This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd45c95f-6e9d-4aa2-8127-35837ae53e78.roa File: cd45c95f-6e9d-4aa2-8127-35837ae53e78.roa (raw, json) Hash identifier: Ks2HrkzR850NhT1Ky2z73rS06QAGtZkLYxf8wPZe7R4= Subject key identifier: FE:22:53:8C:C7:29:FF:9F:01:93:03:D3:83:6E:09:AD:A4:7A:97:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AC00B42ADA48F18C1FDA90F8557D15C389025F2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd45c95f-6e9d-4aa2-8127-35837ae53e78.roa Signing time: Wed 03 Dec 2025 00:50:42 +0000 ROA not before: Wed 03 Dec 2025 00:50:42 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c0:0b:42:ad:a4:8f:18:c1:fd:a9:0f:85:57:d1:5c:38:90:25:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 00:50:42 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=10db86d26912a9668631157e039a165f6f1f720e2a075a58a804b093d4b9aedf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:ad:be:33:2f:e2:4c:a4:a6:7c:8a:8b:0a: f2:84:65:59:19:f1:7a:c7:da:79:24:29:fa:80:a7: f7:3f:f4:83:eb:cb:39:9e:91:4b:90:6c:2f:e9:66: 42:c0:bc:04:c4:40:12:36:e8:6d:94:bb:eb:9e:77: e3:e4:0d:6f:4e:2f:cb:f1:d0:e2:49:aa:c3:27:c8: 8d:d8:a4:f3:5a:a8:5a:40:fe:03:95:db:4b:a6:db: a7:1d:92:c4:3f:ce:a0:d3:22:3d:34:0b:cb:4f:47: 1d:aa:d3:f6:ee:84:c1:96:a7:27:44:d4:b6:d0:c5: c4:5e:6d:5e:5b:cd:35:ee:39:40:95:09:06:65:d3: 35:f7:4e:0f:38:3f:bf:b1:98:43:5e:e9:9c:65:f6: 05:d2:a0:c2:05:a5:80:79:88:89:32:db:55:a2:d9: 11:e9:b7:42:c9:1c:a7:5f:9e:c7:d3:f5:43:31:a1: 4e:05:fa:3e:98:84:6a:19:f0:38:27:e7:6a:d2:49: 69:75:43:91:f6:8a:85:69:39:29:d9:59:f3:a6:5e: bb:e7:ae:30:a6:d5:8c:f9:db:1e:b9:01:02:21:e7: b6:39:e9:c5:63:4e:4c:41:66:47:8a:66:83:0f:72: 6b:90:78:d2:0f:4e:23:8f:a8:b3:41:cb:d7:32:35: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:22:53:8C:C7:29:FF:9F:01:93:03:D3:83:6E:09:AD:A4:7A:97:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd45c95f-6e9d-4aa2-8127-35837ae53e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.120.0/24 Signature Algorithm: sha256WithRSAEncryption 48:ec:1c:d5:81:ba:59:df:b9:b6:4a:9a:3c:9a:68:e4:d7:46: 6a:44:a2:db:6f:e3:bb:71:e3:2c:60:9d:71:ae:78:f8:42:6a: 0a:9a:ae:f0:66:b5:08:1d:bb:40:05:30:65:23:de:a3:c8:f1: 34:f2:be:d4:56:e0:67:f4:0a:f2:92:97:10:80:d3:34:c6:e6: ef:78:54:23:b6:49:7c:b5:c9:08:86:2b:c8:8b:fe:1f:94:39: 26:29:c6:be:bd:48:4a:d6:85:5c:3d:83:16:e0:ba:81:3c:4c: fe:85:0b:6c:38:83:e2:20:8d:54:74:11:15:ec:b5:63:c7:f4: 28:97:7a:22:bd:fb:14:fb:78:91:7e:a9:7a:dd:1e:90:40:0e: a2:ab:94:19:12:28:3f:9e:7d:db:e3:f1:ab:8b:e3:93:94:c3: cb:36:1d:29:87:6c:ba:dd:8d:af:e9:92:13:73:c4:b0:54:d6: 1e:ea:ae:b2:b3:d2:60:ea:23:37:4e:1b:2e:e9:a1:6a:28:c0: 50:3a:2a:2a:4b:b7:da:cf:28:cb:75:86:ae:17:40:06:91:5d: 1f:0e:ad:e6:ce:bf:b1:a2:3a:d8:35:32:59:e5:a8:da:89:4a: e9:eb:24:f6:ef:f3:e0:84:ed:e4:ca:77:1e:e5:ea:c1:74:57: b6:10:6e:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOsALQq2kjxjB/akPhVfRXDiQJfIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDA1MDQyWhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGRiODZkMjY5MTJhOTY2ODYzMTE1N2UwMzlhMTY1ZjZm MWY3MjBlMmEwNzVhNThhODA0YjA5M2Q0YjlhZWRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNJq2+My/iTKSmfIqLCvKEZVkZ8XrH2nkkKfqAp/c/9IPr yzmekUuQbC/pZkLAvATEQBI26G2Uu+ued+PkDW9OL8vx0OJJqsMnyI3YpPNaqFpA /gOV20um26cdksQ/zqDTIj00C8tPRx2q0/buhMGWpydE1LbQxcRebV5bzTXuOUCV CQZl0zX3Tg84P7+xmENe6Zxl9gXSoMIFpYB5iIky21Wi2RHpt0LJHKdfnsfT9UMx oU4F+j6YhGoZ8Dgn52rSSWl1Q5H2ioVpOSnZWfOmXrvnrjCm1Yz52x65AQIh57Y5 6cVjTkxBZkeKZoMPcmuQeNIPTiOPqLNBy9cyNbVlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/iJTjMcp/58BkwPTg24JraR6l1swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkNDVjOTVmLTZlOWQtNGFhMi04MTI3LTM1ODM3YWU1M2U3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmHgwDQYJKoZIhvcNAQELBQADggEBAEjsHNWBulnfubZKmjyaaOTXRmpE ottv47tx4yxgnXGuePhCagqarvBmtQgdu0AFMGUj3qPI8TTyvtRW4Gf0CvKSlxCA 0zTG5u94VCO2SXy1yQiGK8iL/h+UOSYpxr69SErWhVw9gxbguoE8TP6FC2w4g+Ig jVR0ERXstWPH9CiXeiK9+xT7eJF+qXrdHpBADqKrlBkSKD+efdvj8auL45OUw8s2 HSmHbLrdja/pkhNzxLBU1h7qrrKz0mDqIzdOGy7poWoowFA6KipLt9rPKMt1hq4X QAaRXR8OrebOv7GiOtg1MlnlqNqJSunrJPbv8+CE7eTKdx7l6sF0V7YQbmA= -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:27 2025 by rpki-client