This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa File: b8a1d699-66bf-4eac-bb45-6e3527625d81.roa (raw, json) Hash identifier: 0d7V9bg+NDf5uopu9mVNwVUpWXMpr7LWC8vp17gTM1g= Subject key identifier: C9:AD:E6:41:E3:F5:05:83:8D:58:65:54:EE:61:46:43:B1:2B:40:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16F798348B0ECF51AB100890009D22070E471F4D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa Signing time: Sat 06 Dec 2025 00:30:10 +0000 ROA not before: Sat 06 Dec 2025 00:30:10 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 8987 IP address blocks: 192.43.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f7:98:34:8b:0e:cf:51:ab:10:08:90:00:9d:22:07:0e:47:1f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 00:30:10 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=7cecae9c81a835fd7ff124d9e81d68be9b635ce330396fb3ac78db4a99431071, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:98:32:72:bf:5a:af:e0:be:95:bb:bb:30: 4f:f9:52:58:78:49:d3:20:bf:1f:25:23:d3:91:f8: 62:81:c3:c6:d5:9c:e8:c4:c1:86:52:a7:d7:15:81: 95:a6:f7:1a:91:63:aa:d2:f6:b0:55:88:86:ec:8a: 93:21:6f:8e:e8:4f:74:73:58:0c:0f:46:da:f8:20: d8:78:96:1a:bb:e2:58:2b:59:b6:07:18:20:c1:ab: 3f:94:d2:fb:79:5a:77:d8:fe:d0:5f:ad:5a:ed:01: d1:f2:9b:ab:bf:71:ac:b6:a3:e8:ae:0b:78:b1:d5: 1e:c2:8e:5f:cb:ee:12:39:aa:bd:8f:92:2b:c7:f7: 0f:e0:b7:50:68:cc:46:f4:6a:1f:7c:3e:16:cf:58: cc:9a:cd:5f:32:f0:8f:6f:8d:f3:de:33:74:16:e9: 53:69:36:11:da:f1:16:2a:78:ea:a2:71:82:67:e9: 2f:ca:7c:2b:f5:31:1c:9d:02:04:17:a9:0a:bf:6c: f0:99:04:17:7b:16:e5:94:17:c4:14:3f:cc:4c:8c: 3d:c3:d1:3a:95:74:de:d8:53:c2:e8:90:16:92:3f: 3e:c7:df:3e:11:ec:3b:dd:56:7a:40:0d:63:fb:5f: 49:a0:67:e0:bd:a6:2f:05:33:f2:bb:3b:e3:81:bf: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AD:E6:41:E3:F5:05:83:8D:58:65:54:EE:61:46:43:B1:2B:40:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.43.184.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:46:5d:29:34:1b:a9:1e:9c:eb:bc:6c:a5:30:fd:c6:14:e5: 47:28:b7:89:21:52:c3:c7:b0:07:22:a7:fe:b2:98:c4:b9:06: 5b:4b:55:f3:1b:59:4c:99:81:af:19:a7:d2:9d:de:d0:7e:6c: 09:a5:d2:f8:d8:4f:57:af:c2:9f:5f:e7:eb:35:80:a7:82:93: d7:b4:88:77:6d:eb:88:57:7b:35:c2:97:84:43:fb:47:4d:a2: fe:1f:e0:8d:8b:70:9b:5c:05:df:e8:22:ac:65:c7:4f:5c:a4: 72:a4:ba:ba:f6:57:04:ec:26:bc:41:81:10:bf:63:03:b2:c7: a6:0d:7f:91:07:f2:9b:ac:65:72:7d:1b:7d:3c:dc:11:ae:15: 04:03:d6:94:02:a4:89:f0:04:4e:ff:be:59:e6:28:70:a9:33: c4:3e:a0:64:de:2f:c5:cf:18:52:22:97:79:69:bc:c6:99:e0: e0:29:f9:c6:21:8f:99:aa:f9:81:f2:53:7d:04:02:3b:3c:d5: 0c:2b:47:03:b0:53:3c:95:d1:81:ca:5a:f9:85:ad:4c:7e:36: 41:9d:3c:9c:e1:c8:17:48:3b:6e:4e:db:3b:5a:a4:a7:fa:2b: 4e:59:8b:50:e8:35:5b:f0:45:41:e3:03:ba:68:0e:c7:20:8d: d8:26:73:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFveYNIsOz1GrEAiQAJ0iBw5HH00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDAzMDEwWhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2VjYWU5YzgxYTgzNWZkN2ZmMTI0ZDllODFkNjhiZTli NjM1Y2UzMzAzOTZmYjNhYzc4ZGI0YTk5NDMxMDcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl3Zgycr9ar+C+lbu7ME/5Ulh4SdMgvx8lI9OR+GKBw8bV nOjEwYZSp9cVgZWm9xqRY6rS9rBViIbsipMhb47oT3RzWAwPRtr4INh4lhq74lgr WbYHGCDBqz+U0vt5WnfY/tBfrVrtAdHym6u/cay2o+iuC3ix1R7Cjl/L7hI5qr2P kivH9w/gt1BozEb0ah98PhbPWMyazV8y8I9vjfPeM3QW6VNpNhHa8RYqeOqicYJn 6S/KfCv1MRydAgQXqQq/bPCZBBd7FuWUF8QUP8xMjD3D0TqVdN7YU8LokBaSPz7H 3z4R7DvdVnpADWP7X0mgZ+C9pi8FM/K7O+OBv9LjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUya3mQeP1BYONWGVU7mFGQ7ErQO8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4YTFkNjk5LTY2YmYtNGVhYy1iYjQ1LTZlMzUyNzYyNWQ4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAK7gwDQYJKoZIhvcNAQELBQADggEBAA9GXSk0G6kenOu8bKUw/cYU5Uco t4khUsPHsAcip/6ymMS5BltLVfMbWUyZga8Zp9Kd3tB+bAml0vjYT1evwp9f5+s1 gKeCk9e0iHdt64hXezXCl4RD+0dNov4f4I2LcJtcBd/oIqxlx09cpHKkurr2VwTs JrxBgRC/YwOyx6YNf5EH8pusZXJ9G3083BGuFQQD1pQCpInwBE7/vlnmKHCpM8Q+ oGTeL8XPGFIil3lpvMaZ4OAp+cYhj5mq+YHyU30EAjs81QwrRwOwUzyV0YHKWvmF rUx+NkGdPJzhyBdIO25O2ztapKf6K05Zi1DoNVvwRUHjA7poDscgjdgmc0c= -----END CERTIFICATE-----Generated at Sat Dec 6 22:06:34 2025 by rpki-client