This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3de168b-9f50-44d1-9a40-b87bb278f41e.roa File: d3de168b-9f50-44d1-9a40-b87bb278f41e.roa (raw, json) Hash identifier: GI2qzRG0z5u6SqHhlaF47CWJ9VRHZCRKBlTs7odd03E= Subject key identifier: D6:66:0A:FE:B5:51:D0:46:1D:D0:E3:58:6D:D2:5F:DF:4C:AC:8A:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12A6E7601BE81B11209D3D78A2061AFEB17E9657 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3de168b-9f50-44d1-9a40-b87bb278f41e.roa Signing time: Sat 15 Nov 2025 00:10:10 +0000 ROA not before: Sat 15 Nov 2025 00:10:10 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a6:e7:60:1b:e8:1b:11:20:9d:3d:78:a2:06:1a:fe:b1:7e:96:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 15 00:10:10 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=b3b1ac6f3b15dd013020b635723bb0f288c853e3a2c37216aa787677481b3069, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:61:09:7b:15:35:1c:b0:47:0f:23:c4:0b: f3:0d:c2:13:ca:7d:7a:ca:41:d9:78:db:4e:64:f7: b0:bd:45:91:38:c0:7f:f3:cf:17:8b:3a:f2:ff:9e: 6d:f9:c3:ec:e8:33:23:f2:5b:8a:7f:d8:9e:cb:44: f1:dd:cc:f6:51:01:40:e0:30:e8:22:5e:02:76:60: 58:54:80:47:44:ca:ce:5f:d5:83:d2:25:7e:59:0e: bd:ba:06:af:b1:1f:9b:ca:d4:e2:90:f9:d5:7c:99: ea:c8:20:3e:b7:e2:b0:f8:77:5e:04:ad:17:3f:fd: 49:05:14:f1:b7:5e:9b:0c:69:2f:c9:fe:a5:2d:b8: cb:ff:1f:b3:4d:72:12:7f:68:8f:7f:fd:33:3f:b7: d6:ab:c0:10:9f:50:17:d6:94:ec:11:21:c5:14:7e: e0:9e:db:4c:78:20:54:ed:40:26:4a:85:d7:5a:97: 67:04:76:68:35:44:8a:5c:39:48:c9:fb:24:3f:8e: 75:f9:f9:70:ee:95:d6:2b:7f:89:77:97:90:54:da: 5c:e6:1f:43:b7:de:25:69:93:be:28:75:d3:15:fd: 31:58:da:4d:29:2f:7d:05:f7:90:17:41:e4:b4:5d: 06:29:5b:67:d9:6a:2a:02:d2:40:66:8e:d9:bf:b4: c7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:66:0A:FE:B5:51:D0:46:1D:D0:E3:58:6D:D2:5F:DF:4C:AC:8A:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3de168b-9f50-44d1-9a40-b87bb278f41e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.24.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:12:15:74:a9:b3:3f:5f:a7:77:47:27:93:e0:90:17:08:4e: 75:81:4b:6e:1e:2d:10:b9:0a:5e:60:b6:a5:9f:34:36:53:aa: 08:ae:8c:9b:de:cc:88:33:f6:63:23:3d:22:93:4e:fe:13:56: 06:53:ad:2a:c4:a1:3b:9b:2d:ac:54:9e:f1:a3:0e:4f:08:37: 07:5a:b3:ab:6c:db:41:a4:6f:d3:9b:d8:4c:8b:ad:25:3a:68: 73:ef:fa:44:db:01:da:40:d1:ba:4d:e9:e3:97:e4:5b:16:ac: 26:61:77:68:69:63:14:69:ff:b2:50:c1:f3:ee:83:d8:a3:8e: 55:d8:af:c2:50:24:7f:fb:d3:76:cc:f3:1a:49:fa:bb:59:35: bf:7d:db:da:ae:1e:23:f6:a9:f5:e9:a0:72:50:a9:89:dd:cb: 5e:cf:f8:b9:51:2c:f1:40:62:f6:84:87:88:8a:e5:8d:4d:8c: 70:ba:80:f2:e4:d9:9a:d2:6d:64:cb:90:01:0c:d3:62:b6:cb: 0e:16:5b:75:78:78:8e:30:0c:24:56:0f:85:82:f3:f7:7b:bd: a9:80:10:ad:4b:f1:96:e0:d0:54:03:1b:53:82:d2:27:75:b1: d6:6f:79:54:7d:c9:bb:01:cc:02:08:f6:b1:6c:df:e7:34:91: e2:a6:60:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEqbnYBvoGxEgnT14ogYa/rF+llcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE1MDAxMDEwWhcNMjUxMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2IxYWM2ZjNiMTVkZDAxMzAyMGI2MzU3MjNiYjBmMjg4 Yzg1M2UzYTJjMzcyMTZhYTc4NzY3NzQ4MWIzMDY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNXmEJexU1HLBHDyPEC/MNwhPKfXrKQdl4205k97C9RZE4 wH/zzxeLOvL/nm35w+zoMyPyW4p/2J7LRPHdzPZRAUDgMOgiXgJ2YFhUgEdEys5f 1YPSJX5ZDr26Bq+xH5vK1OKQ+dV8merIID634rD4d14ErRc//UkFFPG3XpsMaS/J /qUtuMv/H7NNchJ/aI9//TM/t9arwBCfUBfWlOwRIcUUfuCe20x4IFTtQCZKhdda l2cEdmg1RIpcOUjJ+yQ/jnX5+XDuldYrf4l3l5BU2lzmH0O33iVpk74oddMV/TFY 2k0pL30F95AXQeS0XQYpW2fZaioC0kBmjtm/tMdtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1mYK/rVR0EYd0ONYbdJf30ysimgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzZGUxNjhiLTlmNTAtNDRkMS05YTQwLWI4N2JiMjc4ZjQxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX/hgwDQYJKoZIhvcNAQELBQADggEBAIwSFXSpsz9fp3dHJ5PgkBcITnWB S24eLRC5Cl5gtqWfNDZTqgiujJvezIgz9mMjPSKTTv4TVgZTrSrEoTubLaxUnvGj Dk8INwdas6ts20Gkb9Ob2EyLrSU6aHPv+kTbAdpA0bpN6eOX5FsWrCZhd2hpYxRp /7JQwfPug9ijjlXYr8JQJH/703bM8xpJ+rtZNb9929quHiP2qfXpoHJQqYndy17P +LlRLPFAYvaEh4iK5Y1NjHC6gPLk2ZrSbWTLkAEM02K2yw4WW3V4eI4wDCRWD4WC 8/d7vamAEK1L8Zbg0FQDG1OC0id1sdZveVR9ybsBzAII9rFs3+c0keKmYPY= -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:05 2025 by rpki-client