This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f50142f-30d1-46b9-9b4f-e4f3ceb03e3b.roa File: 9f50142f-30d1-46b9-9b4f-e4f3ceb03e3b.roa (raw, json) Hash identifier: 5S/waFrDjsgFdNElqRoEf8lxnF+gWLGuNyd0FQNLN2Q= Subject key identifier: 41:33:D1:1F:E8:BA:62:A1:91:A6:DD:5B:F9:85:5C:2C:98:2C:6A:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 113219D75558BF00F0295B7EC802C6D921ADF33C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f50142f-30d1-46b9-9b4f-e4f3ceb03e3b.roa Signing time: Wed 03 Dec 2025 00:50:14 +0000 ROA not before: Wed 03 Dec 2025 00:50:14 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:32:19:d7:55:58:bf:00:f0:29:5b:7e:c8:02:c6:d9:21:ad:f3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 00:50:14 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=48ba71bcf1ce3d75ea0edc652896f953f8ab94304ae0eceb4dc6a2f1159d4f66, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:78:81:af:8a:22:5a:ce:16:df:a4:a6:e4: 84:91:52:8c:f5:0a:1a:da:3a:3b:5e:43:d9:6e:7d: a1:ce:ec:91:5c:bf:ac:ff:55:b9:fc:85:93:e1:e9: d0:5a:5e:cc:33:21:6a:67:b8:fc:82:45:77:15:eb: cc:99:b8:12:50:ee:b0:76:ee:02:26:16:ce:74:36: d2:68:5d:ad:a9:13:ef:ac:21:4b:08:61:46:e2:bb: ed:e8:ca:e2:56:e4:75:a2:b5:e2:7d:23:37:8d:0b: e9:ad:cf:af:55:f9:dc:86:e8:42:8c:98:e0:40:e1: 24:a0:ab:bf:ce:8a:70:c8:50:a9:ac:da:61:60:32: 38:fa:6b:82:ea:a0:77:6d:79:1b:16:aa:b6:7d:78: c0:50:59:ba:ee:6e:cf:3f:29:27:c9:f6:3a:69:94: f4:4a:34:1e:1b:bd:71:97:b8:d4:9e:6f:b0:d4:d3: 85:a0:44:7e:e5:ef:60:fd:80:1a:02:d3:78:63:68: 38:42:ff:47:76:da:aa:6f:f3:17:2b:b1:82:a6:f3: 7a:51:83:c0:a1:23:4f:dd:11:1f:63:54:60:5a:17: 4d:21:ba:fd:0b:67:ad:85:20:8a:ca:90:02:71:0f: 34:99:e1:0c:cb:60:4e:b1:1f:03:fd:ac:9a:a9:8c: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:33:D1:1F:E8:BA:62:A1:91:A6:DD:5B:F9:85:5C:2C:98:2C:6A:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f50142f-30d1-46b9-9b4f-e4f3ceb03e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.109.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:0b:85:72:78:30:76:7f:bb:21:4e:7c:b3:9e:40:b0:4e:a6: a0:8c:cf:d2:4b:c1:ab:28:75:7f:1f:52:1e:c5:79:3d:61:14: 97:0e:79:39:b9:47:12:f3:a3:12:8d:be:33:28:40:51:6d:e0: 99:67:3b:e0:30:f0:67:a9:9b:8c:f7:58:3f:a5:3a:b6:c5:d5: 98:fa:99:21:33:e1:d5:7a:45:d4:7c:25:5e:a2:35:ff:56:b4: 9d:2c:05:1d:03:88:86:69:84:b1:4b:15:f5:6a:b6:14:cb:71: f9:e0:28:6f:3f:54:0a:57:29:9f:c1:8a:4c:fe:f6:26:51:f6: f7:c1:cd:15:bf:0e:ce:e8:ed:f4:d6:13:27:63:a0:86:a8:3d: 18:6b:66:17:bc:b5:09:e0:08:1d:3f:7b:2d:6c:0b:91:2d:16: b3:5b:03:3b:9f:92:fa:d6:40:6b:34:e4:0c:65:0c:a1:f8:0f: 9b:4f:3f:57:4a:b9:aa:75:e5:04:c8:df:7a:c7:71:ee:5a:b0: b4:ef:bd:bb:4c:40:28:41:67:03:6d:4b:7c:f9:99:f5:e5:71: ad:f1:d2:67:d1:4a:77:ac:e9:4f:b0:d9:92:ff:85:fe:c1:af: b3:90:bc:da:95:de:c3:c2:5b:c8:56:2d:a7:6a:f5:19:5b:b4: d4:3c:0b:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUETIZ11VYvwDwKVt+yALG2SGt8zwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDA1MDE0WhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OGJhNzFiY2YxY2UzZDc1ZWEwZWRjNjUyODk2Zjk1M2Y4 YWI5NDMwNGFlMGVjZWI0ZGM2YTJmMTE1OWQ0ZjY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaA3iBr4oiWs4W36Sm5ISRUoz1ChraOjteQ9lufaHO7JFc v6z/Vbn8hZPh6dBaXswzIWpnuPyCRXcV68yZuBJQ7rB27gImFs50NtJoXa2pE++s IUsIYUbiu+3oyuJW5HWiteJ9IzeNC+mtz69V+dyG6EKMmOBA4SSgq7/OinDIUKms 2mFgMjj6a4LqoHdteRsWqrZ9eMBQWbrubs8/KSfJ9jpplPRKNB4bvXGXuNSeb7DU 04WgRH7l72D9gBoC03hjaDhC/0d22qpv8xcrsYKm83pRg8ChI0/dER9jVGBaF00h uv0LZ62FIIrKkAJxDzSZ4QzLYE6xHwP9rJqpjF5/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQTPRH+i6YqGRpt1b+YVcLJgsaskwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmNTAxNDJmLTMwZDEtNDZiOS05YjRmLWU0ZjNjZWIwM2UzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmG0wDQYJKoZIhvcNAQELBQADggEBAA8LhXJ4MHZ/uyFOfLOeQLBOpqCM z9JLwasodX8fUh7FeT1hFJcOeTm5RxLzoxKNvjMoQFFt4JlnO+Aw8Gepm4z3WD+l OrbF1Zj6mSEz4dV6RdR8JV6iNf9WtJ0sBR0DiIZphLFLFfVqthTLcfngKG8/VApX KZ/Bikz+9iZR9vfBzRW/Ds7o7fTWEydjoIaoPRhrZhe8tQngCB0/ey1sC5EtFrNb AzufkvrWQGs05AxlDKH4D5tPP1dKuap15QTI33rHce5asLTvvbtMQChBZwNtS3z5 mfXlca3x0mfRSnes6U+w2ZL/hf7Br7OQvNqV3sPCW8hWLadq9RlbtNQ8Czk= -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:29 2025 by rpki-client