This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44a4e9af-9ea7-4174-801a-8b7ec2707094.roa File: 44a4e9af-9ea7-4174-801a-8b7ec2707094.roa (raw, json) Hash identifier: BPNxp62pSgDugEco7phSg9K1UX98hxo1UMOsJ9xdVbM= Subject key identifier: D5:9A:E2:B5:46:7E:2E:F8:FC:BA:D8:7D:0F:BC:0A:5B:06:57:42:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1AD32051D2EE660AC1D372B72220975AA98176 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44a4e9af-9ea7-4174-801a-8b7ec2707094.roa Signing time: Wed 19 Nov 2025 00:20:12 +0000 ROA not before: Wed 19 Nov 2025 00:20:12 +0000 ROA not after: Tue 17 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.119.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d3:20:51:d2:ee:66:0a:c1:d3:72:b7:22:20:97:5a:a9:81:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 19 00:20:12 2025 GMT Not After : Feb 17 23:59:59 2026 GMT Subject: serialNumber=f31c77e705d85b00984555f22858fe387445ffb3b63ec3dd46dae861c547c5fc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:7e:a0:3e:27:10:e8:00:0f:fe:8e:f6:45: 8e:83:dc:1f:5e:66:0f:30:4a:75:47:16:36:51:5c: 29:2f:2a:5b:9e:81:18:4b:1f:18:a9:7b:81:e0:8c: de:68:73:94:c6:24:3a:41:2e:88:1f:f1:bd:69:4a: 8e:af:b6:d7:d3:58:cc:fb:f0:8b:79:80:27:ef:9f: 8a:d6:ac:34:49:4d:77:36:f9:f0:42:33:84:9f:ce: 72:86:5f:cd:b9:c7:4e:7c:e0:eb:bb:ad:8b:d8:01: be:c6:b1:f4:ba:f6:d9:e6:00:60:44:76:8f:ed:df: 41:00:5f:b5:b1:06:b9:3b:77:26:8c:dd:3b:42:d2: 27:09:5a:e1:45:91:a1:f3:9a:1c:46:ba:ac:8a:ba: 5c:04:1d:05:53:48:5e:f0:cd:24:5a:66:d3:d8:2d: e6:40:44:16:c5:15:f8:57:8a:67:8f:1b:be:22:f9: 64:ad:44:b7:c1:19:4e:f9:27:3a:9e:a6:e1:3f:12: ce:a8:8d:2a:89:c4:90:c2:92:fd:27:d9:5e:3b:a8: b1:a1:84:1f:41:ca:b4:2f:3f:31:68:2f:e4:e4:d5: d1:64:9e:f4:4c:0b:a4:74:f8:71:95:bd:56:28:af: cf:fc:c7:3d:7e:b8:04:98:d0:b2:ac:b5:10:d7:7d: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9A:E2:B5:46:7E:2E:F8:FC:BA:D8:7D:0F:BC:0A:5B:06:57:42:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44a4e9af-9ea7-4174-801a-8b7ec2707094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.119.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:36:64:6e:de:1f:63:2c:80:6a:8d:8f:9f:98:f7:f9:9f:85: 01:7a:1f:ee:e4:a6:78:e1:a7:bd:94:43:35:27:8b:01:42:30: ca:99:b1:db:1b:09:1a:22:79:64:55:8b:31:1c:4e:df:c3:b6: f1:ba:2f:d1:5e:d0:75:b9:a6:f2:89:41:57:e9:0b:53:49:5c: 64:87:ba:f8:23:4c:e3:f6:e8:77:dc:e3:bc:54:00:ab:41:27: 57:23:47:03:28:80:87:92:47:87:5b:c5:98:a3:65:1c:96:18: b2:4d:5b:42:91:62:cc:f2:51:08:cf:8c:fd:dc:99:34:ef:e5: 9f:25:04:1d:1a:99:6b:e3:4f:80:1c:29:8f:b1:5f:2e:c8:5a: 49:94:de:21:59:af:fc:86:4d:f9:8c:c9:47:82:61:98:08:2d: 41:77:e9:78:c7:f1:21:b1:e2:79:70:8e:7e:ea:9a:a6:7c:de: 13:28:83:db:66:7e:f1:09:9d:d7:66:62:a3:1d:2e:eb:43:ad: 76:b1:12:10:cd:b0:be:dc:9a:96:f9:b0:56:e7:ea:d2:9d:76: ff:a8:a2:65:b9:ba:d0:d8:c6:5a:b9:47:8f:a6:d0:5b:0c:3e: 3b:b3:b2:8d:29:be:83:33:e6:d5:91:2d:a9:4f:3f:db:19:e3: d8:a8:39:fd -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITGtMgUdLuZgrB03K3IiCXWqmBdjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTExMTkwMDIwMTJaFw0yNjAyMTcyMzU5NTla MHoxSTBHBgNVBAUTQGYzMWM3N2U3MDVkODViMDA5ODQ1NTVmMjI4NThmZTM4NzQ0 NWZmYjNiNjNlYzNkZDQ2ZGFlODYxYzU0N2M1ZmMxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAM8tfqA+JxDoAA/+jvZFjoPcH15mDzBKdUcWNlFcKS8qW56B GEsfGKl7geCM3mhzlMYkOkEuiB/xvWlKjq+219NYzPvwi3mAJ++fitasNElNdzb5 8EIzhJ/OcoZfzbnHTnzg67uti9gBvsax9Lr22eYAYER2j+3fQQBftbEGuTt3Jozd O0LSJwla4UWRofOaHEa6rIq6XAQdBVNIXvDNJFpm09gt5kBEFsUV+FeKZ48bviL5 ZK1Et8EZTvknOp6m4T8SzqiNKonEkMKS/SfZXjuosaGEH0HKtC8/MWgv5OTV0WSe 9EwLpHT4cZW9Viivz/zHPX64BJjQsqy1ENd9bbsCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBTVmuK1Rn4u+Py62H0PvApbBldC0DAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNDRhNGU5YWYtOWVhNy00MTc0LTgwMWEtOGI3ZWMyNzA3MDk0LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDABB3MA0GCSqGSIb3DQEBCwUAA4IBAQAMNmRu3h9jLIBqjY+fmPf5n4UBeh/u 5KZ44ae9lEM1J4sBQjDKmbHbGwkaInlkVYsxHE7fw7bxui/RXtB1uabyiUFX6QtT SVxkh7r4I0zj9uh33OO8VACrQSdXI0cDKICHkkeHW8WYo2UclhiyTVtCkWLM8lEI z4z93Jk07+WfJQQdGplr40+AHCmPsV8uyFpJlN4hWa/8hk35jMlHgmGYCC1Bd+l4 x/EhseJ5cI5+6pqmfN4TKIPbZn7xCZ3XZmKjHS7rQ612sRIQzbC+3JqW+bBW5+rS nXb/qKJlubrQ2MZauUePptBbDD47s7KNKb6DM+bVkS2pTz/bGePYqDn9 -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:50 2025 by rpki-client