This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa File: ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa (raw, json) Hash identifier: S96KWnRaDsBZP3rqrcjbzkSh1ZkTlXpvcOvWQabDOjM= Subject key identifier: 46:06:E9:2F:B8:9B:E9:E1:23:C7:9A:51:4B:C2:D1:FC:70:5A:C4:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 676D2EEBA2BD647A0D4DD5C349F4E1DFBC48474B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa Signing time: Fri 28 Nov 2025 00:00:07 +0000 ROA not before: Fri 28 Nov 2025 00:00:07 +0000 ROA not after: Thu 26 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.140.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6d:2e:eb:a2:bd:64:7a:0d:4d:d5:c3:49:f4:e1:df:bc:48:47:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 28 00:00:07 2025 GMT Not After : Feb 26 23:59:59 2026 GMT Subject: serialNumber=72463e2b3bcbd4374eb95e66b736a1e47adfb070854dd9d3d58afe5cb7c089e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:32:54:4c:e3:09:41:1f:87:ab:69:a2:ac: 39:71:f2:99:1b:c4:2e:e9:66:6b:36:77:b8:32:e3: 23:6b:3b:68:1d:c2:3c:41:41:a1:40:3d:34:9e:c2: 2f:b5:fa:1d:5b:97:fb:5a:12:1a:ef:9b:cf:29:8d: 55:38:0c:28:8a:c7:08:71:68:f5:d3:34:f3:05:8e: a3:78:43:10:ce:dd:31:a8:ee:7b:c7:f6:fa:a0:5b: d8:cb:ea:f3:c1:13:0e:9d:2d:32:63:b5:6b:dc:ad: 39:a3:49:08:4c:c9:9c:e8:35:76:dd:ab:9c:5f:78: fb:e8:00:69:4e:15:c5:c9:6d:f6:28:14:87:a9:16: 41:8b:9b:bc:23:e8:b1:00:93:8b:ed:99:8e:5d:9a: 85:c4:a0:35:f7:be:2c:71:6d:23:52:47:f1:cc:48: f6:42:84:b9:a6:52:2b:2e:e5:18:2a:67:f2:a9:64: fb:12:7b:54:40:5a:2d:29:d9:f9:1f:57:45:3a:ad: d2:b6:3f:5c:fc:e9:a1:56:dd:ce:61:03:5f:57:2b: 8d:fb:99:4f:b2:5e:56:8a:78:5e:fc:9e:a7:9d:7e: c8:e9:5a:24:17:06:97:08:10:f0:a6:66:67:0a:d8: 43:42:a7:5d:51:42:65:5d:9c:3b:d6:91:fd:a5:83: 85:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:06:E9:2F:B8:9B:E9:E1:23:C7:9A:51:4B:C2:D1:FC:70:5A:C4:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption 30:7d:9e:e1:f5:20:c1:11:9e:a6:93:5b:f7:8a:72:b6:ad:1b: 57:a6:88:e4:4c:69:be:62:b2:86:25:16:e8:b6:29:1a:02:92: 4b:7b:38:5c:e3:23:97:a0:25:d6:48:9b:57:db:89:d7:cb:41: f2:b8:de:fc:65:35:4d:40:f8:44:84:3a:72:9d:95:bb:60:3a: 27:b3:52:ce:e3:2c:56:18:37:ae:db:b3:39:78:24:51:94:f9: d6:2d:ab:85:40:a5:33:a0:28:10:45:c3:00:54:dd:e3:23:cb: 26:fa:9e:42:4f:43:f5:2a:14:d6:15:26:2a:e0:e0:4b:b4:e2: 96:3b:58:d7:c9:73:a9:78:72:9b:70:df:84:82:25:8a:79:a8: 98:76:6b:b3:94:d2:a0:db:58:aa:55:10:1c:93:f2:74:56:b6: 1d:d2:fe:6d:e8:fb:3a:d4:6d:4d:09:1a:47:56:0a:5c:6c:3f: a4:fa:c2:24:ae:69:95:d1:13:97:cb:c9:aa:35:1d:41:74:da: 9b:d0:41:15:9b:88:b9:ea:1d:05:00:ce:44:9c:f6:cb:05:b7: 16:98:76:76:6d:9a:d5:d5:76:4e:d0:05:a6:0a:72:b6:86:05: 74:0d:02:93:79:06:27:55:b7:0b:44:1b:9a:42:0b:f0:70:38: e0:25:cc:16 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZ20u66K9ZHoNTdXDSfTh37xIR0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI4MDAwMDA3WhcNMjYwMjI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjQ2M2UyYjNiY2JkNDM3NGViOTVlNjZiNzM2YTFlNDdh ZGZiMDcwODU0ZGQ5ZDNkNThhZmU1Y2I3YzA4OWUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3djJUTOMJQR+Hq2mirDlx8pkbxC7pZms2d7gy4yNrO2gd wjxBQaFAPTSewi+1+h1bl/taEhrvm88pjVU4DCiKxwhxaPXTNPMFjqN4QxDO3TGo 7nvH9vqgW9jL6vPBEw6dLTJjtWvcrTmjSQhMyZzoNXbdq5xfePvoAGlOFcXJbfYo FIepFkGLm7wj6LEAk4vtmY5dmoXEoDX3vixxbSNSR/HMSPZChLmmUisu5RgqZ/Kp ZPsSe1RAWi0p2fkfV0U6rdK2P1z86aFW3c5hA19XK437mU+yXlaKeF78nqedfsjp WiQXBpcIEPCmZmcK2ENCp11RQmVdnDvWkf2lg4UbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQURgbpL7ib6eEjx5pRS8LR/HBaxMswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMWVjM2I4LTEyYTItNGVlYy05MGM3LWNhZDlmMTgyMzk1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQjDANBgkqhkiG9w0BAQsFAAOCAQEAMH2e4fUgwRGeppNb94pytq0bV6aI 5ExpvmKyhiUW6LYpGgKSS3s4XOMjl6Al1kibV9uJ18tB8rje/GU1TUD4RIQ6cp2V u2A6J7NSzuMsVhg3rtuzOXgkUZT51i2rhUClM6AoEEXDAFTd4yPLJvqeQk9D9SoU 1hUmKuDgS7TiljtY18lzqXhym3DfhIIlinmomHZrs5TSoNtYqlUQHJPydFa2HdL+ bej7OtRtTQkaR1YKXGw/pPrCJK5pldETl8vJqjUdQXTam9BBFZuIueodBQDORJz2 ywW3Fph2dm2a1dV2TtAFpgpytoYFdA0Ck3kGJ1W3C0QbmkIL8HA44CXMFg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:25 2025 by rpki-client