This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf252c7e-f7f0-4cf0-95c3-1cd44938f01a.roa File: bf252c7e-f7f0-4cf0-95c3-1cd44938f01a.roa (raw, json) Hash identifier: evj24Rs/PNjQMGEgLFovgE5OfM69erRoB0VyOpNw440= Subject key identifier: DC:96:2B:24:4F:AE:77:CF:97:05:B8:D5:25:15:5C:81:1C:68:94:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FCCDC3D9EA651BE49002629814DEFEE9CEF98B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf252c7e-f7f0-4cf0-95c3-1cd44938f01a.roa Signing time: Tue 25 Nov 2025 00:41:25 +0000 ROA not before: Tue 25 Nov 2025 00:41:25 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 75.2.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:cc:dc:3d:9e:a6:51:be:49:00:26:29:81:4d:ef:ee:9c:ef:98:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:41:25 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=ed38e924a74d9696615f16da3c841023d04238bf0e8edf63fb68441208d5e700, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:a5:97:b2:9f:fa:47:45:4c:27:e6:1a:14: e1:1d:52:44:80:72:17:b2:f8:33:88:dd:5d:6d:63: c9:d2:f9:36:3b:f4:43:86:a8:71:8c:d6:0c:de:74: 35:58:29:0f:b9:6e:60:23:25:29:a6:5d:99:a3:98: 16:e0:09:13:c5:63:5a:12:17:50:b5:16:ce:cd:e8: b7:f3:62:f9:1d:1c:c6:83:31:4f:cf:5c:42:21:95: 81:05:44:02:20:a6:a3:5d:d9:8d:9b:0c:f5:9a:e4: eb:34:13:ab:87:99:bb:e6:29:85:f3:87:87:72:0f: ed:8a:3b:2c:47:2f:b9:5e:7c:10:dd:73:23:ef:77: 87:aa:dd:96:d4:7a:e3:0f:41:60:14:ab:9e:01:99: e5:0d:1f:88:3b:7f:53:f4:1b:44:40:70:ff:7f:23: bd:42:2e:2b:0d:fa:2c:38:bc:87:0f:fd:1f:98:cf: ee:cb:83:46:22:de:6c:de:df:ad:5c:2b:f3:e2:35: 30:bd:38:03:50:f4:08:5b:cb:95:0c:28:fb:14:85: 3c:24:a8:be:39:71:c4:5a:af:01:27:16:ab:a9:87: 46:73:77:94:33:b2:f7:2a:3d:fd:6e:c3:7f:ce:2c: d8:4c:eb:51:c1:c7:4d:23:4f:bf:63:a8:33:29:63: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:96:2B:24:4F:AE:77:CF:97:05:B8:D5:25:15:5C:81:1C:68:94:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf252c7e-f7f0-4cf0-95c3-1cd44938f01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.2.64.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:b4:c5:50:5e:1b:6b:d2:57:bd:ee:7c:d4:b2:c7:63:2a:68: 3f:21:c9:0a:c8:c7:94:06:87:dd:93:de:c6:72:c5:23:fa:f1: 32:e8:76:33:49:5d:a5:e9:18:59:06:3e:a9:01:88:3a:46:43: d2:70:ee:96:f3:f2:da:00:24:4a:d8:95:0b:cb:8f:72:0f:5f: 80:97:c2:fc:b7:af:d9:8a:86:5a:b7:e9:2c:f1:38:90:04:80: 11:e5:2b:5f:23:cf:a3:45:8a:4a:00:ae:3c:04:07:8d:c7:c5: f5:e6:e0:eb:0a:59:d3:33:f6:ed:d6:04:29:a7:b3:1a:04:ec: 88:c8:f3:12:bc:b6:92:cb:48:33:93:78:28:b4:28:9e:04:af: 44:e4:28:ec:73:1b:67:c7:ae:a0:7a:1b:cb:31:7d:50:a5:14: e5:0c:8b:66:ef:d5:31:d0:76:09:fe:f3:02:07:59:c1:6b:02: ec:c9:6e:0c:02:c4:e2:9f:46:47:9c:16:e6:b9:52:7f:00:c7: f3:d2:24:e6:1a:7e:f4:4a:02:3a:c4:5b:07:a3:7f:20:48:15: 61:e2:b0:15:98:af:72:03:74:9d:d4:4d:43:c6:a2:c1:8f:b9: d5:4f:44:b6:3d:ee:da:fc:b8:ae:c5:a8:bb:1d:f9:79:7b:43: fb:7e:7e:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP8zcPZ6mUb5JACYpgU3v7pzvmLUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDA0MTI1WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDM4ZTkyNGE3NGQ5Njk2NjE1ZjE2ZGEzYzg0MTAyM2Qw NDIzOGJmMGU4ZWRmNjNmYjY4NDQxMjA4ZDVlNzAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZI6WXsp/6R0VMJ+YaFOEdUkSAchey+DOI3V1tY8nS+TY7 9EOGqHGM1gzedDVYKQ+5bmAjJSmmXZmjmBbgCRPFY1oSF1C1Fs7N6LfzYvkdHMaD MU/PXEIhlYEFRAIgpqNd2Y2bDPWa5Os0E6uHmbvmKYXzh4dyD+2KOyxHL7lefBDd cyPvd4eq3ZbUeuMPQWAUq54BmeUNH4g7f1P0G0RAcP9/I71CLisN+iw4vIcP/R+Y z+7Lg0Yi3mze361cK/PiNTC9OANQ9Ahby5UMKPsUhTwkqL45ccRarwEnFquph0Zz d5QzsvcqPf1uw3/OLNhM61HBx00jT79jqDMpY6J/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3JYrJE+ud8+XBbjVJRVcgRxolLYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmMjUyYzdlLWY3ZjAtNGNmMC05NWMzLTFjZDQ0OTM4ZjAxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARLAkAwDQYJKoZIhvcNAQELBQADggEBACq0xVBeG2vSV73ufNSyx2MqaD8h yQrIx5QGh92T3sZyxSP68TLodjNJXaXpGFkGPqkBiDpGQ9Jw7pbz8toAJErYlQvL j3IPX4CXwvy3r9mKhlq36SzxOJAEgBHlK18jz6NFikoArjwEB43HxfXm4OsKWdMz 9u3WBCmnsxoE7IjI8xK8tpLLSDOTeCi0KJ4Er0TkKOxzG2fHrqB6G8sxfVClFOUM i2bv1THQdgn+8wIHWcFrAuzJbgwCxOKfRkecFua5Un8Ax/PSJOYafvRKAjrEWwej fyBIFWHisBWYr3IDdJ3UTUPGosGPudVPRLY97tr8uK7FqLsd+Xl7Q/t+frU= -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:18 2025 by rpki-client