This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa File: 975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa (raw, json) Hash identifier: QyIp8wSE4n5AZOSA5Yz+U+DnUG//+tmiSWgBpXYkQKw= Subject key identifier: 8D:DF:1B:E9:15:0F:A4:2D:12:53:4F:51:A5:76:FA:45:86:03:73:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F0AEF62E343AB834C31A02D906351458E2CAC4E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa Signing time: Thu 20 Nov 2025 00:01:19 +0000 ROA not before: Thu 20 Nov 2025 00:01:19 +0000 ROA not after: Wed 18 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 206.217.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0a:ef:62:e3:43:ab:83:4c:31:a0:2d:90:63:51:45:8e:2c:ac:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 20 00:01:19 2025 GMT Not After : Feb 18 23:59:59 2026 GMT Subject: serialNumber=dbffe6b833950c3de84d16e4b3e00222572d0522f6452542621e1d0be862144c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:a8:f7:72:55:19:ad:39:4d:99:64:bb:11: 44:0a:1e:cc:16:9e:6d:f6:b8:71:d9:70:a0:ca:df: 9b:ad:b1:d2:22:5f:b3:e9:09:1b:d6:44:b1:0b:30: 6d:f3:35:11:4b:83:25:20:88:80:80:66:5d:10:5c: ee:d6:50:11:98:43:da:de:c8:74:e1:07:3a:78:65: 62:39:f9:b2:c0:bd:80:c2:53:2f:78:a1:8b:d1:73: c3:a9:fe:7e:c3:e7:fd:9c:dc:ca:c8:fc:7b:03:ca: 4f:a5:90:2b:14:b4:93:48:49:9b:76:90:6b:83:fd: 5d:18:09:68:20:93:0f:9d:b1:22:1f:83:5e:f4:cd: 05:a7:39:24:b3:6e:94:5a:b3:3a:70:38:07:e3:9c: d9:8f:e8:8b:a9:1e:2b:ba:67:23:94:32:e5:2d:89: 3b:1b:20:f3:4b:62:39:40:80:06:2b:2a:b8:ab:9a: c5:ee:cf:73:89:c8:f2:b1:a9:06:4c:96:64:11:10: ef:cb:c9:9a:58:ad:d4:9e:a9:5d:00:3c:7c:47:52: 1b:d8:ad:c7:14:51:d6:37:d9:7f:d7:32:42:1f:d5: fb:db:ef:7c:9b:e6:4d:08:58:34:6a:04:f9:0e:70: 52:19:56:c5:1c:38:7a:d2:f2:99:14:34:31:16:88: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DF:1B:E9:15:0F:A4:2D:12:53:4F:51:A5:76:FA:45:86:03:73:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/975a98ba-c437-4d65-bf26-a46d8d5d49bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.217.32.0/19 Signature Algorithm: sha256WithRSAEncryption 36:13:72:65:a0:e0:ec:d3:17:86:1f:9a:69:46:38:85:f9:01: b9:6d:33:1f:3e:bf:36:56:60:02:2b:2f:fe:c5:36:8f:9f:e4: 6b:5f:51:e0:fc:ea:0c:0d:2b:90:64:8a:e0:96:3e:ca:5f:4c: 4c:71:85:7d:fd:17:81:19:e5:4b:3b:58:d0:ef:e5:05:9f:32: 2b:52:2e:26:bd:9e:02:84:14:f7:71:3a:c7:dc:37:96:09:fc: d0:d4:02:1f:b4:38:a5:a2:50:de:9c:ae:da:9f:b8:2e:ec:5d: 7c:07:96:19:49:11:62:f9:93:16:f6:ef:33:ec:c4:c0:50:9e: 60:7e:9e:59:f8:36:36:cf:38:42:c4:a1:96:f0:0f:0b:93:1d: 2a:8f:cc:29:e6:05:db:fd:e0:fc:be:57:b7:42:9f:0d:3d:54: 99:b3:93:a6:d9:94:1a:26:7e:00:a5:5b:68:54:c2:d4:d4:9b: 87:ac:a7:8b:08:32:66:1e:79:00:ff:e3:aa:3b:0b:14:8e:5c: 70:19:a7:41:eb:4b:da:41:09:15:0e:25:70:16:24:94:02:3e: 48:ff:08:4c:bc:35:f8:a9:bf:31:50:f3:e8:02:7a:16:11:43: 83:b6:47:71:7c:36:da:8e:26:8d:c3:51:87:03:20:d4:91:9f: b9:6b:8b:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDwrvYuNDq4NMMaAtkGNRRY4srE4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDAwMTE5WhcNMjYwMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmZmZTZiODMzOTUwYzNkZTg0ZDE2ZTRiM2UwMDIyMjU3 MmQwNTIyZjY0NTI1NDI2MjFlMWQwYmU4NjIxNDRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1faj3clUZrTlNmWS7EUQKHswWnm32uHHZcKDK35utsdIi X7PpCRvWRLELMG3zNRFLgyUgiICAZl0QXO7WUBGYQ9reyHThBzp4ZWI5+bLAvYDC Uy94oYvRc8Op/n7D5/2c3MrI/HsDyk+lkCsUtJNISZt2kGuD/V0YCWggkw+dsSIf g170zQWnOSSzbpRaszpwOAfjnNmP6IupHiu6ZyOUMuUtiTsbIPNLYjlAgAYrKrir msXuz3OJyPKxqQZMlmQREO/LyZpYrdSeqV0APHxHUhvYrccUUdY32X/XMkIf1fvb 73yb5k0IWDRqBPkOcFIZVsUcOHrS8pkUNDEWiE/DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjd8b6RUPpC0SU09RpXb6RYYDcykwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3NWE5OGJhLWM0MzctNGQ2NS1iZjI2LWE0NmQ4ZDVkNDliZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXO2SAwDQYJKoZIhvcNAQELBQADggEBADYTcmWg4OzTF4YfmmlGOIX5Ablt Mx8+vzZWYAIrL/7FNo+f5GtfUeD86gwNK5BkiuCWPspfTExxhX39F4EZ5Us7WNDv 5QWfMitSLia9ngKEFPdxOsfcN5YJ/NDUAh+0OKWiUN6crtqfuC7sXXwHlhlJEWL5 kxb27zPsxMBQnmB+nln4NjbPOELEoZbwDwuTHSqPzCnmBdv94Py+V7dCnw09VJmz k6bZlBomfgClW2hUwtTUm4esp4sIMmYeeQD/46o7CxSOXHAZp0HrS9pBCRUOJXAW JJQCPkj/CEy8NfipvzFQ8+gCehYRQ4O2R3F8NtqOJo3DUYcDINSRn7lri40= -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:29 2025 by rpki-client