This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d9b1ca-9364-4ed2-997e-dd893686a86b.roa File: 28d9b1ca-9364-4ed2-997e-dd893686a86b.roa (raw, json) Hash identifier: GpPeWl1ZL/XqSxXWi0gJHZZE2WRfgqdUhQe5fXbhC/g= Subject key identifier: 4F:B6:E5:EE:A0:36:B0:06:5D:B7:AC:71:2B:20:80:BE:31:EA:02:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 280E2F76F3C3F70B13D43DFF662966A27AED5A03 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d9b1ca-9364-4ed2-997e-dd893686a86b.roa Signing time: Sat 06 Dec 2025 02:00:51 +0000 ROA not before: Sat 06 Dec 2025 02:00:51 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0e:2f:76:f3:c3:f7:0b:13:d4:3d:ff:66:29:66:a2:7a:ed:5a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=42fae989d6910ef79a6aa98c84914ccaec8403c6c79e75a6000ea0d2e21c68ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bd:bf:89:6a:13:ba:d9:99:37:f5:78:22:dc: fe:ce:e4:0b:fc:cc:91:5c:76:c5:90:07:78:53:b5: f7:5a:5b:a4:2a:de:57:48:54:ad:15:c0:54:05:bd: 3a:26:da:63:39:3b:45:22:21:cf:e5:f6:73:21:2e: 89:f6:0b:8c:d8:f7:a9:64:19:5e:1d:a1:bb:65:f6: 58:28:bb:01:9b:41:ed:4f:88:2e:36:30:78:eb:3e: 13:51:8e:07:ef:88:2a:d1:bb:97:d3:59:ff:73:8d: 07:0d:7d:2b:84:dc:f6:45:61:c7:f0:d3:63:2d:d2: 7d:d9:fe:cf:e4:85:8b:a7:70:aa:ac:97:e0:e2:72: f0:25:08:0e:81:8e:47:62:45:3b:d3:be:ef:40:67: 96:85:75:8b:11:f6:97:07:87:33:f3:16:6d:12:7e: 0c:e5:f6:dd:f4:ee:de:b4:78:68:48:a8:6d:c9:f4: 26:cb:bc:a2:1b:e7:60:68:a4:2e:01:ad:9a:66:4c: 68:6e:42:63:1f:e1:de:b1:0f:46:0d:fd:5a:03:1a: 6a:50:61:31:4e:03:c0:d6:71:2d:a3:75:46:90:c4: ce:3e:0f:92:b2:2d:14:90:22:d0:3a:83:4d:d2:ad: 8b:44:d0:f6:cd:38:67:8f:6d:b2:a8:c1:45:e3:c2: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B6:E5:EE:A0:36:B0:06:5D:B7:AC:71:2B:20:80:BE:31:EA:02:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d9b1ca-9364-4ed2-997e-dd893686a86b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.187.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:85:f2:bf:e2:05:72:88:6f:74:f4:d3:cf:ad:f3:81:74:81: 93:53:a1:df:14:a1:31:8e:61:f8:d1:5e:24:23:0c:07:8c:c6: b0:83:f0:e8:b9:e4:26:f7:c7:90:d5:5e:9b:b8:de:33:8a:d5: 84:3e:80:7d:81:a7:57:4f:17:3f:f4:85:22:15:70:49:b5:4e: e0:77:2a:cf:2a:bd:77:f1:4f:27:94:aa:dc:9e:8a:a6:77:52: 36:0e:d1:91:3b:7a:a3:65:62:a0:fe:44:fa:c2:24:aa:34:66: f7:04:d5:40:4b:91:51:e4:bb:e9:a4:dd:e2:bc:f2:c7:5d:e4: f2:7a:1e:50:f7:c3:b3:07:e0:b5:d4:70:55:1f:35:8b:4a:0e: 56:08:28:bb:6d:50:1b:34:f3:13:9f:c1:06:cd:27:21:66:c1: 60:3e:a0:89:25:17:ee:79:2e:bf:9d:37:a7:ac:10:24:74:64: 2e:9b:65:d5:fb:04:6e:69:ec:63:6d:88:b1:cc:cc:2b:e5:1c: 88:c8:d2:53:d0:8b:66:2b:36:90:51:36:f2:00:08:32:6e:69: 78:a5:64:f0:48:97:8b:4d:d3:32:fb:97:5f:f2:9d:b6:82:16: cc:25:ad:42:b3:25:20:2c:c5:a4:d9:a4:c0:70:ed:fd:27:67: 00:f1:9c:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKA4vdvPD9wsT1D3/ZilmonrtWgMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIwMDUxWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmZhZTk4OWQ2OTEwZWY3OWE2YWE5OGM4NDkxNGNjYWVj ODQwM2M2Yzc5ZTc1YTYwMDBlYTBkMmUyMWM2OGVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDivb+JahO62Zk39Xgi3P7O5Av8zJFcdsWQB3hTtfdaW6Qq 3ldIVK0VwFQFvTom2mM5O0UiIc/l9nMhLon2C4zY96lkGV4dobtl9lgouwGbQe1P iC42MHjrPhNRjgfviCrRu5fTWf9zjQcNfSuE3PZFYcfw02Mt0n3Z/s/khYuncKqs l+DicvAlCA6BjkdiRTvTvu9AZ5aFdYsR9pcHhzPzFm0Sfgzl9t307t60eGhIqG3J 9CbLvKIb52BopC4BrZpmTGhuQmMf4d6xD0YN/VoDGmpQYTFOA8DWcS2jdUaQxM4+ D5KyLRSQItA6g03SrYtE0PbNOGePbbKowUXjwrFxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT7bl7qA2sAZdt6xxKyCAvjHqAjUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4ZDliMWNhLTkzNjQtNGVkMi05OTdlLWRkODkzNjg2YTg2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOLswDQYJKoZIhvcNAQELBQADggEBAC2F8r/iBXKIb3T008+t84F0gZNT od8UoTGOYfjRXiQjDAeMxrCD8Oi55Cb3x5DVXpu43jOK1YQ+gH2Bp1dPFz/0hSIV cEm1TuB3Ks8qvXfxTyeUqtyeiqZ3UjYO0ZE7eqNlYqD+RPrCJKo0ZvcE1UBLkVHk u+mk3eK88sdd5PJ6HlD3w7MH4LXUcFUfNYtKDlYIKLttUBs08xOfwQbNJyFmwWA+ oIklF+55Lr+dN6esECR0ZC6bZdX7BG5p7GNtiLHMzCvlHIjI0lPQi2YrNpBRNvIA CDJuaXilZPBIl4tN0zL7l1/ynbaCFswlrUKzJSAsxaTZpMBw7f0nZwDxnHk= -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:08 2025 by rpki-client