This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43679d0b-d4d6-4195-8f78-61e5d3431f35.roa File: 43679d0b-d4d6-4195-8f78-61e5d3431f35.roa (raw, json) Hash identifier: OOLV1Wci0zj3SwgooNE7wvuNPUcIY4fTTLLYeb0LPSw= Subject key identifier: 33:81:ED:36:5F:FC:7B:27:5A:C2:55:9A:6D:F4:01:1E:12:EA:A3:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CA9A773154DEC4035A2C1CD55F29F9A4310E07C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43679d0b-d4d6-4195-8f78-61e5d3431f35.roa Signing time: Sat 06 Dec 2025 02:30:53 +0000 ROA not before: Sat 06 Dec 2025 02:30:53 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 164.152.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a9:a7:73:15:4d:ec:40:35:a2:c1:cd:55:f2:9f:9a:43:10:e0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:30:53 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=af787dde4b1209129a389befa2db9ca8a5d5a0d44c75ac569753c1b17d162581, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:50:71:20:69:2a:0c:9a:26:ce:10:48:cb:a6: 3f:65:81:8a:20:d2:0b:ee:85:c0:4b:b8:fd:39:50: 96:cd:5f:52:27:97:eb:1c:b4:4b:9f:b4:2a:8e:cc: fe:76:5e:0d:b9:5a:09:7e:88:09:77:fd:10:23:cf: ff:a0:c7:54:3b:70:8a:c6:c2:33:b6:42:ef:1c:17: 08:87:09:1d:44:6d:a8:a4:9a:bb:1b:8f:5d:42:fa: b0:41:34:4b:0e:ca:61:d4:b3:c0:76:d0:eb:1c:1d: d3:fd:d9:ca:c4:42:d0:ac:f7:79:fd:67:e9:8a:08: 04:74:1e:a2:16:fe:f4:02:62:6d:42:72:7f:40:9b: c2:7a:4a:3f:e6:15:fc:f6:8d:3e:b5:3e:53:47:82: 92:b1:85:00:0b:76:71:47:73:2b:6d:3a:3e:b6:9b: 61:85:56:b5:74:cc:ce:52:53:15:d7:63:15:4b:49: f7:42:82:5c:f0:79:0e:e4:1e:e1:23:d0:7e:2a:e9: 55:20:c0:35:90:58:70:5a:5e:5d:fc:78:10:00:c9: 33:e2:e5:92:2d:ac:59:95:ad:4e:0f:3c:c3:09:c2: fd:7d:7b:b3:82:d7:89:16:63:bc:5a:0e:dd:f0:bb: e3:cf:bc:2d:33:b1:a1:ea:92:5d:99:82:b2:b5:04: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:81:ED:36:5F:FC:7B:27:5A:C2:55:9A:6D:F4:01:1E:12:EA:A3:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43679d0b-d4d6-4195-8f78-61e5d3431f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.152.200.0/22 Signature Algorithm: sha256WithRSAEncryption 40:f3:1f:d9:3a:65:e2:df:68:d2:3c:d9:31:9b:64:bd:eb:a2: c4:40:f8:5b:fd:71:e2:f2:ee:a9:b1:8b:14:1b:42:7c:4c:26: 63:d6:a4:b8:c5:a9:3b:46:6c:54:a5:eb:7d:3b:21:3b:e4:32: a6:8d:9a:d0:a6:f8:13:d7:ef:68:98:b4:90:c9:f1:69:cf:1a: a0:f7:af:72:68:2c:81:9c:6b:06:df:67:a4:3e:25:41:9c:7b: d3:ab:5d:a0:75:ea:57:2a:02:ea:70:08:e4:b4:4c:6a:8a:99: cc:30:9e:1a:3e:d3:e4:d6:c4:3d:f7:6a:08:55:64:12:17:ad: ea:4a:14:06:10:a3:03:ef:e5:de:cd:ee:ff:a7:fa:47:9c:41: 3b:b1:29:65:bb:4f:ef:e3:69:9e:37:50:81:86:5d:0e:3a:43: 0f:65:59:fe:5d:63:6f:3a:cd:b5:a4:08:ba:c2:41:e0:30:c5: 2e:42:b3:29:aa:77:4f:6b:ba:78:5d:32:e1:66:1c:8e:35:5c: 8d:47:f6:76:d1:03:28:4a:11:f8:7c:1c:26:71:0e:b1:c3:c5: dc:06:49:af:a2:6d:cc:5c:18:04:ca:64:7c:2d:33:fa:1f:94: fa:13:3a:08:10:a7:5d:61:bb:03:61:8a:e1:3b:57:9d:f8:3e: 56:58:99:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDKmncxVN7EA1osHNVfKfmkMQ4HwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIzMDUzWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjc4N2RkZTRiMTIwOTEyOWEzODliZWZhMmRiOWNhOGE1 ZDVhMGQ0NGM3NWFjNTY5NzUzYzFiMTdkMTYyNTgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTUHEgaSoMmibOEEjLpj9lgYog0gvuhcBLuP05UJbNX1In l+sctEuftCqOzP52Xg25Wgl+iAl3/RAjz/+gx1Q7cIrGwjO2Qu8cFwiHCR1Ebaik mrsbj11C+rBBNEsOymHUs8B20OscHdP92crEQtCs93n9Z+mKCAR0HqIW/vQCYm1C cn9Am8J6Sj/mFfz2jT61PlNHgpKxhQALdnFHcyttOj62m2GFVrV0zM5SUxXXYxVL SfdCglzweQ7kHuEj0H4q6VUgwDWQWHBaXl38eBAAyTPi5ZItrFmVrU4PPMMJwv19 e7OC14kWY7xaDt3wu+PPvC0zsaHqkl2ZgrK1BEgTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM4HtNl/8eydawlWabfQBHhLqozgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzNjc5ZDBiLWQ0ZDYtNDE5NS04Zjc4LTYxZTVkMzQzMWYzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKkmMgwDQYJKoZIhvcNAQELBQADggEBAEDzH9k6ZeLfaNI82TGbZL3rosRA +Fv9ceLy7qmxixQbQnxMJmPWpLjFqTtGbFSl6307ITvkMqaNmtCm+BPX72iYtJDJ 8WnPGqD3r3JoLIGcawbfZ6Q+JUGce9OrXaB16lcqAupwCOS0TGqKmcwwnho+0+TW xD33aghVZBIXrepKFAYQowPv5d7N7v+n+kecQTuxKWW7T+/jaZ43UIGGXQ46Qw9l Wf5dY286zbWkCLrCQeAwxS5Csymqd09runhdMuFmHI41XI1H9nbRAyhKEfh8HCZx DrHDxdwGSa+ibcxcGATKZHwtM/oflPoTOggQp11huwNhiuE7V534PlZYmdQ= -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:00 2025 by rpki-client