This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b397d45c-b1e5-4ff4-ba96-1f1c1039ca3b.roa File: b397d45c-b1e5-4ff4-ba96-1f1c1039ca3b.roa (raw, json) Hash identifier: or5Yx+HA15j4ezt3QxddISCRF2GUCZcpQjgljFUBzJ4= Subject key identifier: A6:C0:DE:4A:3B:63:13:06:AC:0E:E0:E1:E0:B1:90:25:26:6E:EC:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43693D288F3FA34EFB1F4C5D9CA97036CF850021 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b397d45c-b1e5-4ff4-ba96-1f1c1039ca3b.roa Signing time: Tue 25 Nov 2025 01:21:23 +0000 ROA not before: Tue 25 Nov 2025 01:21:23 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.154.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:69:3d:28:8f:3f:a3:4e:fb:1f:4c:5d:9c:a9:70:36:cf:85:00:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 01:21:23 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=a3a3783350687d96c32f3ee42935ab355a2b5a9f4bc3a32649b9893e9cbc8659, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0a:2f:59:88:d8:11:99:e8:bc:f8:d2:66:b1: 48:d6:db:ef:f5:e2:80:55:92:fe:4b:18:eb:5c:1b: 78:ed:dd:43:09:a7:a4:3e:a3:29:ef:f8:00:c5:b5: c6:33:a2:cf:fb:8c:07:14:21:ac:73:cd:97:46:29: 97:45:9d:2a:ad:9f:b1:d4:49:07:3c:17:6a:75:8f: 6b:4a:56:21:9c:3a:53:c9:d0:46:86:e8:61:54:5b: f7:3e:2a:10:c1:01:09:26:b7:f2:f7:b1:a8:9e:88: 33:17:48:fa:1b:61:26:fc:8e:5c:c1:4d:99:c8:20: 9b:69:2a:7b:ae:e4:88:3c:9c:ac:56:ec:21:a4:de: ce:d2:b9:91:64:1a:28:cd:c8:86:34:03:2e:49:42: 43:7c:15:28:7e:68:3c:84:2a:0c:62:82:66:54:93: d6:b2:6c:0d:c7:c9:56:40:1e:0f:1e:34:08:3d:4c: 6c:72:45:ce:0b:83:8d:67:a6:58:ea:83:81:f4:6f: f3:fa:08:3f:f3:2b:71:1a:27:df:96:8d:3f:c1:13: 9b:c6:0c:fd:15:ae:5a:86:33:fb:3a:18:42:a9:94: fa:c8:d1:b7:be:a4:d8:c4:a6:80:16:ac:1c:0a:f4: 6b:24:c9:1a:7f:b5:7f:1e:c1:0d:19:b1:8f:e7:0a: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C0:DE:4A:3B:63:13:06:AC:0E:E0:E1:E0:B1:90:25:26:6E:EC:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b397d45c-b1e5-4ff4-ba96-1f1c1039ca3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.154.40.0/21 Signature Algorithm: sha256WithRSAEncryption 69:66:e1:8e:bb:49:1b:8a:d5:95:ab:0b:ef:29:b7:4e:f9:44: 6b:b7:bd:48:f7:8f:62:5e:02:1d:14:67:2d:74:1f:10:0f:2f: 3c:6b:3b:94:b1:ef:9c:d3:4c:64:42:f1:7b:4b:77:c1:ed:02: 7d:ea:98:48:50:11:e4:8f:11:63:a9:bf:6c:2f:43:c7:89:05: 88:16:1e:eb:c5:4f:61:21:2f:86:ce:a8:dc:29:a6:6b:cb:9a: e9:97:a8:2d:26:5f:1d:0c:df:25:b1:b5:6e:9e:76:af:66:9e: de:dc:7a:fc:28:89:db:d2:f4:81:b5:77:45:3a:1e:84:73:90: 2c:1e:d5:16:dc:6a:96:fa:1f:1a:4e:44:19:4f:52:dd:ce:1d: 98:80:c0:6f:cb:88:04:d8:8d:1e:63:46:2d:3d:08:81:7d:e8: a9:2a:df:9f:d6:cd:15:96:37:35:86:16:8d:ae:ea:fe:8a:13: 70:77:98:dc:e8:e7:28:8a:67:1f:87:d4:46:55:8e:60:fd:05: 01:92:a6:a0:2d:f0:60:06:1d:de:6e:d7:fb:d8:bf:01:c7:dc: 43:44:fb:a7:00:c4:a9:39:d5:02:88:8d:55:a3:09:35:05:8a: d8:05:49:c7:a7:aa:36:e8:29:dd:50:05:5e:5d:de:4a:3d:71: 22:fb:9d:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ2k9KI8/o077H0xdnKlwNs+FACEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDEyMTIzWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2EzNzgzMzUwNjg3ZDk2YzMyZjNlZTQyOTM1YWIzNTVh MmI1YTlmNGJjM2EzMjY0OWI5ODkzZTljYmM4NjU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvCi9ZiNgRmei8+NJmsUjW2+/14oBVkv5LGOtcG3jt3UMJ p6Q+oynv+ADFtcYzos/7jAcUIaxzzZdGKZdFnSqtn7HUSQc8F2p1j2tKViGcOlPJ 0EaG6GFUW/c+KhDBAQkmt/L3saieiDMXSPobYSb8jlzBTZnIIJtpKnuu5Ig8nKxW 7CGk3s7SuZFkGijNyIY0Ay5JQkN8FSh+aDyEKgxigmZUk9aybA3HyVZAHg8eNAg9 TGxyRc4Lg41npljqg4H0b/P6CD/zK3EaJ9+WjT/BE5vGDP0VrlqGM/s6GEKplPrI 0be+pNjEpoAWrBwK9GskyRp/tX8ewQ0ZsY/nCp+NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpsDeSjtjEwasDuDh4LGQJSZu7AUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzOTdkNDVjLWIxZTUtNGZmNC1iYTk2LTFmMWMxMDM5Y2EzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNmigwDQYJKoZIhvcNAQELBQADggEBAGlm4Y67SRuK1ZWrC+8pt075RGu3 vUj3j2JeAh0UZy10HxAPLzxrO5Sx75zTTGRC8XtLd8HtAn3qmEhQEeSPEWOpv2wv Q8eJBYgWHuvFT2EhL4bOqNwppmvLmumXqC0mXx0M3yWxtW6edq9mnt7cevwoidvS 9IG1d0U6HoRzkCwe1Rbcapb6HxpORBlPUt3OHZiAwG/LiATYjR5jRi09CIF96Kkq 35/WzRWWNzWGFo2u6v6KE3B3mNzo5yiKZx+H1EZVjmD9BQGSpqAt8GAGHd5u1/vY vwHH3ENE+6cAxKk51QKIjVWjCTUFitgFScenqjboKd1QBV5d3ko9cSL7nTE= -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:05 2025 by rpki-client