This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98c01ba7-e498-4554-afa3-0957c093e390.roa File: 98c01ba7-e498-4554-afa3-0957c093e390.roa (raw, json) Hash identifier: zS7rbswkg/adG6mVccpvW7p1xShp9MPK+5Q2aXeLxD8= Subject key identifier: 61:95:D0:6E:97:D8:91:88:24:10:B3:0D:AD:56:34:D7:C4:55:2B:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79EDECCE9ADF2FF5D9478775EC906153161B32C6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98c01ba7-e498-4554-afa3-0957c093e390.roa Signing time: Tue 25 Nov 2025 00:31:20 +0000 ROA not before: Tue 25 Nov 2025 00:31:20 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ed:ec:ce:9a:df:2f:f5:d9:47:87:75:ec:90:61:53:16:1b:32:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:31:20 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=6b5fc0b8843625a8ca9cc191b078e7949f81f4ead9d7cd75ab338745664c372a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:0e:62:58:b4:8f:8e:5f:fa:5c:34:ac:05: 84:b7:a6:e8:e7:74:31:56:42:6b:e4:54:49:93:1d: af:a0:ae:5f:0a:82:5d:dc:08:38:51:84:0d:4b:3b: 3e:52:59:40:71:d6:5c:e1:5e:2e:2a:c6:ad:39:61: a1:32:35:0a:da:7a:52:14:4f:9c:78:46:20:6b:7c: bb:e8:3b:c8:fa:95:b6:72:39:03:4e:56:d4:a5:f1: cb:62:a7:8f:a5:64:74:c7:44:ae:a8:cf:cb:9a:a0: eb:27:ef:1e:78:9f:56:b6:00:f5:27:01:61:a9:ce: bd:c1:b2:03:5b:7c:0a:29:12:c3:e3:64:f4:1e:eb: c0:e2:15:8a:01:06:d3:88:b5:13:82:e5:3a:33:92: f8:84:01:dd:a8:45:e5:b5:d5:b8:f3:6a:3b:59:97: 74:09:8d:75:3f:3c:af:e4:a2:3a:6f:6b:31:05:db: 12:75:72:fa:3a:9f:c8:57:04:d2:2d:31:63:60:17: 26:b8:c4:fc:c2:7a:f2:25:ad:bf:4b:84:70:44:a1: cb:fb:19:4e:77:06:92:53:0a:3f:9f:1b:db:e9:01: b3:ca:9e:58:39:2c:55:1b:95:d4:44:b5:87:9e:b9: 70:00:12:d2:85:16:51:ad:ae:46:99:b7:79:75:41: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:95:D0:6E:97:D8:91:88:24:10:B3:0D:AD:56:34:D7:C4:55:2B:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98c01ba7-e498-4554-afa3-0957c093e390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.0.0/20 Signature Algorithm: sha256WithRSAEncryption bf:f1:dc:40:14:86:52:be:1c:7a:be:60:c7:51:bb:74:bf:19: 37:7a:69:9a:4e:8c:8a:ca:99:29:a2:ca:25:5a:56:37:7b:77: 80:b5:d0:b7:01:ab:c5:64:f9:5a:d7:8c:51:bb:21:87:00:4b: e3:78:01:b3:4e:c5:e5:37:60:cb:18:72:95:b9:ff:5c:db:ba: 32:7e:2f:70:1b:0e:a7:bb:f8:e1:24:f5:ea:52:37:52:ee:cd: 98:ec:f6:16:20:fd:53:df:b1:d5:43:18:31:e9:40:af:f5:e1: f3:b2:2e:6f:07:a5:1c:02:7d:08:a9:12:30:6b:79:d9:d4:90: 7f:9f:04:8f:3b:48:9a:e6:78:66:37:16:1b:37:58:8d:a4:e6: 0e:8d:cc:25:34:12:8d:e8:46:3f:f4:17:3d:d8:7f:32:d9:db: c0:c8:01:8c:ed:be:84:09:00:78:3f:8d:d6:64:b1:c9:62:f5: 2c:ba:ed:16:c0:cf:e9:77:e2:2a:63:77:6a:62:75:2f:73:6f: b2:96:4a:87:58:05:02:af:e1:a0:07:fb:f7:92:a1:01:f6:42: 4d:1c:83:c7:42:6e:d5:6e:3f:3f:78:1c:f0:7f:a9:d0:b5:ab: 63:41:7d:f3:9a:c7:53:51:51:01:24:48:79:02:a4:1c:67:40: 6f:5d:98:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUee3szprfL/XZR4d17JBhUxYbMsYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDAzMTIwWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjVmYzBiODg0MzYyNWE4Y2E5Y2MxOTFiMDc4ZTc5NDlm ODFmNGVhZDlkN2NkNzVhYjMzODc0NTY2NGMzNzJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb+Q5iWLSPjl/6XDSsBYS3pujndDFWQmvkVEmTHa+grl8K gl3cCDhRhA1LOz5SWUBx1lzhXi4qxq05YaEyNQraelIUT5x4RiBrfLvoO8j6lbZy OQNOVtSl8ctip4+lZHTHRK6oz8uaoOsn7x54n1a2APUnAWGpzr3BsgNbfAopEsPj ZPQe68DiFYoBBtOItROC5TozkviEAd2oReW11bjzajtZl3QJjXU/PK/kojpvazEF 2xJ1cvo6n8hXBNItMWNgFya4xPzCevIlrb9LhHBEocv7GU53BpJTCj+fG9vpAbPK nlg5LFUbldREtYeeuXAAEtKFFlGtrkaZt3l1QdkHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYZXQbpfYkYgkELMNrVY018RVK1YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4YzAxYmE3LWU0OTgtNDU1NC1hZmEzLTA5NTdjMDkzZTM5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgAAwDQYJKoZIhvcNAQELBQADggEBAL/x3EAUhlK+HHq+YMdRu3S/GTd6 aZpOjIrKmSmiyiVaVjd7d4C10LcBq8Vk+VrXjFG7IYcAS+N4AbNOxeU3YMsYcpW5 /1zbujJ+L3AbDqe7+OEk9epSN1LuzZjs9hYg/VPfsdVDGDHpQK/14fOyLm8HpRwC fQipEjBrednUkH+fBI87SJrmeGY3Fhs3WI2k5g6NzCU0Eo3oRj/0Fz3YfzLZ28DI AYztvoQJAHg/jdZkscli9Sy67RbAz+l34ipjd2pidS9zb7KWSodYBQKv4aAH+/eS oQH2Qk0cg8dCbtVuPz94HPB/qdC1q2NBffOax1NRUQEkSHkCpBxnQG9dmN0= -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:09 2025 by rpki-client