This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa File: a3551575-fda8-40cd-a012-2dd98f54a35c.roa (raw, json) Hash identifier: 99S1bUyf4iERte71rLEF/wtWU6ff2t6ek3VoY/RqSDM= Subject key identifier: 9D:40:1A:C4:85:40:06:DE:85:86:D8:8C:A4:6F:27:DC:4C:D2:F7:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 734D451ABD9FA65108FFD0F6ED370ABDBC53C304 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa Signing time: Wed 26 Nov 2025 01:00:09 +0000 ROA not before: Wed 26 Nov 2025 01:00:09 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.13.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4d:45:1a:bd:9f:a6:51:08:ff:d0:f6:ed:37:0a:bd:bc:53:c3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 26 01:00:09 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=570de2a03274d65f1f91780785938dd614c2c88c2db35d6a23b9680c7b5b863a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:94:f7:e6:fa:08:d4:53:22:95:86:1f:36: 59:98:8e:01:88:3f:f2:ee:ac:23:15:67:26:50:98: a0:e4:03:cf:ac:fa:c8:fc:93:32:2c:45:33:0b:39: 6d:b8:a3:87:fe:15:da:a0:a5:99:2d:68:4c:34:45: 83:24:bb:e7:18:f0:8d:54:f1:b9:da:db:39:3f:8b: 7d:4c:71:d8:da:97:a0:d4:39:72:ea:23:48:9a:11: c9:6f:13:23:e9:ee:1a:93:31:eb:4f:4e:4c:97:bc: d2:07:c3:ed:28:cc:f0:24:86:59:9b:75:8a:a7:1e: ed:4c:02:60:8f:39:4c:31:8c:92:46:ca:71:d9:e2: 78:d8:e8:f9:a1:65:84:49:91:25:df:3e:fd:ea:25: ee:61:25:33:19:09:06:2a:0e:a8:65:a2:56:93:c2: c5:f1:26:d4:52:38:b4:20:df:b9:5c:2a:01:20:fd: e5:9a:85:59:79:3d:44:0a:79:0f:8d:7a:18:d0:0d: 57:85:73:e6:e6:9f:93:7b:34:68:e4:da:ef:20:48: a6:8e:f2:33:c5:24:f1:56:15:25:c4:5a:c8:56:49: d3:07:97:dc:d0:08:af:66:03:ae:62:ee:83:16:ee: 99:bc:df:ec:b8:7b:95:89:17:af:07:c3:a7:73:22: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:40:1A:C4:85:40:06:DE:85:86:D8:8C:A4:6F:27:DC:4C:D2:F7:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3551575-fda8-40cd-a012-2dd98f54a35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.13.96.0/19 Signature Algorithm: sha256WithRSAEncryption d3:3b:d6:aa:de:3d:7b:13:68:3a:7e:c8:79:3f:2d:9a:84:2d: 95:f1:c4:c7:fe:84:76:0c:50:a5:07:55:cd:86:3b:a4:d1:3a: a8:8e:53:c2:30:d2:a4:bc:7a:74:f6:15:d7:48:ff:66:88:e5: 81:32:8e:17:d2:53:ba:9f:40:96:9c:4e:6e:6a:61:8b:27:94: 38:fb:61:21:4a:ef:37:5d:7e:88:f5:1b:44:47:f8:c9:f9:f3: bf:3f:58:c4:1b:bc:e7:0d:d5:6f:04:11:cd:25:63:52:dc:e2: 71:3a:da:3a:7c:2b:0e:bf:35:36:46:2e:13:54:da:3f:88:41: 3e:14:b3:e8:56:93:63:40:00:66:60:03:82:fc:a8:70:6c:92: 1e:c5:c0:26:19:8c:48:0b:87:32:bb:ea:b8:a0:e5:b3:7d:8d: 94:29:bd:82:8f:66:06:b5:57:ae:86:92:f0:cd:24:9c:46:14: e6:9b:aa:4c:a7:67:a7:98:82:f3:27:47:88:ea:15:71:06:d5: 09:e1:80:25:20:20:9a:f5:b6:d2:4f:c1:38:09:a4:6c:1d:32: 96:09:83:53:3f:45:d2:c4:93:c8:19:8f:f2:76:ed:02:fd:83: f4:6f:5e:21:3a:87:f5:a8:ab:81:e1:d9:53:3d:bb:17:10:90: a7:5f:28:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc01FGr2fplEI/9D27TcKvbxTwwQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI2MDEwMDA5WhcNMjYwMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzBkZTJhMDMyNzRkNjVmMWY5MTc4MDc4NTkzOGRkNjE0 YzJjODhjMmRiMzVkNmEyM2I5NjgwYzdiNWI4NjNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmn5T35voI1FMilYYfNlmYjgGIP/LurCMVZyZQmKDkA8+s +sj8kzIsRTMLOW24o4f+FdqgpZktaEw0RYMku+cY8I1U8bna2zk/i31Mcdjal6DU OXLqI0iaEclvEyPp7hqTMetPTkyXvNIHw+0ozPAkhlmbdYqnHu1MAmCPOUwxjJJG ynHZ4njY6PmhZYRJkSXfPv3qJe5hJTMZCQYqDqhlolaTwsXxJtRSOLQg37lcKgEg /eWahVl5PUQKeQ+NehjQDVeFc+bmn5N7NGjk2u8gSKaO8jPFJPFWFSXEWshWSdMH l9zQCK9mA65i7oMW7pm83+y4e5WJF68Hw6dzIuDZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnUAaxIVABt6FhtiMpG8n3EzS99YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzNTUxNTc1LWZkYTgtNDBjZC1hMDEyLTJkZDk4ZjU0YTM1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGDWAwDQYJKoZIhvcNAQELBQADggEBANM71qrePXsTaDp+yHk/LZqELZXx xMf+hHYMUKUHVc2GO6TROqiOU8Iw0qS8enT2FddI/2aI5YEyjhfSU7qfQJacTm5q YYsnlDj7YSFK7zddfoj1G0RH+Mn5878/WMQbvOcN1W8EEc0lY1Lc4nE62jp8Kw6/ NTZGLhNU2j+IQT4Us+hWk2NAAGZgA4L8qHBskh7FwCYZjEgLhzK76rig5bN9jZQp vYKPZga1V66GkvDNJJxGFOabqkynZ6eYgvMnR4jqFXEG1QnhgCUgIJr1ttJPwTgJ pGwdMpYJg1M/RdLEk8gZj/J27QL9g/RvXiE6h/Woq4Hh2VM9uxcQkKdfKFY= -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:46 2025 by rpki-client