This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c001ad-e3cd-4c29-8dde-4c620faee346.roa File: 33c001ad-e3cd-4c29-8dde-4c620faee346.roa (raw, json) Hash identifier: 709cqgEqkyDXcShbahYllxYKfsttf+kBbRAk7iFp52s= Subject key identifier: CA:75:DC:5E:A7:B9:A8:A9:2C:43:DF:32:4F:B1:0B:5C:07:C4:23:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 631DFDB8CDEE7800A7A1498FDB0C2120EF030363 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c001ad-e3cd-4c29-8dde-4c620faee346.roa Signing time: Tue 25 Nov 2025 00:31:14 +0000 ROA not before: Tue 25 Nov 2025 00:31:14 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 5.174.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1d:fd:b8:cd:ee:78:00:a7:a1:49:8f:db:0c:21:20:ef:03:03:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:31:14 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=4ad3a8cf26ce8297160d864834a6e412cd5c04bde83a0c75a719f6dd3c419f82, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:81:0a:b3:fb:b6:80:a8:7f:43:f1:40:3f: 74:9a:24:03:3f:07:d4:fc:ae:96:41:ac:00:3b:30: 59:0b:cf:26:f0:09:e8:d7:c5:36:c0:ab:94:3a:c4: d5:c9:01:c6:07:78:77:23:7d:fe:3e:05:27:49:31: 6b:3d:f4:8a:e5:d0:2b:f3:5b:42:24:ce:e9:b7:4a: c8:8e:67:74:24:15:1a:39:d1:92:6d:f9:bb:9d:19: fd:c5:19:2c:72:e4:a6:bc:2c:4a:ca:36:9e:41:e7: f8:07:34:87:61:f4:ff:ab:ad:0a:2a:43:8b:30:ee: bf:fd:02:70:29:12:0f:cb:15:0e:9b:dd:71:24:8b: fe:f0:50:76:73:7a:18:5f:73:4d:48:a3:00:7a:41: db:0e:72:3d:3d:6e:25:72:bb:33:9f:24:67:44:f3: bb:36:06:b5:a5:71:48:37:d5:95:23:91:47:e5:a6: 84:11:a6:c5:d4:cd:c9:cc:b9:c2:11:30:b9:4f:ce: eb:d0:56:c3:06:23:26:6f:0b:32:5e:26:6d:6e:b0: f6:96:47:c2:e2:e8:7c:de:53:cd:6a:7c:ad:16:64: ec:3b:b2:87:0a:b7:32:ef:c7:7f:bf:f4:ff:7e:59: 3e:e7:18:50:55:75:15:a4:2a:ab:f4:1c:e7:89:24: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:75:DC:5E:A7:B9:A8:A9:2C:43:DF:32:4F:B1:0B:5C:07:C4:23:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c001ad-e3cd-4c29-8dde-4c620faee346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.174.160.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:05:df:64:0c:51:c7:73:ab:a4:c8:1d:5a:d8:5a:a3:67:16: 26:a7:e4:30:a0:2d:8c:06:f9:20:7e:3a:0b:ab:b2:57:ee:35: 47:4d:ac:06:80:52:70:dc:80:d7:dc:99:48:c9:97:ef:e1:53: ad:77:b9:0f:f3:44:20:fa:60:83:ce:ed:18:cf:64:4d:d2:63: a9:33:2a:10:66:46:16:2d:ab:ed:d1:87:61:b0:4e:e7:bd:4d: 43:a2:39:16:3b:37:53:c3:ab:1e:78:b7:9b:bb:18:15:9d:ea: 4f:49:8d:71:77:f2:86:34:e6:4d:27:a3:4d:46:49:15:d7:c8: 0b:ca:5e:70:57:3e:29:42:ae:d6:fc:07:c2:18:ed:23:bc:04: 99:8c:87:c0:d7:c3:69:12:9b:05:40:35:69:6c:ce:3e:a7:d7: 23:e8:c8:91:99:82:6a:a9:ce:b4:48:7b:e4:f5:cb:17:cd:8f: 1a:c4:36:7b:b4:35:e2:f2:8b:0d:f3:4c:2a:88:43:8d:34:26: 3f:e3:1e:7f:5b:7f:e2:cb:43:8c:ed:37:94:65:a1:f1:c4:2b: f6:b8:76:86:5b:dd:1f:97:6d:22:f4:86:d7:23:8c:89:8b:90: 5d:1f:ea:38:d0:69:d1:2a:e0:39:91:ce:14:fa:16:0d:08:41: 91:39:7f:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYx39uM3ueACnoUmP2wwhIO8DA2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDAzMTE0WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWQzYThjZjI2Y2U4Mjk3MTYwZDg2NDgzNGE2ZTQxMmNk NWMwNGJkZTgzYTBjNzVhNzE5ZjZkZDNjNDE5ZjgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxZoEKs/u2gKh/Q/FAP3SaJAM/B9T8rpZBrAA7MFkLzybw CejXxTbAq5Q6xNXJAcYHeHcjff4+BSdJMWs99Irl0CvzW0Ikzum3SsiOZ3QkFRo5 0ZJt+budGf3FGSxy5Ka8LErKNp5B5/gHNIdh9P+rrQoqQ4sw7r/9AnApEg/LFQ6b 3XEki/7wUHZzehhfc01IowB6QdsOcj09biVyuzOfJGdE87s2BrWlcUg31ZUjkUfl poQRpsXUzcnMucIRMLlPzuvQVsMGIyZvCzJeJm1usPaWR8Li6HzeU81qfK0WZOw7 socKtzLvx3+/9P9+WT7nGFBVdRWkKqv0HOeJJE73AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUynXcXqe5qKksQ98yT7ELXAfEIyswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzYzAwMWFkLWUzY2QtNGMyOS04ZGRlLTRjNjIwZmFlZTM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMFrqAwDQYJKoZIhvcNAQELBQADggEBAAsF32QMUcdzq6TIHVrYWqNnFian 5DCgLYwG+SB+OgurslfuNUdNrAaAUnDcgNfcmUjJl+/hU613uQ/zRCD6YIPO7RjP ZE3SY6kzKhBmRhYtq+3Rh2GwTue9TUOiORY7N1PDqx54t5u7GBWd6k9JjXF38oY0 5k0no01GSRXXyAvKXnBXPilCrtb8B8IY7SO8BJmMh8DXw2kSmwVANWlszj6n1yPo yJGZgmqpzrRIe+T1yxfNjxrENnu0NeLyiw3zTCqIQ400Jj/jHn9bf+LLQ4ztN5Rl ofHEK/a4doZb3R+XbSL0htcjjImLkF0f6jjQadEq4DmRzhT6Fg0IQZE5fxE= -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:24 2025 by rpki-client