This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8c9c0b-0356-49c4-ae47-c92220db650f.roa File: 5d8c9c0b-0356-49c4-ae47-c92220db650f.roa (raw, json) Hash identifier: ody5/9x0VpCXk739m317UIlAfcam8rjzu3EKCnoL9GM= Subject key identifier: 01:83:B7:10:84:7A:19:38:C4:28:CB:9D:AE:99:DB:50:9D:78:CE:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C34E67BACEC71C7A21B6027E766A34784CDE6C6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8c9c0b-0356-49c4-ae47-c92220db650f.roa Signing time: Tue 25 Nov 2025 00:51:01 +0000 ROA not before: Tue 25 Nov 2025 00:51:01 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:34:e6:7b:ac:ec:71:c7:a2:1b:60:27:e7:66:a3:47:84:cd:e6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:51:01 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=c9f850b1657c854869795916c2d406740bc586b615c3121a7acd921cfcc2a598, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:42:b1:93:26:bf:03:c0:80:d4:1e:fd:96:0a: 24:9b:70:7a:0d:f0:76:d2:0c:bc:ee:07:b2:51:bd: ac:c7:cb:bc:fd:eb:29:12:a6:49:3d:b1:a3:79:3b: 4c:49:fc:e4:f6:04:4e:d7:ea:3e:dd:a8:6e:0d:f2: a6:28:b7:20:9e:b7:5c:12:05:90:91:5f:30:39:67: 9c:8a:ef:be:5a:96:81:24:d2:51:bd:5f:9b:a3:aa: fc:bb:45:70:2c:ca:01:51:d2:49:79:18:ec:40:df: 75:d9:36:ab:91:60:23:fa:7b:d9:a4:80:f4:31:ff: ed:b8:2e:bd:6e:8e:4c:77:4a:fb:86:3c:f2:89:16: 56:3a:92:b6:02:47:39:9e:31:5d:d5:26:fa:ed:52: 9c:37:a4:50:4f:c4:4e:f0:9a:1f:06:a3:f0:f9:3d: 08:8f:aa:a7:dc:bb:63:fe:3c:8e:cb:ea:1e:ae:ac: 97:2d:aa:17:57:8e:56:97:51:34:a7:88:2e:1a:72: bc:c1:f4:4d:ea:2a:aa:1d:a0:81:6f:c4:1d:e8:9c: 40:19:19:c5:a8:27:97:22:da:08:6b:7d:c3:82:1e: b6:f2:3a:76:3c:90:76:88:e8:69:e8:6b:97:b2:8c: dd:41:0d:ae:17:4f:48:1d:6d:a4:f6:ce:10:b0:a4: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:83:B7:10:84:7A:19:38:C4:28:CB:9D:AE:99:DB:50:9D:78:CE:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d8c9c0b-0356-49c4-ae47-c92220db650f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.144.0/20 Signature Algorithm: sha256WithRSAEncryption c4:52:e3:03:58:22:24:20:d1:db:ec:23:9b:f5:e1:10:40:3f: 41:47:2f:0c:a2:0c:6b:35:fe:fc:86:ac:51:90:e2:fc:fe:68: 7f:52:df:4a:0c:2d:63:b2:db:6f:8c:1a:00:2c:2d:8c:a3:a0: 24:dc:87:43:c4:7f:bc:ee:bc:94:c9:89:ac:12:7a:29:09:8f: d1:15:55:6e:7a:c8:5e:25:d2:eb:50:6a:95:c1:91:ba:05:01: 75:7d:ab:d1:54:e6:8c:fa:50:83:39:40:a7:4c:e5:80:05:09: b9:46:6b:09:21:f9:70:dd:dd:76:83:b5:6c:dd:94:ac:87:06: ad:0a:13:45:35:de:88:a1:92:0e:f5:b1:56:b9:73:f6:f7:6c: 3d:e2:0b:d4:43:6b:71:25:1f:ff:09:2d:cf:38:f4:c2:6b:9f: bb:19:3b:a3:fd:9d:68:18:f4:05:d0:ab:54:f8:1e:9a:d7:98: 99:53:89:7c:94:2d:64:d6:9f:f9:6e:2e:de:af:fb:16:94:0b: a5:3a:c8:72:92:08:01:fb:54:a8:d1:e5:4b:dc:e5:93:2a:b2: 7f:96:5c:03:55:d1:5a:88:03:b0:d3:98:41:cd:6c:6c:98:e7: 6f:38:74:7d:84:8a:26:af:60:67:c0:ce:4b:74:5d:e0:32:9f: 82:84:53:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXDTme6zscceiG2An52ajR4TN5sYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDA1MTAxWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWY4NTBiMTY1N2M4NTQ4Njk3OTU5MTZjMmQ0MDY3NDBi YzU4NmI2MTVjMzEyMWE3YWNkOTIxY2ZjYzJhNTk4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4QrGTJr8DwIDUHv2WCiSbcHoN8HbSDLzuB7JRvazHy7z9 6ykSpkk9saN5O0xJ/OT2BE7X6j7dqG4N8qYotyCet1wSBZCRXzA5Z5yK775aloEk 0lG9X5ujqvy7RXAsygFR0kl5GOxA33XZNquRYCP6e9mkgPQx/+24Lr1ujkx3SvuG PPKJFlY6krYCRzmeMV3VJvrtUpw3pFBPxE7wmh8Go/D5PQiPqqfcu2P+PI7L6h6u rJctqhdXjlaXUTSniC4acrzB9E3qKqodoIFvxB3onEAZGcWoJ5ci2ghrfcOCHrby OnY8kHaI6Gnoa5eyjN1BDa4XT0gdbaT2zhCwpOJTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAYO3EIR6GTjEKMudrpnbUJ14zjEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkOGM5YzBiLTAzNTYtNDljNC1hZTQ3LWM5MjIyMGRiNjUwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgJAwDQYJKoZIhvcNAQELBQADggEBAMRS4wNYIiQg0dvsI5v14RBAP0FH LwyiDGs1/vyGrFGQ4vz+aH9S30oMLWOy22+MGgAsLYyjoCTch0PEf7zuvJTJiawS eikJj9EVVW56yF4l0utQapXBkboFAXV9q9FU5oz6UIM5QKdM5YAFCblGawkh+XDd 3XaDtWzdlKyHBq0KE0U13oihkg71sVa5c/b3bD3iC9RDa3ElH/8JLc849MJrn7sZ O6P9nWgY9AXQq1T4HprXmJlTiXyULWTWn/luLt6v+xaUC6U6yHKSCAH7VKjR5Uvc 5ZMqsn+WXANV0VqIA7DTmEHNbGyY5284dH2EiiavYGfAzkt0XeAyn4KEU5Y= -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:27 2025 by rpki-client