This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a486fcb-a78d-476b-bbf5-1401a111808f.roa File: 3a486fcb-a78d-476b-bbf5-1401a111808f.roa (raw, json) Hash identifier: sUkxQNQM8wxehkmeMe89HQK2Wc5z2IY2T3++SCNMW4c= Subject key identifier: E7:03:84:50:12:E7:72:CC:48:6B:FC:53:9E:34:FD:C5:06:6C:B4:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21BFD5961B1897CA6A46D5D758D6A632AA35E0FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a486fcb-a78d-476b-bbf5-1401a111808f.roa Signing time: Wed 03 Dec 2025 01:30:10 +0000 ROA not before: Wed 03 Dec 2025 01:30:10 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bf:d5:96:1b:18:97:ca:6a:46:d5:d7:58:d6:a6:32:aa:35:e0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 01:30:10 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=d7391c4fd4efc17c81553ab6bc262d917c6af5d6a6d11cef204d9036a5fec41a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:55:3d:33:5a:37:b7:2d:31:44:b4:e7:8a: 83:b9:00:e9:82:53:d8:b7:6b:df:17:e1:28:8e:46: 8c:8d:0a:8f:79:98:3f:d1:58:ae:e5:63:12:a0:d4: 4e:bb:91:83:76:71:18:b6:fa:ab:bb:83:38:6d:a3: 23:51:8a:c3:f6:4c:b3:43:cc:f5:97:0c:ad:eb:14: 9e:a2:7a:ec:b1:80:b3:70:76:d0:e0:f2:98:be:09: 86:55:a7:80:d1:a1:fb:1c:0f:f3:cb:be:49:00:62: 4f:8f:ae:44:bf:57:a7:8f:3d:4b:2f:9f:35:64:d9: 15:c2:74:74:09:6e:54:b6:fd:cb:c6:06:86:df:69: 5d:aa:78:e7:75:ef:bf:e6:ff:5d:49:dd:32:83:f0: ec:ae:99:8d:d6:db:24:77:80:89:17:f1:e6:44:a4: 64:66:1f:41:6d:19:69:f0:59:f1:97:3a:cf:03:42: 1a:1f:f5:b4:da:dc:c7:80:4c:2b:3f:ee:d2:da:3b: fa:48:eb:d0:bb:e2:31:04:fe:ef:c6:21:b5:8f:b3: c6:ba:42:01:a6:da:00:dc:e3:f7:9a:7c:d3:ae:d3: 61:b1:86:aa:db:c8:05:bb:d9:c5:64:24:ac:d4:58: a8:ed:16:ec:21:87:5d:c0:88:38:b8:b1:08:9d:2d: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:03:84:50:12:E7:72:CC:48:6B:FC:53:9E:34:FD:C5:06:6C:B4:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a486fcb-a78d-476b-bbf5-1401a111808f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.71.0/24 Signature Algorithm: sha256WithRSAEncryption 89:36:ab:f4:2a:26:89:93:b3:2c:63:cc:06:98:0c:7b:a3:14: d0:a7:30:5d:78:21:4d:74:75:7d:0b:c3:9b:61:4d:b8:7c:ce: 7c:68:61:ba:7e:92:da:a4:50:80:6b:2e:76:83:f5:11:bc:20: 55:c0:43:08:4b:60:31:31:cc:73:32:e5:c0:5c:c6:28:d3:26: 3e:e8:52:e1:5f:cb:84:fe:fd:5d:50:2d:43:0e:45:8f:79:c9: 5c:65:18:98:b2:68:4e:23:a4:60:8e:1b:41:87:c0:10:dc:30: 3c:7a:ff:ff:8d:b5:23:27:e1:4f:df:51:a6:0d:48:d3:70:95: fe:5f:38:3e:73:14:dc:75:0c:c1:1d:b1:c6:8f:6e:4a:ee:8a: 58:70:60:f2:ee:d5:2d:a2:60:0b:6e:ec:c4:46:be:0e:58:e2: a4:44:3f:33:b3:44:89:e5:94:d2:fd:fd:8f:d5:58:92:f5:ff: 8e:2a:3c:3a:55:ba:93:e7:a9:c3:e2:e7:c1:54:7a:72:66:20: 5c:cc:d0:d8:dd:c6:97:da:3a:41:2a:3c:c8:74:47:c3:ad:25: ac:d9:16:8b:8e:ab:a7:19:75:a2:5b:9c:da:fa:45:be:a4:c6: 2c:f6:39:3f:22:65:ee:c9:78:d3:e8:af:c7:71:2a:d9:ce:56: 52:78:06:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIb/VlhsYl8pqRtXXWNamMqo14PwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDEzMDEwWhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzM5MWM0ZmQ0ZWZjMTdjODE1NTNhYjZiYzI2MmQ5MTdj NmFmNWQ2YTZkMTFjZWYyMDRkOTAzNmE1ZmVjNDFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzD1U9M1o3ty0xRLTnioO5AOmCU9i3a98X4SiORoyNCo95 mD/RWK7lYxKg1E67kYN2cRi2+qu7gzhtoyNRisP2TLNDzPWXDK3rFJ6ieuyxgLNw dtDg8pi+CYZVp4DRofscD/PLvkkAYk+PrkS/V6ePPUsvnzVk2RXCdHQJblS2/cvG BobfaV2qeOd177/m/11J3TKD8OyumY3W2yR3gIkX8eZEpGRmH0FtGWnwWfGXOs8D Qhof9bTa3MeATCs/7tLaO/pI69C74jEE/u/GIbWPs8a6QgGm2gDc4/eafNOu02Gx hqrbyAW72cVkJKzUWKjtFuwhh13AiDi4sQidLT4rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5wOEUBLncsxIa/xTnjT9xQZstG0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhNDg2ZmNiLWE3OGQtNDc2Yi1iYmY1LTE0MDFhMTExODA4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsEcwDQYJKoZIhvcNAQELBQADggEBAIk2q/QqJomTsyxjzAaYDHujFNCn MF14IU10dX0Lw5thTbh8znxoYbp+ktqkUIBrLnaD9RG8IFXAQwhLYDExzHMy5cBc xijTJj7oUuFfy4T+/V1QLUMORY95yVxlGJiyaE4jpGCOG0GHwBDcMDx6//+NtSMn 4U/fUaYNSNNwlf5fOD5zFNx1DMEdscaPbkruilhwYPLu1S2iYAtu7MRGvg5Y4qRE PzOzRInllNL9/Y/VWJL1/44qPDpVupPnqcPi58FUenJmIFzM0NjdxpfaOkEqPMh0 R8OtJazZFouOq6cZdaJbnNr6Rb6kxiz2OT8iZe7JeNPor8dxKtnOVlJ4Buw= -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:13 2025 by rpki-client