This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a16c82f-9a66-43d2-baee-321bf1a6f141.roa File: 4a16c82f-9a66-43d2-baee-321bf1a6f141.roa (raw, json) Hash identifier: OKDbOCN3qF0R4EisALbgK3Q4iSQdaNMuBb744eqmge0= Subject key identifier: 3C:BA:01:4D:32:CB:EA:80:37:6B:E3:EA:0F:9F:81:05:84:4C:89:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AC4A84F4FD70593ED399FC6EE04A6F5FB7EF559 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a16c82f-9a66-43d2-baee-321bf1a6f141.roa Signing time: Wed 26 Nov 2025 00:30:12 +0000 ROA not before: Wed 26 Nov 2025 00:30:12 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c4:a8:4f:4f:d7:05:93:ed:39:9f:c6:ee:04:a6:f5:fb:7e:f5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 26 00:30:12 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=aa429103129ce1d9f7529c7479782699f31eb1f4fbccdd2bd0a78bc360ca6458, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:80:7b:98:4d:1b:95:8c:fe:11:f4:ac:b2: 83:c9:05:7f:37:e6:de:6d:bc:8e:7c:07:1c:98:d4: ae:62:ee:9f:37:72:d2:64:69:bd:04:d3:bd:94:2f: e9:68:c7:5d:c5:d0:c4:43:93:5f:2b:19:4b:b8:e5: fb:c3:e2:1c:2b:ba:47:c1:4a:71:a1:fb:5e:95:a5: 1f:99:a1:39:af:8d:0c:6f:66:f7:9d:28:fc:04:f9: 05:7e:f7:93:3c:bb:5e:9d:47:98:95:ad:6b:11:76: f5:c8:ad:c0:e2:7d:3a:42:4a:00:e2:80:f9:3a:92: cf:79:a6:8d:7a:86:5d:e9:df:1f:7e:96:a9:8c:ce: 2c:2a:57:c0:08:da:f9:d3:3b:a6:fb:d3:51:eb:a9: aa:34:52:10:56:2e:6d:1b:ad:93:c8:89:c6:25:e9: 2c:12:24:ef:11:23:d1:3c:07:08:c1:be:09:0e:eb: 10:1a:70:a7:bb:42:dc:c9:ff:57:61:fc:23:5a:85: aa:fe:aa:cd:d7:2a:af:ea:80:39:85:9e:c5:fa:e7: 19:5a:4b:37:17:49:e1:da:16:70:12:23:58:6b:3d: 40:49:08:c6:ca:a5:e0:e3:44:0b:fc:3c:c5:97:c2: 8f:94:0f:8b:67:27:9b:00:ec:5e:9c:b8:ee:9d:4b: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BA:01:4D:32:CB:EA:80:37:6B:E3:EA:0F:9F:81:05:84:4C:89:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a16c82f-9a66-43d2-baee-321bf1a6f141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 19:21:10:94:b8:ff:81:fd:4e:8e:07:28:c7:6a:ff:cc:fc:cd: b0:d7:70:10:b9:e8:e5:d8:79:9e:82:3f:84:f7:47:22:76:1f: e2:7d:75:e9:a5:7a:04:de:e2:fe:db:5a:49:90:3b:e5:a4:f9: 51:57:b7:86:3e:3f:f0:0a:84:ef:23:81:6d:90:cb:89:de:16: 12:71:dc:97:45:38:32:d0:7d:e7:c0:75:2f:75:42:ba:b1:78: 19:fa:8a:47:2f:3f:9a:ff:70:78:fc:ef:e1:4e:1a:cf:63:5a: 97:30:c9:39:dd:d7:4c:a9:62:46:f8:42:c1:e4:fd:7e:1b:c8: e9:5d:04:f7:db:f7:9d:87:85:b6:40:71:d8:4d:c7:4a:39:11: 08:48:ab:26:5f:44:45:22:54:81:c4:05:21:c2:82:06:04:18: 30:16:01:02:d2:a4:5d:3a:bb:3c:1a:9a:1d:ba:a0:81:2b:4b: 7b:cf:24:52:9a:00:2b:fb:4d:03:41:cd:86:4d:04:c6:95:1f: 41:0c:ca:ea:29:79:0a:a6:f8:d2:63:75:5a:48:ce:f8:ce:ff: d9:c6:3d:ec:aa:d5:cf:fd:f6:9e:00:6f:b3:66:e6:f7:1d:e8: 3a:ec:a9:0e:e5:3b:e5:0d:84:f0:4e:c5:dc:32:cb:22:2a:b1: ed:78:0e:36 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOsSoT0/XBZPtOZ/G7gSm9ft+9VkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI2MDAzMDEyWhcNMjYwMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTQyOTEwMzEyOWNlMWQ5Zjc1MjljNzQ3OTc4MjY5OWYz MWViMWY0ZmJjY2RkMmJkMGE3OGJjMzYwY2E2NDU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuZ4B7mE0blYz+EfSssoPJBX835t5tvI58BxyY1K5i7p83 ctJkab0E072UL+lox13F0MRDk18rGUu45fvD4hwrukfBSnGh+16VpR+ZoTmvjQxv ZvedKPwE+QV+95M8u16dR5iVrWsRdvXIrcDifTpCSgDigPk6ks95po16hl3p3x9+ lqmMziwqV8AI2vnTO6b701Hrqao0UhBWLm0brZPIicYl6SwSJO8RI9E8BwjBvgkO 6xAacKe7QtzJ/1dh/CNahar+qs3XKq/qgDmFnsX65xlaSzcXSeHaFnASI1hrPUBJ CMbKpeDjRAv8PMWXwo+UD4tnJ5sA7F6cuO6dS9VRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPLoBTTLL6oA3a+PqD5+BBYRMie4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhMTZjODJmLTlhNjYtNDNkMi1iYWVlLTMyMWJmMWE2ZjE0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAyEDANBgkqhkiG9w0BAQsFAAOCAQEAGSEQlLj/gf1Ojgcox2r/zPzNsNdw ELno5dh5noI/hPdHInYf4n116aV6BN7i/ttaSZA75aT5UVe3hj4/8AqE7yOBbZDL id4WEnHcl0U4MtB958B1L3VCurF4GfqKRy8/mv9wePzv4U4az2NalzDJOd3XTKli RvhCweT9fhvI6V0E99v3nYeFtkBx2E3HSjkRCEirJl9ERSJUgcQFIcKCBgQYMBYB AtKkXTq7PBqaHbqggStLe88kUpoAK/tNA0HNhk0ExpUfQQzK6il5Cqb40mN1WkjO +M7/2cY97KrVz/32ngBvs2bm9x3oOuypDuU75Q2E8E7F3DLLIiqx7XgONg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:30 2025 by rpki-client