This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa File: 987ee270-8da2-44b1-b542-2a58beb5c981.roa (raw, json) Hash identifier: XZKMW0+nvEj1PJ2nvRk0P2H4S1Iv8DAjPzM1bhCYCDI= Subject key identifier: D1:DE:4A:E7:98:97:46:22:2F:F3:D7:B9:9B:FF:92:B6:50:AD:3C:C4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0853D5E7F1D981EBAF92FED0CB0E33830CA74D48 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa Signing time: Tue 25 Nov 2025 00:10:08 +0000 ROA not before: Tue 25 Nov 2025 00:10:08 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:53:d5:e7:f1:d9:81:eb:af:92:fe:d0:cb:0e:33:83:0c:a7:4d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:10:08 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=86dda77e3bc7f06b8a043725299190dc0a0011c8bd744e59ac42004fc11c1138, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:af:19:14:13:84:62:f8:b2:c7:9a:d2:f0: da:8e:79:b7:18:08:06:d6:59:fb:4f:96:65:fd:b8: b7:48:73:cf:05:98:18:9d:be:a8:04:6d:4b:c9:d3: 46:b8:ec:fb:a3:bd:2c:cc:71:40:e9:0a:f2:79:cc: a6:43:b1:03:96:55:92:6c:4b:6e:18:18:c4:ce:de: a7:12:e3:df:8f:28:2e:39:7a:af:c1:1f:1e:b5:97: 66:be:1c:2e:2f:54:57:3e:2b:13:ee:2b:8e:f4:a0: 4e:f3:c6:88:8c:3f:f1:df:08:bc:fa:08:56:41:4a: 38:17:8b:53:f4:e3:dc:3b:e0:f4:2b:bb:51:ff:ee: d0:e3:65:32:12:c1:9c:ca:a2:c4:9d:aa:27:b5:f2: 66:aa:02:fe:29:50:84:3a:e7:96:f5:f9:0d:6f:da: 1c:d1:f3:a1:83:c9:79:bf:e6:9d:78:3b:58:9f:4d: 1d:7c:ac:7a:27:03:96:f2:b9:7e:ff:03:77:bb:08: 0f:65:14:ce:a6:52:bd:67:e4:97:f0:10:ce:1e:07: b2:05:57:73:be:f7:b1:77:a0:f6:26:2e:ff:ae:a9: a0:f3:de:23:d7:07:16:1a:ee:d6:ae:58:92:45:2c: 2d:ba:60:70:71:42:49:ec:9d:89:52:b3:0e:70:64: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DE:4A:E7:98:97:46:22:2F:F3:D7:B9:9B:FF:92:B6:50:AD:3C:C4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.96.0/20 Signature Algorithm: sha256WithRSAEncryption 34:ce:f2:9a:f3:f5:80:74:62:78:40:d5:25:ba:a8:9e:fe:9a: 3a:83:b8:5b:8a:08:8e:bb:57:e7:f3:e5:5e:da:cf:ad:4c:ea: 73:3a:11:30:ba:2a:3e:24:e1:18:31:de:04:6b:41:ea:90:fa: 09:26:44:41:ab:2a:43:85:a9:f7:9c:1a:47:e4:5b:39:0f:1b: e7:b7:26:93:e9:a8:27:e9:ba:b2:c8:5e:71:54:a7:36:a6:01: a2:45:0a:40:18:d3:c7:87:6a:2b:36:21:76:41:fb:d1:3f:1d: 0f:22:c1:03:40:65:29:01:ca:df:b8:0a:30:07:49:24:9c:06: 5e:fa:2b:71:ad:ad:f3:7a:92:69:29:ad:4a:37:09:95:3b:f6: ba:85:fe:ea:e3:e0:a0:17:3f:88:63:2c:6c:d2:b0:23:5c:e9: 66:94:a7:90:63:16:12:70:f4:39:d6:1c:52:c6:25:2e:a1:41: cc:8f:27:07:e8:18:51:8a:09:e9:1f:ca:38:80:28:7d:34:d6: 03:09:b7:ae:5f:ac:dc:d7:42:f3:2a:db:e5:db:3f:db:0f:0e: be:e8:a2:31:69:77:47:01:d6:06:2f:bb:32:9c:73:b1:ee:9b: cd:80:09:f0:4d:5d:55:f8:a1:39:f8:cb:9d:2a:a0:23:d0:d2: f5:39:d6:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCFPV5/HZgeuvkv7Qyw4zgwynTUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDAxMDA4WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmRkYTc3ZTNiYzdmMDZiOGEwNDM3MjUyOTkxOTBkYzBh MDAxMWM4YmQ3NDRlNTlhYzQyMDA0ZmMxMWMxMTM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClZq8ZFBOEYviyx5rS8NqOebcYCAbWWftPlmX9uLdIc88F mBidvqgEbUvJ00a47PujvSzMcUDpCvJ5zKZDsQOWVZJsS24YGMTO3qcS49+PKC45 eq/BHx61l2a+HC4vVFc+KxPuK470oE7zxoiMP/HfCLz6CFZBSjgXi1P049w74PQr u1H/7tDjZTISwZzKosSdqie18maqAv4pUIQ655b1+Q1v2hzR86GDyXm/5p14O1if TR18rHonA5byuX7/A3e7CA9lFM6mUr1n5JfwEM4eB7IFV3O+97F3oPYmLv+uqaDz 3iPXBxYa7tauWJJFLC26YHBxQknsnYlSsw5wZNQzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0d5K55iXRiIv89e5m/+StlCtPMQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4N2VlMjcwLThkYTItNDRiMS1iNTQyLTJhNThiZWI1Yzk4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgGAwDQYJKoZIhvcNAQELBQADggEBADTO8prz9YB0YnhA1SW6qJ7+mjqD uFuKCI67V+fz5V7az61M6nM6ETC6Kj4k4Rgx3gRrQeqQ+gkmREGrKkOFqfecGkfk WzkPG+e3JpPpqCfpurLIXnFUpzamAaJFCkAY08eHais2IXZB+9E/HQ8iwQNAZSkB yt+4CjAHSSScBl76K3GtrfN6kmkprUo3CZU79rqF/urj4KAXP4hjLGzSsCNc6WaU p5BjFhJw9DnWHFLGJS6hQcyPJwfoGFGKCekfyjiAKH001gMJt65frNzXQvMq2+Xb P9sPDr7oojFpd0cB1gYvuzKcc7Hum82ACfBNXVX4oTn4y50qoCPQ0vU51hQ= -----END CERTIFICATE-----Generated at Sat Dec 6 21:59:10 2025 by rpki-client