This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa File: bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa (raw, json) Hash identifier: wE2EuB/x1Q9suoxoT+BG0P5c/KDAiAdt0dLBsac2Wgc= Subject key identifier: 67:35:78:93:EC:A8:8F:A0:C5:B1:05:B2:56:DF:15:E4:B8:CD:8D:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 222A313EF5BA72257E306F507CE0BD42F00F3279 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa Signing time: Wed 26 Nov 2025 00:10:13 +0000 ROA not before: Wed 26 Nov 2025 00:10:13 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2a:31:3e:f5:ba:72:25:7e:30:6f:50:7c:e0:bd:42:f0:0f:32:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 26 00:10:13 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=96fde0e4580f6d84beabc719e7781f82b03dfa3686efc83b376a94c3532b6447, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:27:4d:8f:4b:c8:50:3b:d1:46:93:9d:64: 99:32:57:73:78:34:ca:69:c4:6b:9c:2b:d3:46:b3: ca:22:66:81:52:1d:10:1c:bc:04:de:6c:c7:6c:49: 5b:ec:b2:cd:f6:57:ef:04:16:7a:24:d5:c5:88:b1: 6a:c3:63:8d:52:7a:0e:f7:27:4a:fe:d8:7f:80:8d: 21:37:cd:3f:ad:8d:c5:78:85:9e:12:0c:3b:fd:04: ec:e1:11:27:77:ed:23:19:d2:5c:c9:d1:ae:29:19: ad:51:3e:bd:e7:b2:f1:64:06:54:c2:84:22:3a:40: b3:9d:52:c3:98:8d:aa:53:be:0b:3b:11:4e:f6:b7: 07:e8:da:65:de:8a:29:28:39:99:17:f7:f0:f2:92: 78:48:8c:0d:37:01:1b:29:14:7b:f6:a3:c8:fc:e9: 98:98:21:ab:f5:5b:56:dc:96:12:2b:87:06:21:f7: b7:03:d6:a4:48:cb:8d:92:14:50:36:53:d5:c0:ed: 63:4d:50:d6:7e:1a:12:ca:34:4c:bc:40:66:aa:0e: 12:0e:2b:db:b1:64:db:58:a9:06:5c:ce:d0:27:37: 43:d7:06:e1:3b:84:f3:67:b1:49:79:95:90:a6:f5: d1:c5:b6:f9:6f:ac:37:db:ba:57:a2:cd:b0:26:b2: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:35:78:93:EC:A8:8F:A0:C5:B1:05:B2:56:DF:15:E4:B8:CD:8D:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf9d8dd0-e7aa-4698-be38-aecd8be5af6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.128.0/17 Signature Algorithm: sha256WithRSAEncryption a6:26:2f:8f:13:75:a6:5b:e3:88:b9:fb:0b:92:c6:4f:ab:66: 1e:6d:8c:49:2f:43:63:82:97:a8:ac:d7:41:f1:ac:4b:55:a2: f6:9b:db:ff:aa:b0:83:31:b2:f8:b5:07:11:73:d9:49:f8:e3: 34:db:8f:53:46:9a:c2:78:65:7a:69:5b:dc:76:63:f1:d9:01: 36:90:63:84:c3:fc:61:1f:4c:22:7d:57:04:d3:3a:56:82:e0: 77:06:e6:42:66:f7:b7:2a:95:a2:b0:3f:b7:e5:a2:4c:b5:bc: bf:96:db:b5:e8:57:87:ee:ae:a0:03:f3:bf:e6:45:6f:7a:33: 8b:88:e0:d4:9a:bb:72:2d:ab:d5:88:04:a3:24:fe:8f:5b:98: 34:77:1c:31:32:30:b4:52:8c:d1:43:36:7d:33:52:2f:12:33: f6:81:fe:da:b7:3e:d7:4e:2b:a5:a9:f4:43:08:c8:a1:3a:4c: a0:b7:e4:d1:11:e1:9f:0b:ac:23:81:ff:b6:c2:87:7a:47:cb: 47:03:8d:23:79:f3:6d:d9:b2:82:92:cd:4f:a2:68:3e:8c:e5: 5f:cb:0f:8a:7d:70:a2:31:76:a2:bf:d7:35:5d:47:ff:02:b9: 4f:28:d9:85:58:e9:2d:22:22:8a:14:37:99:d1:0b:83:2d:82: 22:c2:9f:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIioxPvW6ciV+MG9QfOC9QvAPMnkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI2MDAxMDEzWhcNMjYwMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmZkZTBlNDU4MGY2ZDg0YmVhYmM3MTllNzc4MWY4MmIw M2RmYTM2ODZlZmM4M2IzNzZhOTRjMzUzMmI2NDQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAnidNj0vIUDvRRpOdZJkyV3N4NMppxGucK9NGs8oiZoFS HRAcvATebMdsSVvsss32V+8EFnok1cWIsWrDY41Seg73J0r+2H+AjSE3zT+tjcV4 hZ4SDDv9BOzhESd37SMZ0lzJ0a4pGa1RPr3nsvFkBlTChCI6QLOdUsOYjapTvgs7 EU72twfo2mXeiikoOZkX9/DyknhIjA03ARspFHv2o8j86ZiYIav1W1bclhIrhwYh 97cD1qRIy42SFFA2U9XA7WNNUNZ+GhLKNEy8QGaqDhIOK9uxZNtYqQZcztAnN0PX BuE7hPNnsUl5lZCm9dHFtvlvrDfbuleizbAmstW5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZzV4k+yoj6DFsQWyVt8V5LjNjQcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmOWQ4ZGQwLWU3YWEtNDY5OC1iZTM4LWFlY2Q4YmU1YWY2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe4SIAwDQYJKoZIhvcNAQELBQADggEBAKYmL48TdaZb44i5+wuSxk+rZh5t jEkvQ2OCl6is10HxrEtVovab2/+qsIMxsvi1BxFz2Un44zTbj1NGmsJ4ZXppW9x2 Y/HZATaQY4TD/GEfTCJ9VwTTOlaC4HcG5kJm97cqlaKwP7floky1vL+W27XoV4fu rqAD87/mRW96M4uI4NSau3Itq9WIBKMk/o9bmDR3HDEyMLRSjNFDNn0zUi8SM/aB /tq3PtdOK6Wp9EMIyKE6TKC35NER4Z8LrCOB/7bCh3pHy0cDjSN5823ZsoKSzU+i aD6M5V/LD4p9cKIxdqK/1zVdR/8CuU8o2YVY6S0iIooUN5nRC4MtgiLCn70= -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:41 2025 by rpki-client