This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c14701-b1a8-4d3d-af67-4746f890a015.roa File: 34c14701-b1a8-4d3d-af67-4746f890a015.roa (raw, json) Hash identifier: mzgOuyt0XWcqobje+ri/Y2ooPx9lZnyztRIX3zuEIS4= Subject key identifier: DC:41:27:93:33:B4:FC:95:91:EA:5B:E5:1E:14:3C:54:DB:A7:7C:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B73541BF4D798B5A3BFC061A5AC1BAB0C6CC5CF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c14701-b1a8-4d3d-af67-4746f890a015.roa Signing time: Wed 26 Nov 2025 00:51:27 +0000 ROA not before: Wed 26 Nov 2025 00:51:27 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:73:54:1b:f4:d7:98:b5:a3:bf:c0:61:a5:ac:1b:ab:0c:6c:c5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 26 00:51:27 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=8edf2bc33c62925e92cbb770b1be04b64c8b78d01347d8810a4970fdaa86e785, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:27:30:07:18:af:30:80:69:a6:01:bc:79: 32:a2:0d:e2:d7:e0:22:73:e4:7e:b6:cb:a6:20:90: a4:69:0c:90:42:12:a7:5c:db:0a:31:ee:99:51:ce: 4f:b5:ed:35:1b:45:06:ee:4c:03:28:1c:94:c5:61: 10:4c:60:c4:5f:c5:09:fc:20:62:ab:5c:c7:77:ab: 2e:7f:39:47:83:c6:97:fb:45:06:b7:15:fb:21:a9: 0b:58:4c:07:33:8d:73:b4:9c:1f:04:5c:df:e9:50: cf:a5:54:84:5f:36:57:8b:18:98:42:c4:c9:81:ef: ce:57:52:7e:c4:02:98:b2:42:94:89:61:e4:32:07: 97:74:81:1e:f7:c8:13:37:79:3f:84:66:a3:b8:89: 9e:88:2b:44:83:4d:c0:91:e7:5b:c3:d7:49:df:37: af:20:0a:cf:a1:54:87:ef:39:bc:6c:58:15:71:8c: 31:cb:da:7f:04:c3:f9:62:df:60:b8:c6:50:52:95: ce:06:a5:8a:01:ea:e4:a2:7b:28:df:85:e7:d9:02: b5:b9:4a:37:31:24:94:d5:1b:1c:e2:72:33:e4:a9: ea:f4:7a:6f:c9:30:e7:51:13:51:ae:8f:e3:ba:38: ab:58:a2:41:da:a1:3e:4d:f0:bf:67:ca:ab:ea:c7: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:41:27:93:33:B4:FC:95:91:EA:5B:E5:1E:14:3C:54:DB:A7:7C:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34c14701-b1a8-4d3d-af67-4746f890a015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.134.0/23 Signature Algorithm: sha256WithRSAEncryption c3:b7:73:8d:2e:0c:00:35:40:67:21:b3:d3:53:26:4d:fc:fa: 04:51:2c:12:e9:5f:bc:cb:ea:94:39:25:71:6b:ac:b7:db:01: d6:bf:4e:18:23:d1:02:68:7a:a7:e1:1b:05:29:b2:f3:35:95: 37:f3:44:e3:49:ed:60:10:f3:b3:81:08:aa:5c:4c:2e:fb:ea: 30:71:1f:3c:c0:ef:9c:af:5e:9e:02:a9:48:ae:ee:69:ab:46: e3:9b:1d:71:85:5a:78:c1:9d:cc:b1:b2:e1:bd:3d:8b:b8:c9: 17:a5:00:47:34:c5:11:a3:e8:1a:e9:a1:ce:0c:05:9a:5c:89: c5:82:2a:9f:6d:10:a1:e8:d5:62:b9:0e:38:cf:f6:31:9c:cc: a5:d1:3e:08:de:e8:0f:fc:98:1c:1a:ab:cf:b8:fa:e5:65:82: 55:7a:97:d7:68:cf:ca:97:65:65:e8:a2:69:ef:5c:a9:85:a2: fd:77:14:3c:63:89:b5:78:12:a3:79:2f:67:69:09:73:22:cd: 4b:af:52:ce:fe:f3:86:40:86:23:50:8b:e2:c0:99:c3:0a:c4: 09:57:ec:72:a3:db:03:10:a9:c8:98:78:b7:2b:e5:29:a8:48: 04:d6:05:20:1c:d6:8d:ba:71:89:bb:97:cd:fd:6e:5d:13:27: b1:41:d9:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC3NUG/TXmLWjv8Bhpawbqwxsxc8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI2MDA1MTI3WhcNMjYwMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWRmMmJjMzNjNjI5MjVlOTJjYmI3NzBiMWJlMDRiNjRj OGI3OGQwMTM0N2Q4ODEwYTQ5NzBmZGFhODZlNzg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEpScwBxivMIBppgG8eTKiDeLX4CJz5H62y6YgkKRpDJBC Eqdc2wox7plRzk+17TUbRQbuTAMoHJTFYRBMYMRfxQn8IGKrXMd3qy5/OUeDxpf7 RQa3FfshqQtYTAczjXO0nB8EXN/pUM+lVIRfNleLGJhCxMmB785XUn7EApiyQpSJ YeQyB5d0gR73yBM3eT+EZqO4iZ6IK0SDTcCR51vD10nfN68gCs+hVIfvObxsWBVx jDHL2n8Ew/li32C4xlBSlc4GpYoB6uSieyjfhefZArW5SjcxJJTVGxzicjPkqer0 em/JMOdRE1Guj+O6OKtYokHaoT5N8L9nyqvqx+4HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3EEnkzO0/JWR6lvlHhQ8VNunfJcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0YzE0NzAxLWIxYTgtNGQzZC1hZjY3LTQ3NDZmODkwYTAxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoYwDQYJKoZIhvcNAQELBQADggEBAMO3c40uDAA1QGchs9NTJk38+gRR LBLpX7zL6pQ5JXFrrLfbAda/Thgj0QJoeqfhGwUpsvM1lTfzRONJ7WAQ87OBCKpc TC776jBxHzzA75yvXp4CqUiu7mmrRuObHXGFWnjBncyxsuG9PYu4yRelAEc0xRGj 6Brpoc4MBZpcicWCKp9tEKHo1WK5DjjP9jGczKXRPgje6A/8mBwaq8+4+uVlglV6 l9doz8qXZWXoomnvXKmFov13FDxjibV4EqN5L2dpCXMizUuvUs7+84ZAhiNQi+LA mcMKxAlX7HKj2wMQqciYeLcr5SmoSATWBSAc1o26cYm7l839bl0TJ7FB2X4= -----END CERTIFICATE-----Generated at Sat Dec 6 13:24:29 2025 by rpki-client