This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8fc7fa9-8a4f-45c6-baee-1b6e8d288285.roa File: b8fc7fa9-8a4f-45c6-baee-1b6e8d288285.roa (raw, json) Hash identifier: 4esUtSjzpwHhBser36fwZss+oPvi1MAIb3iYG/BPhbo= Subject key identifier: 32:13:98:30:10:3C:7B:76:CF:40:4E:E9:E2:1F:98:A1:27:37:09:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F6B2E7B74E54CBB258FC30EF574D7F374D24191 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8fc7fa9-8a4f-45c6-baee-1b6e8d288285.roa Signing time: Sat 06 Dec 2025 02:31:15 +0000 ROA not before: Sat 06 Dec 2025 02:31:15 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.176.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6b:2e:7b:74:e5:4c:bb:25:8f:c3:0e:f5:74:d7:f3:74:d2:41:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:31:15 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=e819a1bb6d518249ccea581250cefaaabc86b26c4b9b38c0042d4ad53f6a7739, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:79:d2:b1:9c:68:94:f0:2a:9d:46:4f:4a: cf:b0:0e:c6:53:1d:dc:0c:4c:5b:da:d3:dc:bc:0a: 26:da:df:11:f1:f7:5c:3c:d2:ed:11:44:88:27:7a: 05:75:d7:88:93:6a:14:36:81:fa:6d:ed:f6:ae:88: f8:f4:bc:b1:78:79:e5:b7:90:16:40:e9:49:33:77: af:b0:5a:4a:1c:45:ae:01:39:f2:b8:7e:3b:76:4c: a4:11:bc:03:4b:b0:38:1a:97:93:24:b5:52:7d:75: 4c:54:68:9e:ba:5f:61:e3:90:63:4e:a1:4d:87:37: 25:84:1e:29:a4:7a:5e:89:2c:70:f2:13:50:fe:d0: 4c:e8:d5:c1:39:44:06:34:1e:58:1c:c7:e8:ff:4d: c0:4c:6c:62:48:d2:75:64:0b:a4:0b:dd:88:01:98: 63:bf:2d:d9:a7:6e:79:eb:23:13:83:ad:c4:3e:d3: 62:19:a8:fd:80:90:7c:cc:c5:ac:c9:f4:b5:f1:dd: ca:e5:94:75:47:3a:10:8f:43:30:38:67:cc:1c:0f: ce:f5:51:20:b9:15:29:b0:d4:c2:0f:6d:85:40:29: d2:27:a8:25:17:40:01:71:6f:59:de:28:05:29:6f: d4:7c:ab:3d:a6:bf:32:79:3f:e4:62:42:e3:b5:d7: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:13:98:30:10:3C:7B:76:CF:40:4E:E9:E2:1F:98:A1:27:37:09:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8fc7fa9-8a4f-45c6-baee-1b6e8d288285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.176.0.0/14 Signature Algorithm: sha256WithRSAEncryption ad:9d:94:03:dd:91:e2:46:8e:c8:64:44:ad:2a:5a:2a:65:6c: 1f:4f:5c:d1:8e:33:94:c1:ee:07:a2:1d:4d:f1:97:f9:af:6d: bf:0a:07:e0:2b:22:6f:f4:62:fd:98:4b:8d:78:03:18:bb:23: 50:c1:ae:1a:98:89:c5:df:ae:54:11:01:56:3e:f4:75:9f:0f: 90:5c:48:f2:ff:ab:72:be:6f:25:6d:c2:c5:16:d5:07:1d:7d: d5:19:fd:1a:58:90:ab:c5:7a:20:55:61:ca:38:76:4e:bd:80: 17:86:cc:4f:80:1d:b1:4f:f3:b4:55:85:ab:44:54:6d:62:95: c5:2a:48:af:72:ab:da:42:ea:db:4e:13:26:7d:78:d8:69:03: 1a:89:06:2b:93:4e:2e:93:6f:df:b7:d0:09:97:73:ee:06:d3: 37:a3:64:8f:03:4d:10:58:4d:c9:da:06:0f:c1:41:4e:83:7c: eb:a9:96:69:38:92:95:55:3d:76:ad:64:97:dd:d3:91:4b:8b: 6e:7e:a8:23:ad:d0:c9:2d:51:e2:cf:07:c3:f8:80:d7:7b:a8: 71:ac:3e:21:88:74:3d:4d:05:1a:a3:c5:0e:26:49:08:97:9b: 78:99:a7:1d:3d:22:90:75:1f:73:0c:bc:50:2e:7f:cb:15:bf: 1b:ec:f5:c3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUb2sue3TlTLslj8MO9XTX83TSQZEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIzMTE1WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODE5YTFiYjZkNTE4MjQ5Y2NlYTU4MTI1MGNlZmFhYWJj ODZiMjZjNGI5YjM4YzAwNDJkNGFkNTNmNmE3NzM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClNHnSsZxolPAqnUZPSs+wDsZTHdwMTFva09y8Ciba3xHx 91w80u0RRIgnegV114iTahQ2gfpt7fauiPj0vLF4eeW3kBZA6Ukzd6+wWkocRa4B OfK4fjt2TKQRvANLsDgal5MktVJ9dUxUaJ66X2HjkGNOoU2HNyWEHimkel6JLHDy E1D+0Ezo1cE5RAY0Hlgcx+j/TcBMbGJI0nVkC6QL3YgBmGO/LdmnbnnrIxODrcQ+ 02IZqP2AkHzMxazJ9LXx3crllHVHOhCPQzA4Z8wcD871USC5FSmw1MIPbYVAKdIn qCUXQAFxb1neKAUpb9R8qz2mvzJ5P+RiQuO11/V9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMhOYMBA8e3bPQE7p4h+YoSc3CdQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4ZmM3ZmE5LThhNGYtNDVjNi1iYWVlLTFiNmU4ZDI4ODI4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIQsDANBgkqhkiG9w0BAQsFAAOCAQEArZ2UA92R4kaOyGRErSpaKmVsH09c 0Y4zlMHuB6IdTfGX+a9tvwoH4Csib/Ri/ZhLjXgDGLsjUMGuGpiJxd+uVBEBVj70 dZ8PkFxI8v+rcr5vJW3CxRbVBx191Rn9GliQq8V6IFVhyjh2Tr2AF4bMT4AdsU/z tFWFq0RUbWKVxSpIr3Kr2kLq204TJn142GkDGokGK5NOLpNv37fQCZdz7gbTN6Nk jwNNEFhNydoGD8FBToN866mWaTiSlVU9dq1kl93TkUuLbn6oI63QyS1R4s8Hw/iA 13uocaw+IYh0PU0FGqPFDiZJCJebeJmnHT0ikHUfcwy8UC5/yxW/G+z1ww== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:52 2025 by rpki-client