This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/896417db-6a40-401f-a216-b1bd144effa3.roa File: 896417db-6a40-401f-a216-b1bd144effa3.roa (raw, json) Hash identifier: jdkv/Cn64m8aq+/27TW5kUCrqSO+sedWxNZP7kjPFAc= Subject key identifier: 5C:39:0F:21:AB:4C:8A:35:90:03:D5:9E:CB:39:26:CB:A3:0D:ED:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31DF5F0481FFC7AFC9B0034410A63E0504005194 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/896417db-6a40-401f-a216-b1bd144effa3.roa Signing time: Thu 20 Nov 2025 00:10:03 +0000 ROA not before: Thu 20 Nov 2025 00:10:03 +0000 ROA not after: Wed 18 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:df:5f:04:81:ff:c7:af:c9:b0:03:44:10:a6:3e:05:04:00:51:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 20 00:10:03 2025 GMT Not After : Feb 18 23:59:59 2026 GMT Subject: serialNumber=55a395435ce59c0cf8d36208157ad21608af05a3445dec7d4e178c497aad9337, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:d0:6b:65:e0:75:a3:7f:0f:9f:0a:87:3d: 5a:5e:cb:6b:ca:d4:e4:7c:90:41:67:c2:a5:47:9f: ce:8d:3e:ed:aa:34:23:55:e2:29:88:e0:4a:26:91: b2:77:e7:8e:bf:a9:43:98:10:f5:e2:d4:d6:91:18: a7:b2:76:84:bd:b5:77:22:e5:b2:ce:5b:02:63:9d: 3a:ba:de:dc:0b:a5:fe:43:41:27:01:17:9a:7a:65: f0:77:d7:f3:11:b0:36:07:93:ef:e7:ca:9e:63:13: d3:80:26:26:fe:b3:33:6c:62:bd:2e:04:f1:7a:f2: 7d:12:41:f0:20:f7:51:52:a6:4c:c7:bb:0b:2c:d3: ff:b1:ea:a2:14:da:63:45:dc:e2:8a:fa:ee:4a:b8: f6:98:4e:35:e1:e8:eb:86:62:7f:39:11:ee:3d:c3: 7a:52:92:8c:fe:c3:43:59:d7:d0:06:73:7d:5e:2a: 82:15:a2:98:6c:3e:1f:2f:7e:0d:0a:03:e7:a8:7f: 80:5b:8d:96:d7:8d:24:cd:57:0f:14:a3:e5:6d:19: 4f:08:30:7c:44:6c:77:0e:d4:8e:bf:6d:24:c8:4a: 56:af:59:2f:51:ce:bd:bc:08:5a:6d:05:98:02:e6: 1a:b0:ce:5b:44:a1:c0:10:04:50:03:27:c9:cc:32: e1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:39:0F:21:AB:4C:8A:35:90:03:D5:9E:CB:39:26:CB:A3:0D:ED:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/896417db-6a40-401f-a216-b1bd144effa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.99.0/24 Signature Algorithm: sha256WithRSAEncryption ad:f6:37:31:9c:9e:c6:cd:da:d7:bf:26:63:3e:41:0a:fd:21: 6e:6e:40:71:14:ee:5d:47:1a:15:8e:90:17:e4:2a:c0:10:1b: 72:7a:6e:7d:07:35:cf:54:13:db:d6:c0:9c:13:06:28:1e:e4: 50:fa:a2:e1:44:84:d0:8d:a0:71:71:65:f7:1d:68:ae:a5:c2: 2b:e4:63:87:d9:40:1b:81:7e:7b:b8:75:b5:6e:9e:08:2b:2e: 64:f7:c5:f8:12:ec:62:bf:66:6c:15:96:e4:2b:e7:16:53:ba: d7:ed:72:f8:ea:ed:92:b9:29:45:0f:ec:45:f9:ff:4b:ed:34: 62:8a:a3:12:3d:25:46:33:3c:1c:76:81:f1:21:4c:45:60:69: 0a:92:b8:71:85:a8:6a:f7:73:ac:c9:78:90:2f:0c:0a:ac:47: d3:c0:f7:bf:55:df:11:a7:26:a5:02:8e:a0:7e:75:8a:d1:c2: e8:88:89:df:66:36:96:8f:60:d9:69:54:1e:19:53:81:56:09: 2e:47:bd:36:c0:83:08:61:92:c0:ac:35:24:1f:87:46:d6:71: 5d:5a:8a:04:65:99:5d:20:dc:8e:a0:55:a5:fc:94:04:7f:3b: c1:c2:77:97:5d:37:b6:3f:ab:83:d9:6b:09:d9:3d:e1:7a:0a: b2:98:0d:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMd9fBIH/x6/JsANEEKY+BQQAUZQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDAxMDAzWhcNMjYwMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWEzOTU0MzVjZTU5YzBjZjhkMzYyMDgxNTdhZDIxNjA4 YWYwNWEzNDQ1ZGVjN2Q0ZTE3OGM0OTdhYWQ5MzM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeMNBrZeB1o38PnwqHPVpey2vK1OR8kEFnwqVHn86NPu2q NCNV4imI4EomkbJ3546/qUOYEPXi1NaRGKeydoS9tXci5bLOWwJjnTq63twLpf5D QScBF5p6ZfB31/MRsDYHk+/nyp5jE9OAJib+szNsYr0uBPF68n0SQfAg91FSpkzH uwss0/+x6qIU2mNF3OKK+u5KuPaYTjXh6OuGYn85Ee49w3pSkoz+w0NZ19AGc31e KoIVophsPh8vfg0KA+eof4BbjZbXjSTNVw8Uo+VtGU8IMHxEbHcO1I6/bSTISlav WS9Rzr28CFptBZgC5hqwzltEocAQBFADJ8nMMuEdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXDkPIatMijWQA9Weyzkmy6MN7eswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5NjQxN2RiLTZhNDAtNDAxZi1hMjE2LWIxYmQxNDRlZmZhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GMwDQYJKoZIhvcNAQELBQADggEBAK32NzGcnsbN2te/JmM+QQr9IW5u QHEU7l1HGhWOkBfkKsAQG3J6bn0HNc9UE9vWwJwTBige5FD6ouFEhNCNoHFxZfcd aK6lwivkY4fZQBuBfnu4dbVunggrLmT3xfgS7GK/ZmwVluQr5xZTutftcvjq7ZK5 KUUP7EX5/0vtNGKKoxI9JUYzPBx2gfEhTEVgaQqSuHGFqGr3c6zJeJAvDAqsR9PA 979V3xGnJqUCjqB+dYrRwuiIid9mNpaPYNlpVB4ZU4FWCS5HvTbAgwhhksCsNSQf h0bWcV1aigRlmV0g3I6gVaX8lAR/O8HCd5ddN7Y/q4PZawnZPeF6CrKYDSs= -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:46 2025 by rpki-client