This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa File: 68af9002-6d9c-4a97-b412-41140a596dc9.roa (raw, json) Hash identifier: g9py8ucovlIchIZWvgl3fNrpQvFmCz1zvxEFJfij9jo= Subject key identifier: FF:29:49:9A:F7:BD:B7:CA:E5:25:33:73:F4:EE:2B:DE:82:C9:B9:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2418FF32C91C7666E46C42411BB783C2AF8A81F5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa Signing time: Thu 27 Nov 2025 00:10:10 +0000 ROA not before: Thu 27 Nov 2025 00:10:10 +0000 ROA not after: Wed 25 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:18:ff:32:c9:1c:76:66:e4:6c:42:41:1b:b7:83:c2:af:8a:81:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 27 00:10:10 2025 GMT Not After : Feb 25 23:59:59 2026 GMT Subject: serialNumber=c2b279c241820085de93561740de98853d023dd889242ae3505cd693e836cc35, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:2d:d6:a5:68:1e:25:fa:ec:ee:c0:26:bd: 64:66:47:c9:45:a4:4d:ca:21:d3:6a:04:e2:75:ae: ba:fb:f5:86:9e:05:77:af:2b:1d:f5:5f:66:26:f2: 5d:03:4f:f7:34:c1:c1:48:5f:0b:a2:45:ea:97:de: 90:0b:e5:6d:49:df:d8:e0:40:ff:3c:6e:4e:40:cb: 2b:2a:5e:53:60:47:0c:8a:74:14:1a:a7:15:e4:ff: 02:fc:14:aa:c2:6d:ff:e4:98:01:71:99:c7:ac:ab: 09:25:50:96:1b:b5:41:17:a6:65:f3:bf:86:da:78: 87:90:7e:f3:af:a1:9c:87:59:7f:b4:75:3c:f1:2a: 61:3c:59:86:49:95:c9:cf:5a:09:21:19:0b:e4:48: da:9a:d2:25:53:23:d7:79:50:95:68:6d:b2:2f:d6: 36:0d:2e:19:fb:7f:be:06:5b:58:82:49:82:d5:a5: 82:b4:3f:c1:1d:f2:14:68:bd:44:d5:2f:0d:19:c3: e4:46:ec:2f:de:f3:0f:95:d7:a2:7e:fc:fc:a2:c6: 97:39:db:b3:42:78:ac:9c:9b:10:84:44:d2:b5:bf: e2:48:c7:2e:53:a8:de:09:60:fb:f2:86:ec:d9:2a: a6:e1:63:a0:9c:05:5a:6b:21:3d:c0:b1:2b:b2:01: 0c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:29:49:9A:F7:BD:B7:CA:E5:25:33:73:F4:EE:2B:DE:82:C9:B9:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.56.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:6c:3d:65:fe:4f:c2:9d:53:82:69:81:72:db:01:23:fa:a6: 73:65:82:4b:0c:04:f8:a3:5b:24:ee:c3:a5:0e:78:67:15:d1: 76:95:2e:e1:9d:fa:29:67:6e:57:ca:f1:43:89:3f:80:22:88: 96:0f:ea:cf:13:3d:f0:c3:cc:a0:62:d4:a2:24:90:b1:1c:ba: d0:68:35:12:3d:10:67:bf:95:60:e1:7e:12:b7:35:15:90:06: 41:43:49:0c:c0:37:54:b0:27:ff:29:b7:50:8f:98:0e:22:11: e5:2e:ce:8a:db:68:dc:8b:a3:39:8a:9c:46:65:87:61:62:1a: a8:86:5f:9c:3d:03:7a:52:22:ed:02:fd:03:04:16:d8:d9:b2: 33:e7:60:bc:78:e0:4c:2f:04:51:64:68:16:84:ae:1e:aa:88: 15:91:b2:3a:5b:54:6f:98:0e:89:cd:3d:86:9b:f7:89:1b:15: 73:6f:29:3d:ef:0a:5d:06:48:45:36:38:c2:1d:81:c0:50:44: 40:4e:6e:7b:85:8f:18:d5:55:ba:4c:e7:54:c6:69:e1:a9:88: a4:9d:30:a0:d4:aa:5e:f9:c5:3d:e4:89:c9:d8:58:09:b0:8b: 69:8f:b2:ba:19:64:68:95:57:89:ea:3f:14:50:c4:31:0f:e7: ac:7c:a8:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJBj/MskcdmbkbEJBG7eDwq+KgfUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI3MDAxMDEwWhcNMjYwMjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmIyNzljMjQxODIwMDg1ZGU5MzU2MTc0MGRlOTg4NTNk MDIzZGQ4ODkyNDJhZTM1MDVjZDY5M2U4MzZjYzM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIhC3WpWgeJfrs7sAmvWRmR8lFpE3KIdNqBOJ1rrr79Yae BXevKx31X2Ym8l0DT/c0wcFIXwuiReqX3pAL5W1J39jgQP88bk5AyysqXlNgRwyK dBQapxXk/wL8FKrCbf/kmAFxmcesqwklUJYbtUEXpmXzv4baeIeQfvOvoZyHWX+0 dTzxKmE8WYZJlcnPWgkhGQvkSNqa0iVTI9d5UJVobbIv1jYNLhn7f74GW1iCSYLV pYK0P8Ed8hRovUTVLw0Zw+RG7C/e8w+V16J+/Pyixpc527NCeKycmxCERNK1v+JI xy5TqN4JYPvyhuzZKqbhY6CcBVprIT3AsSuyAQxdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/ylJmve9t8rlJTNz9O4r3oLJuZcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4YWY5MDAyLTZkOWMtNGE5Ny1iNDEyLTQxMTQwYTU5NmRjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjljgwDQYJKoZIhvcNAQELBQADggEBAE9sPWX+T8KdU4JpgXLbASP6pnNl gksMBPijWyTuw6UOeGcV0XaVLuGd+ilnblfK8UOJP4AiiJYP6s8TPfDDzKBi1KIk kLEcutBoNRI9EGe/lWDhfhK3NRWQBkFDSQzAN1SwJ/8pt1CPmA4iEeUuzorbaNyL ozmKnEZlh2FiGqiGX5w9A3pSIu0C/QMEFtjZsjPnYLx44EwvBFFkaBaErh6qiBWR sjpbVG+YDonNPYab94kbFXNvKT3vCl0GSEU2OMIdgcBQREBObnuFjxjVVbpM51TG aeGpiKSdMKDUql75xT3kicnYWAmwi2mPsroZZGiVV4nqPxRQxDEP56x8qCM= -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:51 2025 by rpki-client