This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa File: 3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa (raw, json) Hash identifier: /eR9Ujpg1NXNma3hO6h8b8WEbshQPSVzsOUjWDYQo5Q= Subject key identifier: 98:40:79:08:75:EB:1B:D8:78:32:68:FB:5F:1B:B9:1D:B0:4D:CA:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50CD2A9CA19D1EF852885BAFDB560CF3656236 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa Signing time: Sun 07 Dec 2025 02:30:33 +0000 ROA not before: Sun 07 Dec 2025 02:30:33 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:cd:2a:9c:a1:9d:1e:f8:52:88:5b:af:db:56:0c:f3:65:62:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 7 02:30:33 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=525a2c086213e6b893a4e252f66fefde7516503257acd02d95871874f5f7f1cb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c6:38:bd:9e:06:ef:00:13:29:c2:10:2a:db: 7d:ce:22:a8:2b:bc:22:8a:0f:79:08:45:d5:bb:b2: ad:81:3e:27:e7:5b:d8:1c:5b:d5:3f:5a:a7:bf:26: 5e:64:91:13:f3:b4:d8:46:80:28:1d:6c:40:1c:c1: f9:b2:c0:27:8d:8b:9b:67:0c:f6:ff:be:5d:bc:2c: ed:dc:9a:7a:22:f6:61:f4:70:d0:aa:bd:f4:86:3e: ae:fb:dc:2c:41:6b:91:38:9d:fb:76:f3:e5:42:69: 25:82:04:c0:79:f1:1b:ec:30:1f:3e:65:df:21:60: 9d:9f:47:9e:3c:97:e5:7d:b4:1d:3d:4d:80:1c:c5: 81:85:00:28:6c:07:48:b7:03:63:8c:be:05:28:13: d7:e0:86:10:87:86:af:df:0a:11:55:3a:09:76:cc: 90:b7:6f:55:e7:e0:53:99:ce:e4:48:2e:fb:d2:ac: 41:9b:c6:1f:ad:57:53:2c:69:f5:13:85:6c:37:ea: d5:f5:63:8d:1d:35:4f:5d:67:03:a5:c0:fc:ab:1a: e6:f6:03:85:40:f5:e9:33:c8:3e:57:64:4c:93:f5: e6:2f:44:a5:64:16:d5:4f:31:4a:36:61:63:42:2d: c8:b0:0f:81:8d:a0:6f:7f:df:fd:4a:a2:de:e0:fe: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:40:79:08:75:EB:1B:D8:78:32:68:FB:5F:1B:B9:1D:B0:4D:CA:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3defa9e3-2d3f-47d8-99cd-631d15fa9397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.0.0/22 Signature Algorithm: sha256WithRSAEncryption 44:75:59:23:01:96:99:0f:18:80:11:68:c5:6f:0d:af:c8:5a: 55:32:32:54:e1:e5:49:e0:dd:b3:0b:c9:72:09:ce:c7:84:63: 4b:b7:0c:11:87:d6:56:14:6b:de:ff:bc:85:2b:cb:c2:f5:f6: b5:06:cf:a2:09:91:68:95:52:ff:5b:23:41:bb:70:13:9a:4e: c3:32:80:1b:58:9f:9e:7b:c6:e9:60:87:ef:97:e3:2a:89:be: 03:1a:22:e7:71:47:27:3b:5a:08:a4:58:7f:6c:4d:9d:77:b1: 49:10:55:69:67:dc:8d:bb:4a:eb:69:75:06:71:94:ad:7d:e2: 6f:53:38:67:13:52:3d:c0:6b:b5:ae:a3:89:bf:12:35:82:30: b5:f6:71:a0:30:7a:73:26:b7:ef:75:3e:f2:89:46:b3:1d:34: b1:b4:63:91:c2:9a:3c:55:55:79:ac:b3:e1:83:db:f6:96:33: bc:b8:97:e8:63:8f:4b:27:eb:5e:3a:50:dd:db:7f:34:8b:ea: d5:36:75:ff:e9:aa:86:f0:38:10:80:9d:47:99:2b:a4:d4:05: 53:8c:80:8e:d3:6a:39:ff:04:46:58:b4:90:3a:93:0a:4e:60: 48:eb:e6:c4:ad:90:df:f0:03:f5:00:38:d5:8e:9b:7b:42:c9: 1d:84:ee:ec -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITUM0qnKGdHvhSiFuv21YM82ViNjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEyMDcwMjMwMzNaFw0yNjAzMDcyMzU5NTla MHoxSTBHBgNVBAUTQDUyNWEyYzA4NjIxM2U2Yjg5M2E0ZTI1MmY2NmZlZmRlNzUx NjUwMzI1N2FjZDAyZDk1ODcxODc0ZjVmN2YxY2IxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANLGOL2eBu8AEynCECrbfc4iqCu8IooPeQhF1buyrYE+J+db 2Bxb1T9ap78mXmSRE/O02EaAKB1sQBzB+bLAJ42Lm2cM9v++Xbws7dyaeiL2YfRw 0Kq99IY+rvvcLEFrkTid+3bz5UJpJYIEwHnxG+wwHz5l3yFgnZ9HnjyX5X20HT1N gBzFgYUAKGwHSLcDY4y+BSgT1+CGEIeGr98KEVU6CXbMkLdvVefgU5nO5Egu+9Ks QZvGH61XUyxp9ROFbDfq1fVjjR01T11nA6XA/Ksa5vYDhUD16TPIPldkTJP15i9E pWQW1U8xSjZhY0ItyLAPgY2gb3/f/Uqi3uD+E7cCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSYQHkIdesb2HgyaPtfG7kdsE3KGzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvM2RlZmE5ZTMtMmQzZi00N2Q4LTk5Y2QtNjMxZDE1ZmE5Mzk3LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAhf+ADANBgkqhkiG9w0BAQsFAAOCAQEARHVZIwGWmQ8YgBFoxW8Nr8haVTIy VOHlSeDdswvJcgnOx4RjS7cMEYfWVhRr3v+8hSvLwvX2tQbPogmRaJVS/1sjQbtw E5pOwzKAG1ifnnvG6WCH75fjKom+Axoi53FHJztaCKRYf2xNnXexSRBVaWfcjbtK 62l1BnGUrX3ib1M4ZxNSPcBrta6jib8SNYIwtfZxoDB6cya373U+8olGsx00sbRj kcKaPFVVeayz4YPb9pYzvLiX6GOPSyfrXjpQ3dt/NIvq1TZ1/+mqhvA4EICdR5kr pNQFU4yAjtNqOf8ERli0kDqTCk5gSOvmxK2Q3/AD9QA41Y6be0LJHYTu7A== -----END CERTIFICATE-----Generated at Fri Dec 19 13:39:17 2025 by rpki-client