:28:de:57:42:6a:e8:ad:50:3a:98:36:ed:c5:97:81: e7:a2:70:b0:7d:4a:9d:9e:a2:61:71:e9:25:c2:da:1e:b1:a1: c3:e7:83:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKlYjb1Hn4pHlTWX0Mnx1bFcMe9EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIxMDMxWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzc2OWRhOTU2YWEzNWFkMmZlNDk3NjkxZmM2ODA1Y2Jl ODNkMmQyZDI4ODczM2E0NTQ3NzVlMTI2MDVkNThkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwiopoxeRW0w+ol3DwEJTCK9IHT9xNQk660qbl7ukAEDFD FopjBMNQ84AMyDpwRysggCm3s0gLaVcOJWwNcXXpFhbdXDf5z3tq+3vjwLsIjWYr 0jFl7s3Psiw2t6zoutbtBpoZkC1tgc8LGiR6WNsO/GQ8YvogDXVEOra99LciX2qx NRh2Mw4Zw7aiAKic2C1ReskamUf21AFFgMCnIfDNwtjXovXdkvyhURFy3n1wIEac nBXyD6llr29mWvNiI9afVc6a3ZiMVt7Uygq/pFAL7bPG5Pnpm2HVIkAqL6/g26P4 UjJcuss6qwxSJ6XaXRKjUYu/Ln2Kc1yfkIeAHiktAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0bj/2bgJMArBy8If3+SEU2BFzr4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwZjE3NTE3LTQ5OTItNDgwZC05ZDc5LWIxMWVlOGU5ZmY3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPM7IgwDQYJKoZIhvcNAQELBQADggEBAKj/foPatVQ36NrZ+PPHAWpsbJjs I5pp7z8z5riI/e364nAD9FCkOXL5aNZ9qpNIDL5MVTkhaLDzdi4r/4bUb6vqmgse zlUcppWbOuyjHqP47tKrJcsfoOexzjXnz30PjaHcmvGufJEOzNPEKwXR0FcDf96k TBR4ufOK6QhNWp/fL6d0sKWKMVPyGiKw51fA69Owgyn2dmqkr0KJRIVqWNt3MBp2 Dxqiry63/MPrDVDkgaZ1DnMF1LxdQyBCSzTaohnPVLthZNBd6FMgK0T0APMIYpQ6 QXD8fJ63ESjeV0Jq6K1QOpg27cWXgeeicLB9Sp2eomFx6SXC2h6xocPng00= -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:45 2025 by rpki-client