This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa File: 5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa (raw, json) Hash identifier: BepweXixx47kg1LwpCUXL5EVj58ru97XrWCF27iKBzA= Subject key identifier: 34:FB:C0:C3:28:FC:A1:D0:1B:CD:93:11:6C:F4:22:BC:A5:C1:95:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1511C50B336770FC20F01839CF75EDF370B929FD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa Signing time: Wed 19 Nov 2025 00:31:32 +0000 ROA not before: Wed 19 Nov 2025 00:31:32 +0000 ROA not after: Tue 17 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 168.203.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:11:c5:0b:33:67:70:fc:20:f0:18:39:cf:75:ed:f3:70:b9:29:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 19 00:31:32 2025 GMT Not After : Feb 17 23:59:59 2026 GMT Subject: serialNumber=dcd02fdd63b82ea791e1645f853a3089c9be2855a9f025d86c006a64054eb394, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:5c:b9:79:f5:29:6d:18:be:57:9f:96:42: 10:33:57:f0:49:be:2d:aa:d8:5c:a3:40:a5:33:23: 22:f3:36:0c:25:9c:02:1d:dc:cc:cd:ad:62:e0:11: fa:ba:24:b2:68:74:66:b6:cb:e8:a0:ac:9a:1b:bd: 24:39:53:4f:0f:f7:09:ab:b4:45:6d:95:19:98:73: 6a:29:cc:4b:5e:41:a5:59:c2:1a:1f:18:1e:f0:19: d5:ac:71:07:c2:d3:78:4a:95:e2:3e:3f:34:73:ab: 0b:a7:f2:9b:c1:8a:31:f6:f0:82:fe:1a:3c:68:ff: cc:e7:29:38:13:96:f2:28:10:58:38:1b:37:44:e3: 6b:da:d9:2f:3b:4a:de:f9:c0:43:f3:48:8e:02:a2: 58:5f:b4:a9:de:12:b7:7a:57:db:0e:e4:9a:e5:80: 21:6a:a5:da:bf:2e:88:0d:80:8f:20:d8:1d:75:95: 9e:6e:a5:03:c1:da:e1:78:e7:9d:4c:c6:ae:a5:e2: 16:74:89:3f:ab:f8:e5:02:80:31:fd:d7:5f:77:65: 1f:74:46:58:fa:06:b2:52:29:22:b0:d7:a2:cd:d1: b7:41:a0:bd:69:78:ec:4d:c0:8d:cd:3a:17:22:2d: fe:3c:3f:bd:56:5a:3a:04:57:9f:99:9f:82:c0:01: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FB:C0:C3:28:FC:A1:D0:1B:CD:93:11:6C:F4:22:BC:A5:C1:95:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a48fd68-ae13-4542-b8a0-9413f8573dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.203.64.0/18 Signature Algorithm: sha256WithRSAEncryption 32:8f:b0:98:46:40:e8:45:56:76:8d:ba:76:5d:25:c8:75:53: 14:9d:8e:9c:2e:11:7a:2f:06:8c:d0:36:55:c2:ee:a7:49:ed: 51:c5:a3:66:8f:1b:ae:79:52:71:89:d7:9c:86:81:46:77:c5: dc:36:55:93:5c:4e:5d:ec:60:ab:bd:b7:60:16:b3:cb:68:6b: a1:fd:b8:24:7d:7b:22:c1:e7:ad:be:93:e2:7b:34:f2:5a:c3: f1:91:7d:07:70:38:ac:74:fc:90:64:21:80:a1:41:b2:f4:4c: 7e:06:52:a0:d6:c5:d7:e0:bc:c8:16:20:c9:80:99:fc:de:99: a8:9f:9b:20:d7:1e:b7:07:a5:45:41:ad:19:0a:dd:16:86:e7: 23:02:7a:3d:59:2f:6f:06:ea:c0:6c:b2:84:9a:5c:df:7d:f8: db:f0:6c:93:bf:ce:9c:07:fd:43:80:5d:19:70:e9:cc:74:42: 45:f7:c3:8b:7d:8b:da:a1:58:b9:3c:32:96:28:e8:48:07:e0: 5d:85:4b:02:c8:c9:cb:04:3e:50:41:75:68:64:15:ce:06:5f: a0:67:39:cb:b7:f0:42:67:bf:ce:72:86:a2:1e:05:14:5f:b3: 40:71:31:13:4f:ec:07:bd:69:66:5c:1f:2c:a6:98:da:5e:c2: 8a:a4:d7:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFRHFCzNncPwg8Bg5z3Xt83C5Kf0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE5MDAzMTMyWhcNMjYwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2QwMmZkZDYzYjgyZWE3OTFlMTY0NWY4NTNhMzA4OWM5 YmUyODU1YTlmMDI1ZDg2YzAwNmE2NDA1NGViMzk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjhFy5efUpbRi+V5+WQhAzV/BJvi2q2FyjQKUzIyLzNgwl nAId3MzNrWLgEfq6JLJodGa2y+igrJobvSQ5U08P9wmrtEVtlRmYc2opzEteQaVZ whofGB7wGdWscQfC03hKleI+PzRzqwun8pvBijH28IL+Gjxo/8znKTgTlvIoEFg4 GzdE42va2S87St75wEPzSI4ColhftKneErd6V9sO5JrlgCFqpdq/LogNgI8g2B11 lZ5upQPB2uF4551Mxq6l4hZ0iT+r+OUCgDH91193ZR90Rlj6BrJSKSKw16LN0bdB oL1peOxNwI3NOhciLf48P71WWjoEV5+Zn4LAAQ6hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNPvAwyj8odAbzZMRbPQivKXBldwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhNDhmZDY4LWFlMTMtNDU0Mi1iOGEwLTk0MTNmODU3M2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaoy0AwDQYJKoZIhvcNAQELBQADggEBADKPsJhGQOhFVnaNunZdJch1UxSd jpwuEXovBozQNlXC7qdJ7VHFo2aPG655UnGJ15yGgUZ3xdw2VZNcTl3sYKu9t2AW s8toa6H9uCR9eyLB562+k+J7NPJaw/GRfQdwOKx0/JBkIYChQbL0TH4GUqDWxdfg vMgWIMmAmfzemaifmyDXHrcHpUVBrRkK3RaG5yMCej1ZL28G6sBssoSaXN99+Nvw bJO/zpwH/UOAXRlw6cx0QkX3w4t9i9qhWLk8MpYo6EgH4F2FSwLIycsEPlBBdWhk Fc4GX6BnOcu38EJnv85yhqIeBRRfs0BxMRNP7Ae9aWZcHyymmNpewoqk1yo= -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:00 2025 by rpki-client