This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b7f5d1e-8862-4368-b6f3-1cee81de1485.roa File: 4b7f5d1e-8862-4368-b6f3-1cee81de1485.roa (raw, json) Hash identifier: 5ZyA8pbF3soAse2EGtSrpuF76VyciRBVaJL23zKYtyU= Subject key identifier: 38:55:1C:63:F1:12:61:61:E1:A4:71:A7:E8:22:34:1E:71:D5:82:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 287A6BC5ED222BFED74DBCC4091C615B60ABDEA9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b7f5d1e-8862-4368-b6f3-1cee81de1485.roa Signing time: Sat 29 Nov 2025 00:20:09 +0000 ROA not before: Sat 29 Nov 2025 00:20:09 +0000 ROA not after: Fri 27 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7a:6b:c5:ed:22:2b:fe:d7:4d:bc:c4:09:1c:61:5b:60:ab:de:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 29 00:20:09 2025 GMT Not After : Feb 27 23:59:59 2026 GMT Subject: serialNumber=10eb86c3bb9dc7e17e11929693239e38e8a12f104e2f7c6bc7a18d111fbc91e8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:94:cd:e2:80:1a:af:66:91:59:83:2a:63: bf:c8:d6:35:ce:1f:60:a6:50:68:de:68:2d:52:be: b6:1d:5f:7c:4e:d0:d1:c3:1c:ad:74:d3:7d:89:e6: 2a:6d:c6:22:ec:ce:1f:45:1a:41:43:b9:de:fa:b3: c1:71:0c:6a:26:bb:25:bf:0e:04:96:48:f6:40:b1: ec:cb:7a:f4:57:07:dc:2b:8a:ac:20:5b:fd:71:0e: ca:26:88:85:3b:da:c2:1c:8c:d1:8c:12:d9:40:dc: 16:56:17:31:78:c9:38:7e:bc:c4:b8:d8:f0:b5:91: 88:1e:94:53:3b:f5:f8:60:f7:ed:96:d2:3f:7f:a2: 9c:b9:81:12:83:8a:9a:43:22:9e:47:8f:af:37:84: 65:93:d8:4c:b5:11:85:bd:ec:2a:ee:5e:6a:ce:c5: 74:1e:ab:76:28:84:8f:fd:00:a0:b5:c7:e7:d0:7b: d3:a9:b1:85:d0:3e:e2:ce:ea:f1:20:53:d5:60:1c: 5d:80:93:a2:d9:c2:13:53:93:4c:ec:d4:d9:7c:05: 98:5e:7a:88:09:d6:fb:36:3d:b9:86:38:7d:43:1c: 5c:43:d9:ae:05:4f:51:e0:50:90:72:23:d0:9d:10: b5:ac:dc:31:aa:57:7e:26:a1:a6:84:29:ee:91:7e: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:55:1C:63:F1:12:61:61:E1:A4:71:A7:E8:22:34:1E:71:D5:82:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b7f5d1e-8862-4368-b6f3-1cee81de1485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.120.0/23 Signature Algorithm: sha256WithRSAEncryption 76:f4:7f:47:80:39:4f:8c:01:24:f8:33:35:1c:fc:57:c3:c3: e6:5b:31:71:57:0d:0f:10:ea:7c:8d:69:70:2d:1b:3a:b2:f7: 54:23:e7:c6:f3:12:1e:46:9e:13:d4:67:b8:05:ea:8b:7b:90: e6:20:c7:4a:11:b7:d5:b5:37:53:52:69:af:d4:85:b0:43:94: 2e:08:1c:b7:17:ec:ed:02:f2:9f:23:fc:ec:b8:05:04:6e:b7: a8:63:61:9c:75:69:05:c6:bc:19:d6:9c:43:37:12:0a:1d:f7: 91:bd:48:a2:df:a3:5e:00:eb:83:29:ff:a2:d7:3a:62:6f:61: 6b:cf:2a:c9:7a:7e:cc:3d:b5:a8:40:d2:a1:85:62:94:0f:4b: 17:87:47:0b:ba:ea:27:45:19:32:48:7f:82:3d:4f:db:b8:14: 8b:2c:c9:ad:ad:8d:39:62:2a:12:93:e4:86:24:5d:7a:dd:90: 09:e0:86:e5:aa:28:ef:d5:5b:ab:0f:b9:f4:00:32:aa:cf:2f: 37:e4:7c:37:2b:4e:f8:da:6a:b8:ec:c4:ac:51:c1:e6:96:b6: aa:e4:36:96:f5:43:99:7a:20:bc:89:7a:4c:ce:ad:d5:a0:2d: ef:c7:74:f0:e9:b9:c9:59:45:42:10:ee:a7:8d:0e:26:23:40: 4d:b7:c2:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKHprxe0iK/7XTbzECRxhW2Cr3qkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI5MDAyMDA5WhcNMjYwMjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGViODZjM2JiOWRjN2UxN2UxMTkyOTY5MzIzOWUzOGU4 YTEyZjEwNGUyZjdjNmJjN2ExOGQxMTFmYmM5MWU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcD5TN4oAar2aRWYMqY7/I1jXOH2CmUGjeaC1SvrYdX3xO 0NHDHK10032J5iptxiLszh9FGkFDud76s8FxDGomuyW/DgSWSPZAsezLevRXB9wr iqwgW/1xDsomiIU72sIcjNGMEtlA3BZWFzF4yTh+vMS42PC1kYgelFM79fhg9+2W 0j9/opy5gRKDippDIp5Hj683hGWT2Ey1EYW97CruXmrOxXQeq3YohI/9AKC1x+fQ e9OpsYXQPuLO6vEgU9VgHF2Ak6LZwhNTk0zs1Nl8BZheeogJ1vs2PbmGOH1DHFxD 2a4FT1HgUJByI9CdELWs3DGqV34moaaEKe6RfpnXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOFUcY/ESYWHhpHGn6CI0HnHVglYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiN2Y1ZDFlLTg4NjItNDM2OC1iNmYzLTFjZWU4MWRlMTQ4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFyOHgwDQYJKoZIhvcNAQELBQADggEBAHb0f0eAOU+MAST4MzUc/FfDw+Zb MXFXDQ8Q6nyNaXAtGzqy91Qj58bzEh5GnhPUZ7gF6ot7kOYgx0oRt9W1N1NSaa/U hbBDlC4IHLcX7O0C8p8j/Oy4BQRut6hjYZx1aQXGvBnWnEM3Egod95G9SKLfo14A 64Mp/6LXOmJvYWvPKsl6fsw9tahA0qGFYpQPSxeHRwu66idFGTJIf4I9T9u4FIss ya2tjTliKhKT5IYkXXrdkAnghuWqKO/VW6sPufQAMqrPLzfkfDcrTvjaarjsxKxR weaWtqrkNpb1Q5l6ILyJekzOrdWgLe/HdPDpuclZRUIQ7qeNDiYjQE23wuE= -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:42 2025 by rpki-client