This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d40ce859-6725-4b9d-a6c6-30915d571df2.roa File: d40ce859-6725-4b9d-a6c6-30915d571df2.roa (raw, json) Hash identifier: BZH0JHt7a6kyD4DL5A6rQZ93m3yOVKV3g8aDwEPQno8= Subject key identifier: 01:45:84:2D:38:BC:E3:1B:50:E9:90:05:E9:34:60:DD:EF:5F:37:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A1B8F24D4B5875A0355151C9ABB0FEA1C9161B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d40ce859-6725-4b9d-a6c6-30915d571df2.roa Signing time: Tue 25 Nov 2025 01:01:11 +0000 ROA not before: Tue 25 Nov 2025 01:01:11 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 44.220.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1b:8f:24:d4:b5:87:5a:03:55:15:1c:9a:bb:0f:ea:1c:91:61:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 01:01:11 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=84fce57f317c441f1b50bff181d6a7eb2dcced892add9b40bc11bdbae9699b3b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7d:5e:4e:3f:f5:b5:fb:19:8e:ed:a6:21:a6: cf:4c:9f:97:83:2e:94:93:b8:5f:89:52:39:3f:62: 2f:59:34:b0:bb:4a:3f:74:e5:52:34:31:d6:eb:17: c3:18:28:78:4a:65:97:0b:39:5b:ff:75:66:34:f1: 55:e6:90:5c:d5:ae:5b:2c:7e:6b:4f:af:b0:7c:8b: 30:b5:1e:5b:35:db:92:30:9e:5e:72:22:05:01:80: cf:b3:1c:ca:73:7b:98:c8:d2:91:98:d0:53:00:42: e8:9f:41:bd:82:4a:7e:f3:17:9a:89:53:9c:8e:45: 18:ce:ed:61:26:54:92:f9:c0:e2:6d:ef:2b:94:e1: bc:d7:36:37:85:fa:da:84:74:30:64:97:46:f4:5d: 11:e4:81:9f:57:ac:5f:52:1f:4d:7c:5d:aa:2a:19: 2a:f2:7c:6d:ff:15:8e:86:62:e6:7b:d4:2f:a4:fd: 05:0e:31:d6:2b:f0:62:13:d5:1b:c1:ea:2b:f8:78: 5c:44:bd:01:c4:1b:f9:43:33:7f:0b:50:58:37:99: c3:95:a1:52:fb:9a:6d:9f:f2:9e:5f:94:af:d8:1c: 6f:55:9d:8d:93:9e:ee:da:68:ee:44:df:a5:2a:b4: 60:f8:b0:3b:a8:a2:e6:4c:f4:ee:ce:db:2d:33:88: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:45:84:2D:38:BC:E3:1B:50:E9:90:05:E9:34:60:DD:EF:5F:37:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d40ce859-6725-4b9d-a6c6-30915d571df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.220.76.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:20:b1:5c:c0:d2:e0:6d:92:49:b9:f3:4b:aa:33:92:21:d2: 61:72:1e:db:1c:70:45:33:bb:82:da:7f:cf:d2:cd:a8:f2:59: 37:c3:75:f0:6b:84:62:de:16:7c:13:a1:ca:2c:85:22:74:8a: 3b:8d:6d:e5:bc:3b:00:99:91:71:89:12:eb:a4:de:b5:8a:c4: e4:4a:e0:7d:f3:78:bb:84:94:c7:ca:11:64:2d:b3:8f:2a:02: b4:31:c9:e9:fc:2c:2f:f8:d1:80:f0:42:73:6b:d2:b6:bb:97: bf:12:cd:dc:a5:85:13:db:35:23:14:19:a8:dc:a5:5b:27:d6: 72:5e:3b:1b:37:86:c6:a7:e7:c6:a9:73:7d:7f:c1:ce:8b:32: ce:72:54:06:98:90:ca:30:6f:80:c4:ca:a7:2d:8a:3b:5b:19: 0a:fd:55:d3:55:96:20:1a:48:d8:0c:87:69:63:60:66:fb:84: ce:ca:1c:f1:f2:da:ce:3a:a4:cb:6f:fc:fd:3b:13:1e:ae:4c: db:b3:7b:7e:6f:70:b0:2e:91:bd:79:ae:06:da:6d:a5:91:b4: 80:57:87:70:9b:6d:1b:81:ac:5e:a2:5d:9d:6d:ee:d2:6e:df: 44:b4:83:a0:d2:e0:f3:85:5f:e4:e4:d3:0c:16:3c:38:81:16: c0:b4:3b:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKhuPJNS1h1oDVRUcmrsP6hyRYbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDEwMTExWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NGZjZTU3ZjMxN2M0NDFmMWI1MGJmZjE4MWQ2YTdlYjJk Y2NlZDg5MmFkZDliNDBiYzExYmRiYWU5Njk5YjNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjfV5OP/W1+xmO7aYhps9Mn5eDLpSTuF+JUjk/Yi9ZNLC7 Sj905VI0MdbrF8MYKHhKZZcLOVv/dWY08VXmkFzVrlssfmtPr7B8izC1Hls125Iw nl5yIgUBgM+zHMpze5jI0pGY0FMAQuifQb2CSn7zF5qJU5yORRjO7WEmVJL5wOJt 7yuU4bzXNjeF+tqEdDBkl0b0XRHkgZ9XrF9SH018XaoqGSryfG3/FY6GYuZ71C+k /QUOMdYr8GIT1RvB6iv4eFxEvQHEG/lDM38LUFg3mcOVoVL7mm2f8p5flK/YHG9V nY2Tnu7aaO5E36UqtGD4sDuoouZM9O7O2y0ziGTBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAUWELTi84xtQ6ZAF6TRg3e9fN+MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0MGNlODU5LTY3MjUtNGI5ZC1hNmM2LTMwOTE1ZDU3MWRmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs3EwwDQYJKoZIhvcNAQELBQADggEBAHsgsVzA0uBtkkm580uqM5Ih0mFy HtsccEUzu4Laf8/SzajyWTfDdfBrhGLeFnwTocoshSJ0ijuNbeW8OwCZkXGJEuuk 3rWKxORK4H3zeLuElMfKEWQts48qArQxyen8LC/40YDwQnNr0ra7l78SzdylhRPb NSMUGajcpVsn1nJeOxs3hsan58apc31/wc6LMs5yVAaYkMowb4DEyqctijtbGQr9 VdNVliAaSNgMh2ljYGb7hM7KHPHy2s46pMtv/P07Ex6uTNuze35vcLAukb15rgba baWRtIBXh3CbbRuBrF6iXZ1t7tJu30S0g6DS4POFX+Tk0wwWPDiBFsC0O+4= -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:00 2025 by rpki-client