This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a591888-03a3-4df4-82f4-5efdd6c72962.roa File: 4a591888-03a3-4df4-82f4-5efdd6c72962.roa (raw, json) Hash identifier: bM2WFJUrRlfELJQvpPi8FPr49RB6/Umq5rlieCrVWqU= Subject key identifier: 0B:EE:27:4F:46:10:AC:A4:B9:FF:B0:25:F9:5E:F2:BB:A4:0B:2D:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F3F3D90C6DCFD233C6941CED26DF02F86F40244 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a591888-03a3-4df4-82f4-5efdd6c72962.roa Signing time: Wed 03 Dec 2025 01:40:11 +0000 ROA not before: Wed 03 Dec 2025 01:40:11 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3f:3d:90:c6:dc:fd:23:3c:69:41:ce:d2:6d:f0:2f:86:f4:02:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 01:40:11 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=953f0ce142483bec314655bd61ceddba546e75259330b54df53aac76af115fe0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:65:dc:a7:2c:ba:7e:75:50:6e:ad:b3:cb: f1:3a:23:fa:8c:05:84:10:e9:c3:f4:c1:e1:0f:c2: 54:7a:be:a9:47:bb:60:8b:62:5d:bc:55:e6:d7:91: f0:e1:0b:12:2d:46:6d:49:5f:f0:b7:e3:ef:7b:3c: b3:4c:8c:41:2f:c1:d9:c8:fe:2d:f3:83:5d:1b:c5: 5b:86:02:aa:ae:52:3d:e2:6a:a7:6c:9c:cf:08:4e: 3e:e5:b9:70:1b:6e:ac:c3:5f:9b:08:07:84:0e:d4: 75:88:c9:d6:e3:52:19:38:44:75:9e:3a:cb:a7:21: fd:bd:72:e0:24:4b:54:24:81:a0:84:e2:04:73:78: d8:0b:84:2d:ef:00:2a:73:93:f7:27:17:1a:60:b1: 72:a1:f6:35:55:71:86:fe:ff:cf:50:32:4e:36:af: 6d:44:6d:1e:d8:67:07:60:eb:1e:92:6b:7c:5f:01: 25:90:ec:cf:97:8d:61:62:c8:e7:bd:45:ec:d2:df: f4:ca:ea:37:c7:4c:9f:98:c6:63:1a:b8:ec:90:ea: b4:53:95:de:e0:6b:35:b8:29:29:f3:41:d7:9a:79: 32:fb:ba:5f:6b:d5:e7:d2:47:f9:0a:66:e0:19:75: 5a:e8:fb:2c:47:87:e5:88:3c:de:d8:72:aa:9e:2d: 3d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EE:27:4F:46:10:AC:A4:B9:FF:B0:25:F9:5E:F2:BB:A4:0B:2D:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a591888-03a3-4df4-82f4-5efdd6c72962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.19.0/24 Signature Algorithm: sha256WithRSAEncryption 83:8f:88:c9:a5:dd:fc:a1:16:5d:f1:33:f1:98:27:3d:82:3d: 32:76:08:3e:19:f3:a0:72:77:b1:2e:40:b3:94:dc:36:dc:09: c4:a9:1f:88:25:59:b2:b1:00:8e:2f:77:ac:bf:b7:88:fd:7d: a9:ed:a1:6c:cc:2f:32:83:89:7f:dd:e0:bd:da:c5:2c:0c:0b: e0:40:af:da:ab:f6:b0:3f:fb:72:11:1e:c4:88:05:7a:26:7f: 6b:3e:47:57:02:d2:a1:05:34:a3:e5:81:44:cf:03:a8:81:4b: 04:95:dc:4f:6c:b4:5a:01:54:1f:35:48:bd:8d:f3:b8:dd:e3: f1:e9:46:95:9f:ab:c5:bc:d8:55:7a:46:79:d0:4e:66:e4:a2: d8:97:ef:10:02:86:4d:cb:59:04:b7:c5:d7:b9:3f:e2:47:4a: e3:6e:b8:13:c5:9e:99:43:2f:34:f1:e4:93:2a:e0:e2:33:b4: 88:78:7f:d3:5d:01:82:8f:a0:25:0f:2f:9b:54:48:0c:a9:14: f8:9f:c1:e8:5f:65:0c:b4:75:3f:03:5f:73:c3:1d:6b:76:83: ee:2c:7a:95:97:49:ca:fd:d2:db:e9:86:f1:76:aa:81:5f:da: df:aa:6a:34:1a:c2:ff:e7:31:ed:9a:89:92:2a:ab:91:57:09: 26:19:1f:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULz89kMbc/SM8aUHO0m3wL4b0AkQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDE0MDExWhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTNmMGNlMTQyNDgzYmVjMzE0NjU1YmQ2MWNlZGRiYTU0 NmU3NTI1OTMzMGI1NGRmNTNhYWM3NmFmMTE1ZmUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq8GXcpyy6fnVQbq2zy/E6I/qMBYQQ6cP0weEPwlR6vqlH u2CLYl28VebXkfDhCxItRm1JX/C34+97PLNMjEEvwdnI/i3zg10bxVuGAqquUj3i aqdsnM8ITj7luXAbbqzDX5sIB4QO1HWIydbjUhk4RHWeOsunIf29cuAkS1QkgaCE 4gRzeNgLhC3vACpzk/cnFxpgsXKh9jVVcYb+/89QMk42r21EbR7YZwdg6x6Sa3xf ASWQ7M+XjWFiyOe9RezS3/TK6jfHTJ+YxmMauOyQ6rRTld7gazW4KSnzQdeaeTL7 ul9r1efSR/kKZuAZdVro+yxHh+WIPN7YcqqeLT3zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC+4nT0YQrKS5/7Al+V7yu6QLLf0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhNTkxODg4LTAzYTMtNGRmNC04MmY0LTVlZmRkNmM3Mjk2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmBMwDQYJKoZIhvcNAQELBQADggEBAIOPiMml3fyhFl3xM/GYJz2CPTJ2 CD4Z86Byd7EuQLOU3DbcCcSpH4glWbKxAI4vd6y/t4j9fantoWzMLzKDiX/d4L3a xSwMC+BAr9qr9rA/+3IRHsSIBXomf2s+R1cC0qEFNKPlgUTPA6iBSwSV3E9stFoB VB81SL2N87jd4/HpRpWfq8W82FV6RnnQTmbkotiX7xAChk3LWQS3xde5P+JHSuNu uBPFnplDLzTx5JMq4OIztIh4f9NdAYKPoCUPL5tUSAypFPifwehfZQy0dT8DX3PD HWt2g+4sepWXScr90tvphvF2qoFf2t+qajQawv/nMe2aiZIqq5FXCSYZH1w= -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:08 2025 by rpki-client