This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac00a12a-4c88-4d55-a91d-c54339c64d1e.roa File: ac00a12a-4c88-4d55-a91d-c54339c64d1e.roa (raw, json) Hash identifier: yLhBFt3JKjL32RO0gExM55r2IzuzwnZNVqUa381I+TU= Subject key identifier: 93:50:FE:C4:9C:3B:51:6E:4B:4F:52:23:74:E3:0C:31:A8:1D:93:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FF776D0C01826DCB0495DC1DD345F10E979ADC8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac00a12a-4c88-4d55-a91d-c54339c64d1e.roa Signing time: Fri 05 Dec 2025 00:00:16 +0000 ROA not before: Fri 05 Dec 2025 00:00:16 +0000 ROA not after: Thu 05 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f7:76:d0:c0:18:26:dc:b0:49:5d:c1:dd:34:5f:10:e9:79:ad:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 5 00:00:16 2025 GMT Not After : Mar 5 23:59:59 2026 GMT Subject: serialNumber=78e27eda2cb6ae2c695cff4da6047279691f40dc398097e58c325ac4446e676b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:c4:e0:88:31:53:54:bc:c3:f9:37:94:a2: 0b:56:54:a8:f0:3e:28:c4:24:51:5c:66:01:a5:7e: 40:8e:15:89:58:da:81:32:78:ee:fa:21:42:db:fa: 21:b6:2a:fd:98:33:0a:70:1f:ee:ea:a4:2d:24:1a: 59:74:17:52:82:02:e3:91:a1:e9:86:90:aa:63:1b: 81:6f:84:a0:65:27:3c:88:e1:f9:d3:76:4b:aa:92: 80:01:a0:1e:38:14:c9:98:d0:99:a1:3b:a8:e9:aa: 8e:ea:57:33:1d:af:96:5b:8d:f0:07:87:69:f8:3b: c3:43:8d:40:9e:2e:48:f8:47:e8:94:09:4f:f6:de: ce:80:99:1e:cd:4a:87:cb:5e:b2:42:32:a5:f1:34: 9f:f8:3b:37:3e:d3:19:d3:11:a4:17:e1:53:a6:9b: 87:ab:e0:15:28:71:d6:9b:ad:c8:59:42:32:a5:32: 20:19:d7:fe:d7:a7:93:2f:b7:c7:4f:1c:99:aa:94: f9:8e:cf:6f:6e:77:97:72:ec:da:7b:d3:aa:b1:c2: 56:0b:40:31:78:c2:e6:44:41:a1:ff:bc:5b:fb:f9: 54:ca:11:31:52:f3:fe:0c:a3:1c:78:7e:36:1c:8a: b7:d1:a6:9b:94:a9:e5:80:1c:28:68:e8:91:ea:9b: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:50:FE:C4:9C:3B:51:6E:4B:4F:52:23:74:E3:0C:31:A8:1D:93:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac00a12a-4c88-4d55-a91d-c54339c64d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.40.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:d3:b4:0f:2e:c1:66:c9:5f:ea:c8:09:76:ca:b0:a4:5d:1f: 76:c3:49:24:0b:32:42:7d:dd:db:f3:ce:23:c0:5a:1d:40:30: 07:7c:16:0e:0b:35:ba:cc:24:dc:be:45:d4:80:76:8b:9b:3d: 0b:e3:2d:83:dc:7c:1b:bc:ef:a2:c0:5f:7d:de:72:6e:86:a0: 0d:8e:c2:11:27:22:df:7b:5b:5e:e2:c6:8d:4c:dc:62:4f:ff: 68:2d:16:cf:20:72:91:e3:b2:db:29:99:86:7c:a9:5c:eb:d5: 3f:23:d5:da:4f:3f:a6:ed:71:f5:31:70:ee:b2:78:04:29:ad: c0:32:6d:75:0d:bb:e8:9d:a2:bf:fa:2a:6c:8b:8f:12:58:9e: b4:a7:6d:eb:7a:80:9b:f0:1f:8b:8b:5d:e7:ff:47:ac:f8:ad: 6e:15:d8:c5:83:1e:ac:f6:49:1a:40:3b:be:e4:c3:60:11:00: 97:0e:d9:63:df:3d:bd:e5:72:5c:0e:87:5e:6d:53:07:d5:39: 6a:10:45:06:9c:46:4b:e7:57:ac:8d:c2:3a:4f:e2:12:a5:9c: de:b7:6b:ee:6a:ad:09:47:c7:bb:64:a6:3a:b3:06:88:ae:70: ab:d3:06:68:b4:d2:65:ba:43:df:0d:61:10:86:a8:a0:22:d5: be:6c:dd:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX/d20MAYJtywSV3B3TRfEOl5rcgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA1MDAwMDE2WhcNMjYwMzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGUyN2VkYTJjYjZhZTJjNjk1Y2ZmNGRhNjA0NzI3OTY5 MWY0MGRjMzk4MDk3ZTU4YzMyNWFjNDQ0NmU2NzZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh3sTgiDFTVLzD+TeUogtWVKjwPijEJFFcZgGlfkCOFYlY 2oEyeO76IULb+iG2Kv2YMwpwH+7qpC0kGll0F1KCAuORoemGkKpjG4FvhKBlJzyI 4fnTdkuqkoABoB44FMmY0JmhO6jpqo7qVzMdr5ZbjfAHh2n4O8NDjUCeLkj4R+iU CU/23s6AmR7NSofLXrJCMqXxNJ/4Ozc+0xnTEaQX4VOmm4er4BUocdabrchZQjKl MiAZ1/7Xp5Mvt8dPHJmqlPmOz29ud5dy7Np706qxwlYLQDF4wuZEQaH/vFv7+VTK ETFS8/4Moxx4fjYcirfRppuUqeWAHCho6JHqmzhLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk1D+xJw7UW5LT1IjdOMMMagdk+IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjMDBhMTJhLTRjODgtNGQ1NS1hOTFkLWM1NDMzOWM2NGQxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRXCgwDQYJKoZIhvcNAQELBQADggEBAFzTtA8uwWbJX+rICXbKsKRdH3bD SSQLMkJ93dvzziPAWh1AMAd8Fg4LNbrMJNy+RdSAdoubPQvjLYPcfBu876LAX33e cm6GoA2OwhEnIt97W17ixo1M3GJP/2gtFs8gcpHjstspmYZ8qVzr1T8j1dpPP6bt cfUxcO6yeAQprcAybXUNu+idor/6KmyLjxJYnrSnbet6gJvwH4uLXef/R6z4rW4V 2MWDHqz2SRpAO77kw2ARAJcO2WPfPb3lclwOh15tUwfVOWoQRQacRkvnV6yNwjpP 4hKlnN63a+5qrQlHx7tkpjqzBoiucKvTBmi00mW6Q98NYRCGqKAi1b5s3Rg= -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:06 2025 by rpki-client