This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfbd0837-4eff-479f-a1bc-b854caccddcb.roa File: cfbd0837-4eff-479f-a1bc-b854caccddcb.roa (raw, json) Hash identifier: pySmlNFRsuDvAaoBIEVzkUzmfHg1c7epj3ROeMsLqz8= Subject key identifier: 6A:26:60:82:41:DD:0C:04:4C:69:F9:43:AA:65:D2:46:A2:59:B4:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40633A97B77DABD83A3A54B3C6CC0E2550FD1669 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfbd0837-4eff-479f-a1bc-b854caccddcb.roa Signing time: Sat 22 Nov 2025 00:11:00 +0000 ROA not before: Sat 22 Nov 2025 00:11:00 +0000 ROA not after: Fri 20 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:63:3a:97:b7:7d:ab:d8:3a:3a:54:b3:c6:cc:0e:25:50:fd:16:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:11:00 2025 GMT Not After : Feb 20 23:59:59 2026 GMT Subject: serialNumber=76819686f0377fe3841081074398f5cfb339b1c4c403cefeae6a004b69b14f93, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:a6:04:db:65:fc:cb:77:a9:bf:73:13:f0: 1c:7f:ef:09:7a:7e:65:eb:1b:04:17:da:c8:2a:2f: 00:c7:7a:1c:b8:ea:2f:dc:6b:17:0a:4e:ee:cc:6d: 3b:ab:5e:87:4d:58:45:5e:0b:15:9e:ec:9f:e2:d6: 40:e2:75:72:f6:55:7c:78:df:80:bf:7c:ae:ed:7b: a4:fb:5e:c7:ee:48:d7:29:4b:2d:6a:24:4c:8b:89: f2:64:bc:32:42:1d:3e:5e:99:7a:d5:2d:95:1d:61: 51:39:b0:77:56:c3:eb:c9:ae:00:b2:e2:7c:d6:5d: a7:bd:0a:25:88:4f:96:6e:38:bb:4e:55:8b:96:a3: ac:39:e2:ec:af:3a:e5:53:c2:1e:70:67:4c:d0:bd: d5:6e:97:d6:20:9e:20:26:1a:16:e6:0b:1a:2b:4e: e0:7a:0a:f7:b1:c3:86:65:a8:80:14:8a:1d:97:d8: db:7c:f1:ef:60:b6:ef:62:9d:01:48:0c:65:82:89: d5:4a:95:6f:b7:fb:4d:45:34:ac:4e:fc:8c:87:8c: b9:f1:73:07:a2:fc:4b:4c:d0:b5:29:fe:2f:22:f1: 2e:30:50:90:36:e0:1c:2d:da:57:57:f7:e9:55:a6: 1c:a5:a6:26:a0:94:49:22:bd:5a:0d:a9:7d:04:22: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:26:60:82:41:DD:0C:04:4C:69:F9:43:AA:65:D2:46:A2:59:B4:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfbd0837-4eff-479f-a1bc-b854caccddcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.68.0/24 Signature Algorithm: sha256WithRSAEncryption 88:56:e4:13:70:d9:e7:80:cf:83:64:ef:ab:46:d3:c9:92:ed: 7c:65:76:dd:7f:9d:b7:58:e7:ed:c4:26:ec:1e:25:8b:46:a5: a1:6a:b5:45:2a:9f:78:11:fa:43:93:3c:09:71:eb:4e:1b:cd: 56:16:6e:19:3a:ea:44:99:6b:fa:72:16:cf:56:59:ab:40:3a: e0:02:22:57:37:db:1f:27:ee:99:7a:e0:f8:5a:4f:7c:17:05: fd:f6:fb:ca:b6:af:ea:4f:89:da:c3:a5:c8:3e:6a:fb:90:29: f2:30:0b:37:08:63:c1:c4:9d:08:3f:44:1d:75:2f:8f:88:0a: 1b:bd:a4:81:11:c1:f5:6d:2d:69:73:a0:ab:6e:17:a5:c3:d7: 92:a9:08:eb:78:dc:ff:25:f9:b9:e1:5b:30:2f:0c:13:9a:3f: af:05:3d:59:a5:8c:41:87:06:31:71:08:20:6b:0b:ea:d9:6d: b4:2a:91:b0:13:bc:4e:41:f0:51:e8:84:2e:99:ca:b9:3b:81: 07:fb:10:31:8a:f5:60:eb:a4:9c:18:94:19:3c:f8:8b:b7:91: 18:9b:44:f9:20:a4:8b:5d:16:f4:ea:6a:38:92:81:39:42:a8: 92:eb:4b:bc:95:d6:e2:04:49:03:50:74:07:cc:54:5f:a8:4c: 80:4f:09:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQGM6l7d9q9g6OlSzxswOJVD9FmkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAxMTAwWhcNMjYwMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjgxOTY4NmYwMzc3ZmUzODQxMDgxMDc0Mzk4ZjVjZmIz MzliMWM0YzQwM2NlZmVhZTZhMDA0YjY5YjE0ZjkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSmqYE22X8y3epv3MT8Bx/7wl6fmXrGwQX2sgqLwDHehy4 6i/caxcKTu7MbTurXodNWEVeCxWe7J/i1kDidXL2VXx434C/fK7te6T7XsfuSNcp Sy1qJEyLifJkvDJCHT5emXrVLZUdYVE5sHdWw+vJrgCy4nzWXae9CiWIT5ZuOLtO VYuWo6w54uyvOuVTwh5wZ0zQvdVul9YgniAmGhbmCxorTuB6Cvexw4ZlqIAUih2X 2Nt88e9gtu9inQFIDGWCidVKlW+3+01FNKxO/IyHjLnxcwei/EtM0LUp/i8i8S4w UJA24Bwt2ldX9+lVphylpiaglEkivVoNqX0EIvSHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaiZggkHdDARMaflDqmXSRqJZtNYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmYmQwODM3LTRlZmYtNDc5Zi1hMWJjLWI4NTRjYWNjZGRjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EQwDQYJKoZIhvcNAQELBQADggEBAIhW5BNw2eeAz4Nk76tG08mS7Xxl dt1/nbdY5+3EJuweJYtGpaFqtUUqn3gR+kOTPAlx604bzVYWbhk66kSZa/pyFs9W WatAOuACIlc32x8n7pl64PhaT3wXBf32+8q2r+pPidrDpcg+avuQKfIwCzcIY8HE nQg/RB11L4+IChu9pIERwfVtLWlzoKtuF6XD15KpCOt43P8l+bnhWzAvDBOaP68F PVmljEGHBjFxCCBrC+rZbbQqkbATvE5B8FHohC6Zyrk7gQf7EDGK9WDrpJwYlBk8 +Iu3kRibRPkgpItdFvTqajiSgTlCqJLrS7yV1uIESQNQdAfMVF+oTIBPCU4= -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:01 2025 by rpki-client