This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5e89287-6c05-411f-a3e6-fef6be7964e1.roa File: a5e89287-6c05-411f-a3e6-fef6be7964e1.roa (raw, json) Hash identifier: U7AVOoCMwEHaQoULC280fqb8LUDldpa0u7bJBmERBZM= Subject key identifier: F8:A8:1A:F5:FB:25:A7:C0:7A:B3:27:30:4C:98:74:DA:13:14:84:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A6580013CD66CE89EFB9EF139B8174948D59B83 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5e89287-6c05-411f-a3e6-fef6be7964e1.roa Signing time: Thu 11 Dec 2025 00:10:10 +0000 ROA not before: Thu 11 Dec 2025 00:10:10 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 143.135.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:65:80:01:3c:d6:6c:e8:9e:fb:9e:f1:39:b8:17:49:48:d5:9b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 11 00:10:10 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=dfb1f48735c62ea3604ff8e6bf8d412084bac209363ad05471475cc9cc700f31, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:20:e3:1c:5c:aa:12:68:a2:07:5c:38:77: 87:af:4f:91:8d:86:dc:05:d2:fb:f7:72:6e:b4:f8: f0:35:dc:9f:c2:82:35:8f:29:f2:84:30:2c:2f:bb: 98:10:d9:6c:3e:be:51:d9:77:bc:0d:bf:ae:81:67: f3:d8:f0:66:9a:49:58:18:77:40:db:02:41:0e:1b: 53:dd:1b:d0:f0:25:b1:07:ac:b8:72:6a:25:c6:7e: 74:d0:c6:7f:3b:02:67:a0:34:d6:84:ba:20:6d:fb: 7c:5d:64:5c:25:b8:ee:51:d2:3e:53:a7:7c:9c:d4: af:f9:c7:58:1d:d6:44:8b:2a:a7:70:87:be:e5:27: 21:ce:9a:20:ea:43:9a:ea:3c:ba:0b:72:3c:e9:d4: ee:a3:cd:3c:df:97:ab:ee:99:0f:d8:cd:cc:7a:0f: 35:8f:6e:93:b0:7c:32:1f:d8:cf:4a:26:73:7e:16: a1:f8:cc:e4:f1:fc:52:94:05:4b:64:14:3d:ec:36: c8:c8:7f:85:74:50:a5:ce:d0:3c:f1:38:13:ac:3d: ac:9c:07:8e:82:86:a8:1c:34:10:23:67:10:2b:f9: 69:c9:35:21:d1:6b:74:39:54:7e:e2:40:73:17:30: 19:e8:22:45:20:26:18:e0:34:6b:65:90:9f:ca:a9: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A8:1A:F5:FB:25:A7:C0:7A:B3:27:30:4C:98:74:DA:13:14:84:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5e89287-6c05-411f-a3e6-fef6be7964e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.135.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0d:1c:90:46:d2:a1:75:d2:93:51:f6:51:4a:68:14:1f:b1:a2: 4c:01:3f:c3:a1:b2:18:d0:83:b0:ce:08:4a:c3:6d:08:99:bf: 9e:e0:17:5e:c8:0f:27:3f:bb:c9:c3:4a:17:ae:0c:49:8f:70: de:e6:89:97:7e:ea:f4:5c:82:42:93:86:59:c5:55:fc:7f:09: 14:03:23:21:4a:5a:c4:7b:4e:8f:a8:2b:91:c4:ee:97:c7:c7: 6b:18:3d:dd:3a:3a:d7:3f:18:c0:b9:61:a0:12:7b:05:dc:45: ad:de:34:53:de:2e:d5:59:be:18:01:81:6a:f3:f9:a3:13:fd: 40:9b:f6:85:26:a8:14:52:9e:91:5a:cb:e1:e5:18:6d:51:31: 70:70:be:a5:2d:0d:3c:2a:26:54:88:8f:4e:fc:10:da:ad:cc: 41:51:d3:7b:b4:1a:fb:c9:43:3d:a3:bf:09:85:a1:b5:88:e5: 4d:b5:5b:2e:83:c4:c5:7c:68:04:81:f2:54:15:cf:0c:1b:62: 3d:35:0f:ed:f9:51:27:6e:3c:16:a4:a5:44:dc:87:f6:d4:b7: 30:7d:9d:08:33:c8:57:fb:71:0c:37:28:60:fb:8f:49:e5:fd: 05:af:30:76:7c:e0:91:c4:97:16:fe:80:01:71:c7:e3:46:19: f6:57:b2:52 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUemWAATzWbOie+57xObgXSUjVm4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjExMDAxMDEwWhcNMjYwMzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmIxZjQ4NzM1YzYyZWEzNjA0ZmY4ZTZiZjhkNDEyMDg0 YmFjMjA5MzYzYWQwNTQ3MTQ3NWNjOWNjNzAwZjMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXNSDjHFyqEmiiB1w4d4evT5GNhtwF0vv3cm60+PA13J/C gjWPKfKEMCwvu5gQ2Ww+vlHZd7wNv66BZ/PY8GaaSVgYd0DbAkEOG1PdG9DwJbEH rLhyaiXGfnTQxn87AmegNNaEuiBt+3xdZFwluO5R0j5Tp3yc1K/5x1gd1kSLKqdw h77lJyHOmiDqQ5rqPLoLcjzp1O6jzTzfl6vumQ/Yzcx6DzWPbpOwfDIf2M9KJnN+ FqH4zOTx/FKUBUtkFD3sNsjIf4V0UKXO0DzxOBOsPaycB46ChqgcNBAjZxAr+WnJ NSHRa3Q5VH7iQHMXMBnoIkUgJhjgNGtlkJ/KqbWZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+Kga9fslp8B6sycwTJh02hMUhGMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1ZTg5Mjg3LTZjMDUtNDExZi1hM2U2LWZlZjZiZTc5NjRlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCPhzANBgkqhkiG9w0BAQsFAAOCAQEADRyQRtKhddKTUfZRSmgUH7GiTAE/ w6GyGNCDsM4ISsNtCJm/nuAXXsgPJz+7ycNKF64MSY9w3uaJl37q9FyCQpOGWcVV /H8JFAMjIUpaxHtOj6grkcTul8fHaxg93To61z8YwLlhoBJ7BdxFrd40U94u1Vm+ GAGBavP5oxP9QJv2hSaoFFKekVrL4eUYbVExcHC+pS0NPComVIiPTvwQ2q3MQVHT e7Qa+8lDPaO/CYWhtYjlTbVbLoPExXxoBIHyVBXPDBtiPTUP7flRJ248FqSlRNyH 9tS3MH2dCDPIV/txDDcoYPuPSeX9Ba8wdnzgkcSXFv6AAXHH40YZ9leyUg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:17:55 2025 by rpki-client