This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfe87b6a-6268-4844-b06c-6fd81096a44f.roa File: bfe87b6a-6268-4844-b06c-6fd81096a44f.roa (raw, json) Hash identifier: QoUp9dCmpo4UmMUyB0c8C7FoLR10rZ7X+IN+tIFM7YI= Subject key identifier: 51:AC:1C:64:89:6D:A5:BB:D1:5D:73:92:97:E6:1E:B8:E7:6D:71:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30CA09811845A097583FE9C7984486BAC2259A4E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfe87b6a-6268-4844-b06c-6fd81096a44f.roa Signing time: Wed 03 Dec 2025 01:41:11 +0000 ROA not before: Wed 03 Dec 2025 01:41:11 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ca:09:81:18:45:a0:97:58:3f:e9:c7:98:44:86:ba:c2:25:9a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 01:41:11 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=845e642ea94d28716051e9d794c7709eaa8ad346d63ccbdb515538826d2c2eb7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:4d:e7:53:06:a1:59:d9:ce:cc:81:78:1c: ce:57:f5:29:18:48:24:7c:40:c3:56:c7:bf:80:67: de:2e:cb:5f:48:ef:06:be:34:d3:d4:40:57:df:19: 45:56:dc:63:00:f4:f3:17:50:0f:f8:73:2c:f2:fc: ce:3d:20:59:b3:e9:0e:e5:8f:a1:14:9a:fa:e4:cf: d0:bd:17:14:c7:43:28:5d:14:52:b7:14:10:67:1c: 5d:ff:87:4a:02:e8:96:93:83:eb:42:84:ed:9f:7f: 50:ca:0e:96:38:13:7f:ba:15:26:94:89:9a:f8:25: 71:73:f0:78:66:13:b0:67:cd:f2:04:60:f0:2f:7b: 79:12:1d:e6:75:be:2a:d4:0b:19:36:4a:4a:5b:87: 30:ec:b5:68:b3:48:fa:9d:14:44:78:01:34:5d:e3: 83:e1:9a:5b:06:be:e7:df:70:32:6b:02:f8:37:85: 0d:e0:9a:eb:2a:e7:e3:03:ce:65:81:5b:e5:5a:c1: 23:71:a7:5e:a5:e5:a9:89:53:b2:26:8e:37:92:ee: cd:b7:5f:77:d9:ec:8f:dd:86:e8:91:ec:fa:66:44: b1:c2:08:bd:81:ea:01:e3:75:e4:44:4a:fd:36:f0: 50:a8:ce:cf:be:52:9a:2f:e5:9d:31:88:cc:39:ef: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AC:1C:64:89:6D:A5:BB:D1:5D:73:92:97:E6:1E:B8:E7:6D:71:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bfe87b6a-6268-4844-b06c-6fd81096a44f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.101.0/24 Signature Algorithm: sha256WithRSAEncryption 19:df:23:58:52:8a:17:fc:f7:fd:6d:c4:91:5b:dc:c2:2c:02: 04:39:71:b9:e3:ba:7b:70:53:b3:aa:d9:ed:ff:27:30:49:66: 68:a9:54:d6:6d:13:c2:a3:31:21:88:57:2a:ae:78:51:3d:65: 8f:6c:5e:f2:a9:d9:a5:42:cb:60:1e:a9:84:66:41:ed:3d:f8: 22:f0:6a:86:1a:7e:3f:33:c1:51:54:39:ee:7a:41:52:a0:5b: 11:cd:4a:ef:95:84:8f:06:76:c3:82:58:44:0e:6b:16:cd:52: 1b:b1:b3:ad:7c:bc:50:be:6d:89:ea:63:d1:ae:46:5b:de:4a: ff:d4:6b:b3:10:51:25:7e:11:0a:fb:5a:12:f5:4e:f2:cb:c8: 13:48:6f:cd:8e:0f:77:3d:74:1b:91:01:5d:f1:ec:e7:04:5d: 11:07:cf:df:0f:b9:e4:bb:9d:ee:0d:84:17:05:84:73:75:74: 9e:09:93:59:b0:fd:5c:22:aa:76:04:cf:16:ae:08:f0:d8:24: 46:d5:04:9b:62:2f:76:33:1e:4b:3f:90:54:ea:fb:1f:9f:8f: ab:dc:05:13:4f:4c:77:ec:8d:c9:cb:84:50:0c:bd:ef:98:79: a5:cd:03:6c:2c:70:89:52:cf:c4:9e:db:31:8b:84:ed:20:bd: f6:d7:26:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMMoJgRhFoJdYP+nHmESGusIlmk4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDE0MTExWhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDVlNjQyZWE5NGQyODcxNjA1MWU5ZDc5NGM3NzA5ZWFh OGFkMzQ2ZDYzY2NiZGI1MTU1Mzg4MjZkMmMyZWI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQYU3nUwahWdnOzIF4HM5X9SkYSCR8QMNWx7+AZ94uy19I 7wa+NNPUQFffGUVW3GMA9PMXUA/4cyzy/M49IFmz6Q7lj6EUmvrkz9C9FxTHQyhd FFK3FBBnHF3/h0oC6JaTg+tChO2ff1DKDpY4E3+6FSaUiZr4JXFz8HhmE7BnzfIE YPAve3kSHeZ1virUCxk2SkpbhzDstWizSPqdFER4ATRd44PhmlsGvuffcDJrAvg3 hQ3gmusq5+MDzmWBW+VawSNxp16l5amJU7ImjjeS7s23X3fZ7I/dhuiR7PpmRLHC CL2B6gHjdeRESv028FCozs++Upov5Z0xiMw572BPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUawcZIltpbvRXXOSl+YeuOdtcS0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmZTg3YjZhLTYyNjgtNDg0NC1iMDZjLTZmZDgxMDk2YTQ0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmGUwDQYJKoZIhvcNAQELBQADggEBABnfI1hSihf89/1txJFb3MIsAgQ5 cbnjuntwU7Oq2e3/JzBJZmipVNZtE8KjMSGIVyqueFE9ZY9sXvKp2aVCy2AeqYRm Qe09+CLwaoYafj8zwVFUOe56QVKgWxHNSu+VhI8GdsOCWEQOaxbNUhuxs618vFC+ bYnqY9GuRlveSv/Ua7MQUSV+EQr7WhL1TvLLyBNIb82OD3c9dBuRAV3x7OcEXREH z98PueS7ne4NhBcFhHN1dJ4Jk1mw/VwiqnYEzxauCPDYJEbVBJtiL3YzHks/kFTq +x+fj6vcBRNPTHfsjcnLhFAMve+YeaXNA2wscIlSz8Se2zGLhO0gvfbXJrs= -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:48 2025 by rpki-client