This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2fbe348-9a6f-4549-a8c8-849bcafbb1ee.roa File: b2fbe348-9a6f-4549-a8c8-849bcafbb1ee.roa (raw, json) Hash identifier: ynoKsQBc/swLhXC0M47nk3r/TRwqaw6hmmnarNACulo= Subject key identifier: 44:88:B5:72:DB:49:C6:18:5B:3E:95:27:35:B5:2F:A2:D9:D4:A7:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F8ECE45BAB98F5A4288C44EA5CA788B96A9B225 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2fbe348-9a6f-4549-a8c8-849bcafbb1ee.roa Signing time: Wed 03 Dec 2025 01:41:14 +0000 ROA not before: Wed 03 Dec 2025 01:41:14 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8e:ce:45:ba:b9:8f:5a:42:88:c4:4e:a5:ca:78:8b:96:a9:b2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 01:41:14 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=56d85bcdefa4c485478c4e16c47054b8f0b71d3065c8d57f93d3f318afa56c73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:ad:17:48:c7:3a:11:0e:e9:80:4a:20:e7: 4f:20:9f:96:e3:66:b4:83:57:8b:54:32:74:b7:43: f8:69:90:3b:d4:a6:63:30:32:32:59:80:38:65:5b: 2f:1f:ce:8c:39:a2:ee:f9:12:d1:d8:dd:65:e5:f8: cc:24:29:3d:2a:1f:5b:f2:77:1a:7a:b8:6b:e3:31: 32:c8:6f:6b:2a:ec:96:4c:3a:5b:42:09:8d:02:f7: 5b:83:6e:14:c6:aa:fc:27:1a:06:48:de:84:ac:9a: 79:18:8b:50:ef:f0:8f:2b:2e:fc:3a:c0:83:a4:75: 9f:f7:63:87:19:ef:7a:c2:3d:4f:73:f9:66:d1:d4: 65:6b:01:c6:48:ff:1f:ec:c1:48:be:89:c4:5e:d3: 72:09:83:08:f7:9e:85:22:a9:f6:46:0e:10:58:eb: 6c:8d:03:b1:99:1d:1f:9b:0e:cb:a0:c8:d2:21:db: 7f:99:34:9f:be:1d:84:6f:da:7c:86:fe:d0:af:8c: 18:d6:0a:35:95:4c:fd:fd:a9:48:0a:6f:0f:a9:0d: 12:24:00:fd:dd:94:bd:48:ba:09:8e:81:b3:e3:d9: 15:ba:b1:a8:13:1e:b9:b7:da:e5:31:0b:a7:37:3e: 23:94:09:ff:88:60:50:fb:c7:5d:51:f5:80:e6:b8: 47:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:88:B5:72:DB:49:C6:18:5B:3E:95:27:35:B5:2F:A2:D9:D4:A7:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2fbe348-9a6f-4549-a8c8-849bcafbb1ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.12.0/24 Signature Algorithm: sha256WithRSAEncryption 97:49:82:8f:28:de:70:0b:8c:cd:a0:7d:b2:bb:8b:11:a7:ba: bb:a7:39:22:61:8c:cc:05:17:20:0b:4d:2b:ce:be:5c:7d:97: eb:c8:ee:36:92:0c:2f:3f:98:97:5c:01:c6:2b:19:16:5e:fa: 56:d1:67:79:22:b8:c4:31:a4:fd:68:fa:cc:47:f3:43:1a:60: ae:e8:2d:91:5d:01:88:35:42:96:5c:47:8d:f8:e7:c9:0e:a5: f5:ba:1f:71:46:29:bf:33:51:f5:a2:aa:fa:44:2e:64:3a:82: 0d:09:3f:72:a1:90:e7:87:e8:0a:5f:1c:90:63:fd:79:df:f0: 0e:c9:24:5f:22:a0:99:74:34:d6:c7:ad:dd:77:02:85:ea:c0: 17:95:e8:c5:8f:35:a8:2a:c8:66:49:20:f7:ac:2a:7f:1f:85: 23:8a:73:a8:32:e2:62:03:df:c4:4e:8b:d2:87:a4:fe:88:c7: 19:7d:c8:13:00:ce:24:df:39:49:63:e5:ff:1d:ff:ee:d4:79: ef:36:3b:40:e5:9c:95:4f:59:4d:80:9f:20:71:b2:b3:d5:5c: 14:0e:e3:80:f2:3b:53:44:27:93:77:cf:93:5d:c5:af:63:0a: 05:53:47:39:37:55:55:38:07:8b:70:35:79:55:91:63:ff:d2: a6:07:d9:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH47ORbq5j1pCiMROpcp4i5apsiUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDE0MTE0WhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NmQ4NWJjZGVmYTRjNDg1NDc4YzRlMTZjNDcwNTRiOGYw YjcxZDMwNjVjOGQ1N2Y5M2QzZjMxOGFmYTU2YzczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdga0XSMc6EQ7pgEog508gn5bjZrSDV4tUMnS3Q/hpkDvU pmMwMjJZgDhlWy8fzow5ou75EtHY3WXl+MwkKT0qH1vydxp6uGvjMTLIb2sq7JZM OltCCY0C91uDbhTGqvwnGgZI3oSsmnkYi1Dv8I8rLvw6wIOkdZ/3Y4cZ73rCPU9z +WbR1GVrAcZI/x/swUi+icRe03IJgwj3noUiqfZGDhBY62yNA7GZHR+bDsugyNIh 23+ZNJ++HYRv2nyG/tCvjBjWCjWVTP39qUgKbw+pDRIkAP3dlL1IugmOgbPj2RW6 sagTHrm32uUxC6c3PiOUCf+IYFD7x11R9YDmuEc3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURIi1cttJxhhbPpUnNbUvotnUp7MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyZmJlMzQ4LTlhNmYtNDU0OS1hOGM4LTg0OWJjYWZiYjFlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmAwwDQYJKoZIhvcNAQELBQADggEBAJdJgo8o3nALjM2gfbK7ixGnurun OSJhjMwFFyALTSvOvlx9l+vI7jaSDC8/mJdcAcYrGRZe+lbRZ3kiuMQxpP1o+sxH 80MaYK7oLZFdAYg1QpZcR43458kOpfW6H3FGKb8zUfWiqvpELmQ6gg0JP3KhkOeH 6ApfHJBj/Xnf8A7JJF8ioJl0NNbHrd13AoXqwBeV6MWPNagqyGZJIPesKn8fhSOK c6gy4mID38ROi9KHpP6Ixxl9yBMAziTfOUlj5f8d/+7Uee82O0DlnJVPWU2AnyBx srPVXBQO44DyO1NEJ5N3z5Ndxa9jCgVTRzk3VVU4B4twNXlVkWP/0qYH2f8= -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:42 2025 by rpki-client