This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88a143e4-4dfa-4abc-91f6-2f4002ef5e79.roa File: 88a143e4-4dfa-4abc-91f6-2f4002ef5e79.roa (raw, json) Hash identifier: U8uJu1We3j9pC6GMPO7eRlV26i/jRgw/4536FpMAQB8= Subject key identifier: 8C:CB:FD:A7:A3:91:F9:A3:24:14:30:56:60:C8:4A:CA:E3:16:A8:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 347ECB4749CE1D9A571CD496F0DB61DAA2A540D6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88a143e4-4dfa-4abc-91f6-2f4002ef5e79.roa Signing time: Tue 25 Nov 2025 00:31:15 +0000 ROA not before: Tue 25 Nov 2025 00:31:15 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.212.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7e:cb:47:49:ce:1d:9a:57:1c:d4:96:f0:db:61:da:a2:a5:40:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:31:15 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=4b408efa3657c8cfb050ef9f5670964ee1f6ac18faff8dbea5882d08aa694e37, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:44:64:c3:d0:88:30:7b:11:8d:28:31:c7: 62:14:ce:1b:94:bb:ed:37:4f:95:97:9d:ba:38:c4: 10:4a:81:71:7b:3b:ce:54:d0:95:b7:8e:e3:e0:46: 0b:f7:07:9c:52:13:13:91:1e:83:7f:ea:ee:75:38: a3:89:83:21:74:f7:da:4e:b6:db:f4:fd:cf:34:6e: 00:ce:6a:d8:b3:21:ec:f6:f7:5c:19:b3:4e:6a:da: 96:9c:bb:a0:c8:04:f9:f6:1e:79:58:0e:df:cc:c0: 13:39:dc:8c:88:42:96:77:d2:b3:98:09:17:9e:76: b8:97:0d:7b:c6:fe:59:ad:d7:82:0f:dd:49:f1:7a: 80:3b:76:1a:be:28:79:bb:a6:aa:90:da:af:bf:24: f2:9c:ec:c3:36:c9:dc:c6:61:3a:43:fc:de:5e:03: 65:39:21:33:02:01:6f:c0:d9:2f:68:5a:05:dd:a6: e5:38:c7:ef:08:7c:22:32:4e:de:0c:ca:e3:a1:59: 52:4b:09:f9:3c:ef:51:7f:ac:92:bb:3d:de:ed:a8: 8a:7f:28:5e:a0:2f:c2:c4:09:f6:59:3a:63:23:46: 4e:e1:bf:30:e3:18:d2:c7:a3:c2:d6:e8:d1:60:1d: 3d:72:a5:c9:f4:be:af:b8:3c:94:1c:f8:06:d2:f8: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CB:FD:A7:A3:91:F9:A3:24:14:30:56:60:C8:4A:CA:E3:16:A8:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88a143e4-4dfa-4abc-91f6-2f4002ef5e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.212.128.0/18 Signature Algorithm: sha256WithRSAEncryption 96:4b:30:b2:d8:1d:67:21:be:36:d9:b4:6f:82:60:db:5c:28: 87:ce:1f:52:52:7a:26:42:95:d7:bf:1b:7c:9f:0a:2b:66:55: 09:2e:44:fd:0e:53:c7:cb:7c:46:31:81:6f:f1:86:af:b9:4e: d4:b0:c6:ed:3e:5e:ba:ac:eb:8c:2e:c5:11:ec:5a:87:4a:c0: 7a:e7:33:d2:39:a2:4f:06:68:ee:44:f0:5e:ca:1f:b7:2a:99: a7:17:76:9e:1c:85:76:cf:44:e9:62:26:5f:55:cf:f2:08:9a: 8d:d9:df:c4:10:49:a8:4c:cc:93:e6:39:d5:dc:aa:cb:21:bd: eb:9a:56:dd:3b:08:55:7b:44:ad:dd:38:35:00:b9:ee:d9:20: 38:52:36:af:bc:56:c0:a3:7f:ef:d2:ec:8d:2a:29:e8:00:da: bd:bc:9a:04:99:59:06:d7:f9:4d:fc:4b:a1:9b:93:c9:11:8e: 59:bf:52:8c:0a:30:48:f4:af:d5:00:81:a2:15:51:68:0a:77: c6:0a:6d:c8:5b:13:d0:33:ef:3a:aa:a3:57:1e:ef:28:aa:75: 95:e2:a3:02:c3:a5:a6:6d:6e:dc:cf:98:64:14:20:0b:75:cc: a7:22:5d:9a:b9:79:d3:03:1a:aa:a6:e3:5a:49:79:1e:35:c8: 06:90:ae:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNH7LR0nOHZpXHNSW8Nth2qKlQNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDAzMTE1WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjQwOGVmYTM2NTdjOGNmYjA1MGVmOWY1NjcwOTY0ZWUx ZjZhYzE4ZmFmZjhkYmVhNTg4MmQwOGFhNjk0ZTM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzskRkw9CIMHsRjSgxx2IUzhuUu+03T5WXnbo4xBBKgXF7 O85U0JW3juPgRgv3B5xSExORHoN/6u51OKOJgyF099pOttv0/c80bgDOatizIez2 91wZs05q2pacu6DIBPn2HnlYDt/MwBM53IyIQpZ30rOYCReedriXDXvG/lmt14IP 3UnxeoA7dhq+KHm7pqqQ2q+/JPKc7MM2ydzGYTpD/N5eA2U5ITMCAW/A2S9oWgXd puU4x+8IfCIyTt4MyuOhWVJLCfk871F/rJK7Pd7tqIp/KF6gL8LECfZZOmMjRk7h vzDjGNLHo8LW6NFgHT1ypcn0vq+4PJQc+AbS+FjPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjMv9p6OR+aMkFDBWYMhKyuMWqEswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4YTE0M2U0LTRkZmEtNGFiYy05MWY2LTJmNDAwMmVmNWU3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbY1IAwDQYJKoZIhvcNAQELBQADggEBAJZLMLLYHWchvjbZtG+CYNtcKIfO H1JSeiZClde/G3yfCitmVQkuRP0OU8fLfEYxgW/xhq+5TtSwxu0+Xrqs64wuxRHs WodKwHrnM9I5ok8GaO5E8F7KH7cqmacXdp4chXbPROliJl9Vz/IImo3Z38QQSahM zJPmOdXcqsshveuaVt07CFV7RK3dODUAue7ZIDhSNq+8VsCjf+/S7I0qKegA2r28 mgSZWQbX+U38S6Gbk8kRjlm/UowKMEj0r9UAgaIVUWgKd8YKbchbE9Az7zqqo1ce 7yiqdZXiowLDpaZtbtzPmGQUIAt1zKciXZq5edMDGqqm41pJeR41yAaQrss= -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:09 2025 by rpki-client