This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa584ecf-ee64-448f-82c5-49e959490a9b.roa File: aa584ecf-ee64-448f-82c5-49e959490a9b.roa (raw, json) Hash identifier: tt2+gK9N5glMyvw8StMLne/lOQsQa4nVsEWfycBisrE= Subject key identifier: 28:EB:32:15:E0:5D:31:E8:4D:34:90:A8:D2:2F:BC:C1:C7:EB:90:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EC80A4FDB97D26D6786F3260C1CC59043251343 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa584ecf-ee64-448f-82c5-49e959490a9b.roa Signing time: Wed 03 Dec 2025 00:21:17 +0000 ROA not before: Wed 03 Dec 2025 00:21:17 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c8:0a:4f:db:97:d2:6d:67:86:f3:26:0c:1c:c5:90:43:25:13:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 00:21:17 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=75c6b9cbdcf2846ab7d8f38c250f57b6cf329202609acea0c1464c07b5f37414, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:8a:5f:14:76:d0:83:88:ef:2a:ba:1d:21: c8:76:f3:ee:d1:b0:60:3e:a4:03:24:4b:5c:f6:7c: c9:0c:0f:81:01:df:53:08:67:b3:c8:48:c6:37:d2: 69:56:d2:96:87:30:02:e1:74:c8:3d:6e:3b:64:51: 6b:25:07:40:ee:86:cc:04:9e:d3:c6:fe:b1:de:ad: 55:19:5d:1a:5b:36:10:e1:7b:5d:05:27:75:d6:ec: 7b:03:19:a6:12:4c:e4:3f:c2:89:51:76:93:79:6d: d9:b0:7f:cb:b3:d8:1f:f8:f1:8e:47:0f:20:ab:3f: 0a:38:c7:41:76:c3:08:b7:54:e3:7c:52:94:db:9a: 75:0f:45:e2:1d:97:06:5a:95:e8:c8:89:5a:58:b7: 94:e2:13:d1:3c:ca:8a:fa:fb:74:60:30:b6:60:10: b4:bd:20:25:89:9a:d0:a5:cc:e6:40:7e:08:38:2c: c0:76:c5:46:21:49:81:59:c2:16:7d:dc:4c:34:9c: 51:5c:1f:95:91:29:af:02:86:2e:bc:91:f9:41:8a: 32:ce:f5:04:d1:fa:74:d4:5a:18:e9:79:29:e9:3d: 21:41:1b:75:2d:31:7d:05:b7:f4:6b:d5:00:19:04: b4:47:63:7e:26:3f:00:5b:56:61:f1:c9:ea:c4:ec: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:32:15:E0:5D:31:E8:4D:34:90:A8:D2:2F:BC:C1:C7:EB:90:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa584ecf-ee64-448f-82c5-49e959490a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.74.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:38:05:47:48:f3:4f:ad:05:23:a2:d8:be:f3:ab:d6:00:b4: 3f:1c:d8:65:df:fe:6b:f5:c4:7f:c1:28:d0:d2:17:6c:c8:c8: e7:a9:79:51:3f:00:e1:36:da:7e:89:45:51:60:d6:af:88:59: af:54:09:eb:0e:fc:32:d0:8c:82:86:22:84:e3:3e:20:59:45: ca:51:23:ca:1c:72:45:55:d2:ab:73:0e:08:18:6b:b1:a8:1c: d7:20:5e:44:a8:d3:f2:56:3d:e7:ca:4f:b6:f7:ae:fe:5d:3b: 6f:67:30:b5:ae:f8:fd:d5:c4:52:53:e5:96:c9:f2:c0:f2:d9: 1d:d8:a3:26:da:b0:3b:fc:f3:f1:a5:ec:61:0a:1c:3d:ab:a4: 67:d1:b7:e8:78:78:96:68:1e:2b:8a:d6:4b:81:ea:4b:a1:60: 69:33:09:5d:65:8c:f2:67:1b:5f:ab:45:ec:3f:0a:00:87:1b: 92:8a:3f:86:c9:70:a0:c6:67:ed:9b:36:34:7c:de:51:eb:d3: db:a5:b8:72:4f:6a:56:52:e6:e6:f9:83:f6:35:b5:06:31:79: 79:eb:ce:ca:71:95:ff:7c:4f:48:79:cc:0d:a1:06:4e:20:78: 9e:96:77:df:97:14:cf:3a:f1:f1:44:1f:68:68:97:44:24:80: e6:c7:60:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXsgKT9uX0m1nhvMmDBzFkEMlE0MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDAyMTE3WhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NWM2YjljYmRjZjI4NDZhYjdkOGYzOGMyNTBmNTdiNmNm MzI5MjAyNjA5YWNlYTBjMTQ2NGMwN2I1ZjM3NDE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0AIpfFHbQg4jvKrodIch28+7RsGA+pAMkS1z2fMkMD4EB 31MIZ7PISMY30mlW0paHMALhdMg9bjtkUWslB0DuhswEntPG/rHerVUZXRpbNhDh e10FJ3XW7HsDGaYSTOQ/wolRdpN5bdmwf8uz2B/48Y5HDyCrPwo4x0F2wwi3VON8 UpTbmnUPReIdlwZalejIiVpYt5TiE9E8yor6+3RgMLZgELS9ICWJmtClzOZAfgg4 LMB2xUYhSYFZwhZ93Ew0nFFcH5WRKa8Chi68kflBijLO9QTR+nTUWhjpeSnpPSFB G3UtMX0Ft/Rr1QAZBLRHY34mPwBbVmHxyerE7K45AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKOsyFeBdMehNNJCo0i+8wcfrkDowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNTg0ZWNmLWVlNjQtNDQ4Zi04MmM1LTQ5ZTk1OTQ5MGE5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmEowDQYJKoZIhvcNAQELBQADggEBAJo4BUdI80+tBSOi2L7zq9YAtD8c 2GXf/mv1xH/BKNDSF2zIyOepeVE/AOE22n6JRVFg1q+IWa9UCesO/DLQjIKGIoTj PiBZRcpRI8occkVV0qtzDggYa7GoHNcgXkSo0/JWPefKT7b3rv5dO29nMLWu+P3V xFJT5ZbJ8sDy2R3YoybasDv88/Gl7GEKHD2rpGfRt+h4eJZoHiuK1kuB6kuhYGkz CV1ljPJnG1+rRew/CgCHG5KKP4bJcKDGZ+2bNjR83lHr09uluHJPalZS5ub5g/Y1 tQYxeXnrzspxlf98T0h5zA2hBk4geJ6Wd9+XFM868fFEH2hol0QkgObHYIE= -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:45 2025 by rpki-client