This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa File: 9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa (raw, json) Hash identifier: x9IPC5u6xD8LkteR4GAWRy2C2MiaQifDwvkSbNUw4mo= Subject key identifier: 55:29:3D:31:16:2B:96:9A:D7:8C:DE:E5:95:98:5E:8D:43:90:77:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CF56A60657EB3649AF26286914F437BBCEB248F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa Signing time: Sun 30 Nov 2025 00:20:10 +0000 ROA not before: Sun 30 Nov 2025 00:20:10 +0000 ROA not after: Sat 28 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 149.144.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f5:6a:60:65:7e:b3:64:9a:f2:62:86:91:4f:43:7b:bc:eb:24:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 30 00:20:10 2025 GMT Not After : Feb 28 23:59:59 2026 GMT Subject: serialNumber=5c712e295f825091dbc4c087016275654a62877b602e484d01c9ba82c56e24a4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:41:18:7b:1c:83:b2:74:fa:c9:b3:3b:f5: 3e:b5:16:9f:7e:ff:32:22:e9:1a:eb:2d:cc:ef:71: a1:07:9b:4c:e7:30:5d:42:16:80:56:ab:d5:11:dc: 95:aa:4e:f8:26:d1:52:95:6c:10:d3:0e:05:80:60: ec:78:38:82:05:79:3a:12:22:62:94:fd:81:2d:04: 5c:bc:39:bf:b6:69:02:84:61:ee:d2:3d:6c:35:a6: 8d:46:41:da:aa:b4:eb:5e:df:94:45:9d:29:02:ce: 89:83:b9:e3:6c:3a:c4:7a:f7:fc:e0:7a:db:79:67: c2:0b:88:5b:e1:98:ab:57:fe:8b:76:09:5e:e9:0e: f6:ef:85:1f:55:30:f5:52:bb:63:fb:9a:63:c5:bd: 66:06:8a:a5:5d:90:d0:a5:fb:e6:48:da:17:f7:74: c5:10:22:36:df:8f:7c:0e:8b:74:fa:63:65:36:c4: ce:24:6a:8f:45:db:14:9a:76:f0:8d:4d:f0:f0:1a: a4:e5:2c:08:37:4a:2c:01:27:f4:cf:46:e1:ec:1c: da:4f:7b:4a:7a:64:8f:52:f1:ce:1c:05:c5:cd:ed: 62:78:04:33:11:98:31:3f:4e:94:10:ea:de:f8:aa: fd:81:db:47:bb:a6:30:8f:d4:ed:05:11:c6:bb:8e: 0c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:29:3D:31:16:2B:96:9A:D7:8C:DE:E5:95:98:5E:8D:43:90:77:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9dbc247d-8b36-439c-91d1-b8d7a94dd73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.144.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:24:5f:a1:e3:1b:f5:69:ff:0e:ff:00:09:77:5c:42:03:54: 6d:a7:05:4d:1a:32:56:1d:53:fc:60:ff:e1:62:cc:47:98:8a: eb:28:67:1e:99:c4:f1:d5:09:5f:ee:8b:0f:c6:c8:43:d4:b6: 5b:40:4c:8a:51:91:49:b5:cc:5a:d0:f7:e0:62:e2:15:f5:cf: a5:13:b5:4a:e9:56:f9:77:ff:ed:84:bb:90:b7:5e:71:b8:44: 13:28:5e:00:0b:2b:2f:75:79:8f:3d:33:fa:b7:8d:1c:58:9b: 1e:dd:ce:f7:01:70:cb:f1:2a:16:23:65:04:d4:73:09:0c:cf: 21:78:e8:b8:f0:21:12:0a:2a:c6:e0:77:29:0b:be:f1:44:31: 7c:d8:0c:3d:51:ff:68:05:f5:43:14:35:5c:5a:dc:ed:1d:22: b2:e5:cb:04:5c:c5:f4:b8:32:d8:40:19:4a:8f:b9:9c:5f:cf: ce:ae:1b:16:ab:3f:66:ba:cd:77:58:13:a0:5c:c5:41:8d:26: 77:de:22:45:a3:df:5d:c6:2f:49:46:d0:54:77:b6:55:51:5d: 0c:db:6c:0b:1d:2a:3f:01:a3:d0:d3:0c:e8:96:36:f2:b1:9f: 72:a8:75:51:f3:56:62:40:d8:98:72:90:74:58:d0:8f:02:52: 07:51:e7:04 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPPVqYGV+s2Sa8mKGkU9De7zrJI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTMwMDAyMDEwWhcNMjYwMjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzcxMmUyOTVmODI1MDkxZGJjNGMwODcwMTYyNzU2NTRh NjI4NzdiNjAyZTQ4NGQwMWM5YmE4MmM1NmUyNGE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC55kEYexyDsnT6ybM79T61Fp9+/zIi6RrrLczvcaEHm0zn MF1CFoBWq9UR3JWqTvgm0VKVbBDTDgWAYOx4OIIFeToSImKU/YEtBFy8Ob+2aQKE Ye7SPWw1po1GQdqqtOte35RFnSkCzomDueNsOsR69/zgett5Z8ILiFvhmKtX/ot2 CV7pDvbvhR9VMPVSu2P7mmPFvWYGiqVdkNCl++ZI2hf3dMUQIjbfj3wOi3T6Y2U2 xM4kao9F2xSadvCNTfDwGqTlLAg3SiwBJ/TPRuHsHNpPe0p6ZI9S8c4cBcXN7WJ4 BDMRmDE/TpQQ6t74qv2B20e7pjCP1O0FEca7jgyrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVSk9MRYrlprXjN7llZhejUOQd6UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkYmMyNDdkLThiMzYtNDM5Yy05MWQxLWI4ZDdhOTRkZDczYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVkDANBgkqhkiG9w0BAQsFAAOCAQEAdiRfoeMb9Wn/Dv8ACXdcQgNUbacF TRoyVh1T/GD/4WLMR5iK6yhnHpnE8dUJX+6LD8bIQ9S2W0BMilGRSbXMWtD34GLi FfXPpRO1SulW+Xf/7YS7kLdecbhEEyheAAsrL3V5jz0z+reNHFibHt3O9wFwy/Eq FiNlBNRzCQzPIXjouPAhEgoqxuB3KQu+8UQxfNgMPVH/aAX1QxQ1XFrc7R0isuXL BFzF9Lgy2EAZSo+5nF/Pzq4bFqs/ZrrNd1gToFzFQY0md94iRaPfXcYvSUbQVHe2 VVFdDNtsCx0qPwGj0NMM6JY28rGfcqh1UfNWYkDYmHKQdFjQjwJSB1HnBA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:35 2025 by rpki-client