This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47479cc3-c3ca-442e-9bef-1e53a9b87918.roa File: 47479cc3-c3ca-442e-9bef-1e53a9b87918.roa (raw, json) Hash identifier: WZalYfdMEmBYLwvnQJ+Qmhg25AOCpWQuhV/znLJw6pw= Subject key identifier: AE:48:29:5D:8A:E9:87:36:C5:A5:B8:FC:6D:10:B3:38:97:52:8F:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17EFF44774D83ECD974E10E8340AD90DDDE15DDA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47479cc3-c3ca-442e-9bef-1e53a9b87918.roa Signing time: Sat 06 Dec 2025 00:21:23 +0000 ROA not before: Sat 06 Dec 2025 00:21:23 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 162.250.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ef:f4:47:74:d8:3e:cd:97:4e:10:e8:34:0a:d9:0d:dd:e1:5d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 00:21:23 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=8ee6877920594bf027cceb4ce23faa7bedf53aa7f619eef92aa869f816c41573, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:de:8f:bd:a3:65:15:e7:13:f2:f0:91:de: 46:fe:54:be:98:8c:86:8a:13:7d:b4:77:4f:5d:08: e0:d1:13:05:c9:20:d4:30:2f:05:5f:df:c9:1e:57: 88:ef:da:f5:96:db:f6:f0:78:69:3a:26:20:57:f9: 78:8e:e2:b1:99:08:90:dc:9f:31:ac:48:8a:3e:17: c3:45:61:54:cd:57:5f:60:2d:61:c8:c4:eb:2e:73: b8:4a:2e:e7:de:4a:da:93:c7:09:b8:a1:e1:2a:11: df:32:71:5c:34:d0:3f:8e:2c:d3:94:9e:01:72:60: 76:00:88:75:50:e0:fe:8a:00:0f:41:dd:e0:b0:a1: 41:2a:be:70:94:78:0b:ae:fe:30:ea:2c:df:09:ee: 02:23:94:00:a1:08:20:b8:0a:ca:06:2d:45:9a:12: af:bd:89:c5:b1:9e:b8:b5:9c:df:58:4b:88:2e:cc: 00:37:e2:80:b7:22:bf:5d:d0:32:a9:81:28:2c:8f: d6:a2:c9:e9:e6:f6:1c:01:d7:31:3d:3f:52:5c:1a: 83:d4:ec:c2:f8:5f:9c:d4:0d:26:74:6c:73:58:3e: 30:5b:4e:28:f3:b9:4a:8b:04:fa:d7:7c:44:e8:9b: 00:3b:85:d9:b9:5a:ce:3e:8d:09:10:65:e1:1b:68: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:48:29:5D:8A:E9:87:36:C5:A5:B8:FC:6D:10:B3:38:97:52:8F:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47479cc3-c3ca-442e-9bef-1e53a9b87918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.250.238.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:4b:03:65:27:7d:08:57:91:a7:82:f3:89:f5:b0:b1:24:ea: ce:9d:c9:1a:38:50:0e:a7:79:c4:e1:57:ab:9c:57:8b:03:72: 09:1d:f3:fd:d1:b6:68:81:24:51:0e:42:f3:b8:45:05:dd:77: 01:37:33:2d:a9:7d:e0:6c:ed:1c:18:1d:fa:1e:b6:74:fd:c9: c5:c4:17:f7:89:c4:f0:64:90:05:ac:d2:16:1f:b3:01:34:6d: f2:88:d9:69:e4:30:ed:14:7d:85:b5:b8:a1:bf:11:49:88:0d: 2e:f2:95:f9:1a:09:77:38:80:c8:1c:3f:ce:37:2e:85:2c:09: f5:b0:5a:fe:a4:68:e2:3f:9d:13:ea:36:f9:0b:98:ef:74:a0: 00:1c:63:45:27:e8:47:ee:d1:cb:ae:3f:e2:70:ef:d3:75:38: b2:ab:38:f8:6f:8f:62:4d:96:e8:c3:30:93:eb:6f:a6:0a:53: a1:68:b8:e5:53:b2:f0:3e:dd:a8:9b:94:7d:dc:ec:03:98:3a: ff:5f:03:c0:fe:9c:dd:10:de:65:14:67:6b:10:46:51:69:e1: 2d:22:17:17:0d:32:02:d3:12:4a:f9:8b:92:54:58:9a:64:8d: f5:46:64:12:a4:33:b6:59:22:a1:94:c5:cd:8b:39:67:93:77: 89:1e:4f:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF+/0R3TYPs2XThDoNArZDd3hXdowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDAyMTIzWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZWU2ODc3OTIwNTk0YmYwMjdjY2ViNGNlMjNmYWE3YmVk ZjUzYWE3ZjYxOWVlZjkyYWE4NjlmODE2YzQxNTczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMBd6PvaNlFecT8vCR3kb+VL6YjIaKE320d09dCODREwXJ INQwLwVf38keV4jv2vWW2/bweGk6JiBX+XiO4rGZCJDcnzGsSIo+F8NFYVTNV19g LWHIxOsuc7hKLufeStqTxwm4oeEqEd8ycVw00D+OLNOUngFyYHYAiHVQ4P6KAA9B 3eCwoUEqvnCUeAuu/jDqLN8J7gIjlAChCCC4CsoGLUWaEq+9icWxnri1nN9YS4gu zAA34oC3Ir9d0DKpgSgsj9aiyenm9hwB1zE9P1JcGoPU7ML4X5zUDSZ0bHNYPjBb TijzuUqLBPrXfETomwA7hdm5Ws4+jQkQZeEbaKu1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrkgpXYrphzbFpbj8bRCzOJdSjwMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3NDc5Y2MzLWMzY2EtNDQyZS05YmVmLTFlNTNhOWI4NzkxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGi+u4wDQYJKoZIhvcNAQELBQADggEBAD1LA2UnfQhXkaeC84n1sLEk6s6d yRo4UA6necThV6ucV4sDcgkd8/3RtmiBJFEOQvO4RQXddwE3My2pfeBs7RwYHfoe tnT9ycXEF/eJxPBkkAWs0hYfswE0bfKI2WnkMO0UfYW1uKG/EUmIDS7ylfkaCXc4 gMgcP843LoUsCfWwWv6kaOI/nRPqNvkLmO90oAAcY0Un6Efu0cuuP+Jw79N1OLKr OPhvj2JNlujDMJPrb6YKU6FouOVTsvA+3aiblH3c7AOYOv9fA8D+nN0Q3mUUZ2sQ RlFp4S0iFxcNMgLTEkr5i5JUWJpkjfVGZBKkM7ZZIqGUxc2LOWeTd4keT64= -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:26 2025 by rpki-client