This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa File: a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa (raw, json) Hash identifier: i4UTjNc6KQavKuVFD35tYeybho7EUCRxTqiDdP5jqB0= Subject key identifier: D6:1E:98:42:23:38:56:F6:A0:46:25:4B:C5:BB:F4:1A:EC:C1:1C:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 598DCDF284B1D85E531C425BBDBB3198D2684246 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa Signing time: Sat 22 Nov 2025 01:00:40 +0000 ROA not before: Sat 22 Nov 2025 01:00:40 +0000 ROA not after: Fri 20 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.172.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8d:cd:f2:84:b1:d8:5e:53:1c:42:5b:bd:bb:31:98:d2:68:42:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 01:00:40 2025 GMT Not After : Feb 20 23:59:59 2026 GMT Subject: serialNumber=0660b04adea9db4abfebfc86eddf9f030d0afe9c4e3b92f8364141436f594efe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3e:cf:38:65:8e:9d:08:9f:a7:e3:61:60:9a: 8f:48:e8:c4:c5:13:2e:5d:65:67:7a:3d:e1:8c:61: 4a:4a:30:8a:83:3e:ad:f3:b4:bb:d2:e0:7a:48:50: fe:0f:c3:c7:f4:a7:5b:5e:7f:5b:3e:21:71:1c:9e: 4c:aa:a1:49:d1:23:e0:e6:8c:14:ae:f5:2e:b9:c9: d1:d8:3d:7c:19:ec:d8:3a:84:de:04:df:a9:63:c2: 9b:2c:3e:b0:b6:3b:e8:8b:ee:a6:c9:e1:0e:b2:54: 16:2c:f7:d9:20:be:24:a3:c6:9d:7d:c3:35:69:9e: b5:8e:5a:e8:62:39:06:cc:f0:25:f3:5e:0b:96:35: b2:b1:78:ca:77:b2:b3:fc:11:4a:c6:38:40:85:8b: c9:e3:4a:30:f0:e3:14:d0:46:a8:6c:2a:0f:65:33: f3:06:94:99:e1:bc:ec:1c:25:99:f9:1b:93:42:d6: 43:e5:0a:df:9c:4f:f3:2d:e8:d8:42:0c:e7:a6:5b: f3:c5:d4:1b:44:50:21:1e:26:cd:c4:a9:cd:f3:50: 32:10:fe:93:fd:3a:77:0b:1d:c2:ba:e2:40:31:71: 99:eb:a2:23:e9:73:c0:4c:d5:bc:44:30:66:3f:83: aa:b9:04:5a:87:90:18:0e:7c:b5:ea:02:27:37:d5: 95:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1E:98:42:23:38:56:F6:A0:46:25:4B:C5:BB:F4:1A:EC:C1:1C:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a856c7b7-80d4-4e5a-9bea-4221c845c1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.172.0.0/18 Signature Algorithm: sha256WithRSAEncryption 41:a6:dc:7f:bf:59:2d:79:15:0f:fc:c2:b4:6f:c7:4c:dd:f5: a1:63:a2:4a:e3:5f:97:75:61:65:60:08:ed:d8:91:22:8e:45: 75:bb:05:d4:66:8a:d9:b6:e7:ab:9d:1f:9a:14:23:94:8d:c1: 89:b1:58:53:52:75:33:d4:5e:75:bf:b8:74:dd:26:d7:b8:0d: 04:f6:ca:9b:09:ea:1c:eb:b0:e1:ce:22:ad:ed:5a:98:96:64: 61:61:46:25:d2:87:17:31:e5:24:fa:de:ad:9c:fd:98:49:34: cd:cc:8a:c4:60:77:d7:d0:af:0d:25:6a:f0:22:68:da:63:28: d0:42:f0:0f:c0:7b:43:24:52:27:0b:6c:0e:d2:06:10:84:0c: ad:8c:18:db:21:c9:d3:cf:14:c8:e4:33:5f:ba:54:fe:f6:1b: b9:a6:5a:2d:cf:fa:72:2d:37:36:4d:22:37:66:c5:7b:7b:68: d5:30:0e:3b:90:49:f9:aa:d4:e3:00:f5:69:85:01:99:9e:49: 0d:ea:2a:cf:11:71:4a:4b:b5:b1:56:33:ad:d7:16:c7:47:15: b2:9a:1d:e0:2e:47:8b:36:f6:89:aa:88:3d:79:72:8a:fd:e8: 42:c7:de:f1:6d:c7:63:4f:5b:e6:f0:dc:e7:5c:64:1a:bc:3d: a0:5e:47:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWY3N8oSx2F5THEJbvbsxmNJoQkYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDEwMDQwWhcNMjYwMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjYwYjA0YWRlYTlkYjRhYmZlYmZjODZlZGRmOWYwMzBk MGFmZTljNGUzYjkyZjgzNjQxNDE0MzZmNTk0ZWZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhPs84ZY6dCJ+n42Fgmo9I6MTFEy5dZWd6PeGMYUpKMIqD Pq3ztLvS4HpIUP4Pw8f0p1tef1s+IXEcnkyqoUnRI+DmjBSu9S65ydHYPXwZ7Ng6 hN4E36ljwpssPrC2O+iL7qbJ4Q6yVBYs99kgviSjxp19wzVpnrWOWuhiOQbM8CXz XguWNbKxeMp3srP8EUrGOECFi8njSjDw4xTQRqhsKg9lM/MGlJnhvOwcJZn5G5NC 1kPlCt+cT/Mt6NhCDOemW/PF1BtEUCEeJs3Eqc3zUDIQ/pP9OncLHcK64kAxcZnr oiPpc8BM1bxEMGY/g6q5BFqHkBgOfLXqAic31ZWNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1h6YQiM4VvagRiVLxbv0GuzBHOIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4NTZjN2I3LTgwZDQtNGU1YS05YmVhLTQyMjFjODQ1YzFhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZFrAAwDQYJKoZIhvcNAQELBQADggEBAEGm3H+/WS15FQ/8wrRvx0zd9aFj okrjX5d1YWVgCO3YkSKORXW7BdRmitm256udH5oUI5SNwYmxWFNSdTPUXnW/uHTd Jte4DQT2ypsJ6hzrsOHOIq3tWpiWZGFhRiXShxcx5ST63q2c/ZhJNM3MisRgd9fQ rw0lavAiaNpjKNBC8A/Ae0MkUicLbA7SBhCEDK2MGNshydPPFMjkM1+6VP72G7mm Wi3P+nItNzZNIjdmxXt7aNUwDjuQSfmq1OMA9WmFAZmeSQ3qKs8RcUpLtbFWM63X FsdHFbKaHeAuR4s29omqiD15cor96ELH3vFtx2NPW+bw3OdcZBq8PaBeR6w= -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:34 2025 by rpki-client