This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa File: 2bd59750-5d84-4c08-a088-8ea8711b48d8.roa (raw, json) Hash identifier: sn0XfgsCUyiq0+1eofr4IN4ml5RswWC7nzM7U3NZAjM= Subject key identifier: 00:5D:9C:78:F1:81:B7:CA:44:05:F1:2A:74:22:D8:8C:5B:05:5C:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 626FB78D492EE2BB6E0402C230E4E4FC2F803B9F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa Signing time: Thu 27 Nov 2025 00:20:07 +0000 ROA not before: Thu 27 Nov 2025 00:20:07 +0000 ROA not after: Wed 25 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6f:b7:8d:49:2e:e2:bb:6e:04:02:c2:30:e4:e4:fc:2f:80:3b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 27 00:20:07 2025 GMT Not After : Feb 25 23:59:59 2026 GMT Subject: serialNumber=83fafb5bccdb6f5afe8b20ff4f46f98ea45717438a279093d0c33c43034f7b01, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:f8:25:18:14:1e:21:ca:8d:d6:02:21:30: 4e:4c:ca:01:3e:81:5f:4e:0d:47:b4:4b:a2:77:a0: b8:b0:5c:30:9b:83:ad:5e:b6:f2:d0:e3:bc:ac:21: dc:73:d3:97:1e:1f:e6:75:6f:ae:7c:2b:8b:bb:02: c6:09:06:99:cf:0e:34:4d:d1:6a:c6:a7:6e:05:0b: a5:f1:d0:fa:69:fb:f3:f7:6e:22:a0:48:6e:98:19: b3:79:87:9a:1c:04:84:c2:52:67:bd:5f:11:4c:48: 09:34:91:c4:86:05:11:b2:04:e7:b6:a0:e3:24:48: ea:70:71:f2:08:5d:9b:c7:bd:d2:80:30:10:c5:eb: ac:ac:be:fe:f1:ce:5c:f6:67:3c:42:52:5d:00:07: 4a:31:80:fa:7d:3e:c5:6b:35:17:5b:da:e8:49:aa: e3:38:3b:21:ef:38:73:ff:e3:f8:9c:00:e6:15:07: 36:d6:fe:f1:21:95:82:a9:83:1c:96:8a:9d:60:c5: 30:26:5c:b0:30:ac:31:0d:ab:ac:d3:ad:4f:1a:25: 54:dc:c0:d4:53:25:21:8f:21:da:45:6c:83:ad:1e: 04:e5:2f:d7:a4:c1:86:1c:90:4b:a6:11:0c:fb:f0: bd:f6:3b:49:aa:e6:63:e0:04:f5:36:9f:ae:94:7f: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5D:9C:78:F1:81:B7:CA:44:05:F1:2A:74:22:D8:8C:5B:05:5C:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bd59750-5d84-4c08-a088-8ea8711b48d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.164.0/22 Signature Algorithm: sha256WithRSAEncryption d5:da:75:77:79:0b:cc:4a:34:e2:ee:53:55:55:c7:46:d7:15: 7e:b7:3b:34:df:7a:7f:93:25:40:86:98:7a:a7:9a:e3:f4:51: 14:1b:bb:0d:41:c1:83:ff:3c:e4:e0:59:df:a8:94:1d:d8:dc: 59:dd:0c:45:84:2b:a7:cc:25:c1:7c:65:82:2a:01:73:bf:5c: 86:2f:6c:66:8b:d6:69:ce:2d:6d:0a:16:5c:a0:95:01:b6:91: 94:ab:ef:17:98:b0:3e:3b:65:12:81:00:07:05:8a:8d:5b:2e: 6f:f6:ff:d2:a5:c0:8b:34:65:79:2c:e0:52:5f:55:12:da:40: 92:cb:1a:31:ba:60:e4:c1:6d:d8:83:77:4c:4d:7a:59:f0:25: 59:64:33:82:d1:7a:38:14:2b:8b:78:08:63:9e:c7:f6:51:b3: f5:b0:11:e3:dd:a6:23:3d:fb:3c:c5:0d:e0:25:8b:cd:44:04: f0:74:8a:d9:cf:57:fc:f6:3f:27:52:c5:94:28:2c:11:43:b6: 9b:61:5b:40:45:44:e8:50:7d:14:75:e8:f4:d5:a9:91:2c:aa: 07:b4:b7:45:fe:77:9e:2e:ac:af:6d:25:ad:d6:31:49:6a:0a: 86:f5:56:bf:e4:35:2f:a1:b3:cc:75:cd:8c:ed:2f:fa:70:d0: f1:15:6b:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYm+3jUku4rtuBALCMOTk/C+AO58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI3MDAyMDA3WhcNMjYwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2ZhZmI1YmNjZGI2ZjVhZmU4YjIwZmY0ZjQ2Zjk4ZWE0 NTcxNzQzOGEyNzkwOTNkMGMzM2M0MzAzNGY3YjAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3sPglGBQeIcqN1gIhME5MygE+gV9ODUe0S6J3oLiwXDCb g61etvLQ47ysIdxz05ceH+Z1b658K4u7AsYJBpnPDjRN0WrGp24FC6Xx0Ppp+/P3 biKgSG6YGbN5h5ocBITCUme9XxFMSAk0kcSGBRGyBOe2oOMkSOpwcfIIXZvHvdKA MBDF66ysvv7xzlz2ZzxCUl0AB0oxgPp9PsVrNRdb2uhJquM4OyHvOHP/4/icAOYV BzbW/vEhlYKpgxyWip1gxTAmXLAwrDENq6zTrU8aJVTcwNRTJSGPIdpFbIOtHgTl L9ekwYYckEumEQz78L32O0mq5mPgBPU2n66Uf8m5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAF2cePGBt8pEBfEqdCLYjFsFXOkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZDU5NzUwLTVkODQtNGMwOC1hMDg4LThlYTg3MTFiNDhkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJjl6QwDQYJKoZIhvcNAQELBQADggEBANXadXd5C8xKNOLuU1VVx0bXFX63 OzTfen+TJUCGmHqnmuP0URQbuw1BwYP/POTgWd+olB3Y3FndDEWEK6fMJcF8ZYIq AXO/XIYvbGaL1mnOLW0KFlyglQG2kZSr7xeYsD47ZRKBAAcFio1bLm/2/9KlwIs0 ZXks4FJfVRLaQJLLGjG6YOTBbdiDd0xNelnwJVlkM4LRejgUK4t4CGOex/ZRs/Ww EePdpiM9+zzFDeAli81EBPB0itnPV/z2PydSxZQoLBFDtpthW0BFROhQfRR16PTV qZEsqge0t0X+d54urK9tJa3WMUlqCob1Vr/kNS+hs8x1zYztL/pw0PEVa5s= -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:19 2025 by rpki-client