This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa File: d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa (raw, json) Hash identifier: PSCTGYlj9l9qVs4+Vs7AGrrLtxBYLvCBhBCPHl5i8oU= Subject key identifier: 10:E6:DE:D6:2D:93:70:23:F7:08:6F:D1:9B:91:5A:F0:14:5B:F6:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DE60454F43604F52C7574594DA69CFCD06212E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa Signing time: Wed 19 Nov 2025 00:21:17 +0000 ROA not before: Wed 19 Nov 2025 00:21:17 +0000 ROA not after: Tue 17 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.168.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e6:04:54:f4:36:04:f5:2c:75:74:59:4d:a6:9c:fc:d0:62:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 19 00:21:17 2025 GMT Not After : Feb 17 23:59:59 2026 GMT Subject: serialNumber=8969352ffd83d19e4fba91c1921306c997a790b3574e130b3987b8c13a609799, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:91:07:e8:d6:14:e7:d5:3c:c0:b7:ad:3e: 3e:bc:51:4c:18:14:00:8e:51:20:5c:32:dc:71:cc: 22:7c:23:dd:2e:ff:13:c5:b5:e5:55:d9:db:1f:95: db:f8:7b:5f:a8:3c:8f:be:92:ba:0a:b4:de:06:a5: 2d:a2:45:c6:de:b7:a3:86:67:f4:f6:31:d7:b1:56: 6c:78:1e:c9:86:5f:aa:64:ea:a5:7b:dc:39:f9:45: be:6f:2d:ba:99:0b:d9:e3:31:9f:56:21:a3:d0:37: b1:e3:71:f5:6e:67:9e:16:72:83:63:d2:7b:a6:67: e1:12:42:63:3d:41:0d:81:05:3f:53:ac:fd:b6:16: a6:db:6e:11:8d:a6:4f:b0:b5:a2:21:af:54:cc:f9: da:69:70:89:da:de:29:ea:07:d8:0c:b0:89:f1:55: 09:c0:e6:d6:e2:c0:17:73:f1:64:f7:fd:fa:cd:61: cb:10:9f:ee:f5:15:5f:12:83:2d:28:ba:17:c7:e0: 49:ff:22:cc:df:39:bc:66:b5:1f:eb:a8:1b:f9:bf: 39:5f:4a:e8:55:51:c7:2d:e0:53:16:0e:86:78:18: f1:14:db:41:5f:21:05:1e:d7:ba:11:cb:f9:ba:a9: 6c:ff:29:ba:3e:23:03:87:bf:8b:a6:aa:53:cc:13: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E6:DE:D6:2D:93:70:23:F7:08:6F:D1:9B:91:5A:F0:14:5B:F6:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.168.128.0/17 Signature Algorithm: sha256WithRSAEncryption 32:33:eb:75:4a:48:08:40:bd:05:91:57:dd:b8:cf:a3:7a:27: 9e:a5:5f:25:03:96:32:99:40:ad:4b:39:c6:1e:20:ff:95:e2: e7:db:d2:51:b9:52:43:32:96:99:91:43:c3:e1:d1:9c:04:98: b9:ba:0a:2a:34:12:03:73:14:9b:73:db:86:24:0a:d5:ad:2d: 84:60:25:9b:25:c0:60:e6:0d:c2:17:cf:f6:46:78:d2:51:de: 29:45:a6:f2:8a:02:3c:71:52:9f:fa:97:5c:55:cd:40:23:59: c7:f0:ff:ea:bd:62:9c:c7:db:06:03:fe:be:ad:d3:72:61:16: 5e:0c:94:1a:96:4b:bf:2f:9f:38:a1:97:05:17:fd:36:dc:f4: 9d:9f:57:03:97:55:55:c0:8c:c9:04:4e:2c:9f:c3:69:bb:24: 88:ae:4b:e5:c6:fa:1a:30:c3:9a:7a:43:3b:9c:47:ed:fb:33: 74:09:a6:9a:6c:ef:1e:7c:1c:0f:1a:2f:aa:ad:02:db:2d:68: c9:57:2f:c5:fa:49:b4:d8:34:0b:e5:2f:13:f6:35:db:33:dc: 48:26:d3:9c:fd:29:d4:bc:3d:9c:b4:b9:38:8c:48:22:19:3d: 9f:13:00:8b:05:a6:f4:7e:6b:1c:b4:fc:68:95:47:9c:ca:49: 77:e3:10:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDeYEVPQ2BPUsdXRZTaac/NBiEuAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE5MDAyMTE3WhcNMjYwMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTY5MzUyZmZkODNkMTllNGZiYTkxYzE5MjEzMDZjOTk3 YTc5MGIzNTc0ZTEzMGIzOTg3YjhjMTNhNjA5Nzk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCzZEH6NYU59U8wLetPj68UUwYFACOUSBcMtxxzCJ8I90u /xPFteVV2dsfldv4e1+oPI++kroKtN4GpS2iRcbet6OGZ/T2MdexVmx4HsmGX6pk 6qV73Dn5Rb5vLbqZC9njMZ9WIaPQN7HjcfVuZ54WcoNj0numZ+ESQmM9QQ2BBT9T rP22FqbbbhGNpk+wtaIhr1TM+dppcIna3inqB9gMsInxVQnA5tbiwBdz8WT3/frN YcsQn+71FV8Sgy0ouhfH4En/IszfObxmtR/rqBv5vzlfSuhVUcct4FMWDoZ4GPEU 20FfIQUe17oRy/m6qWz/Kbo+IwOHv4umqlPME8lpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEObe1i2TcCP3CG/Rm5Fa8BRb9m8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2MjI2MmUwLWRmNzUtNGRjOC05ZWQyLTUzMGY2YjdjZDk1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeQqIAwDQYJKoZIhvcNAQELBQADggEBADIz63VKSAhAvQWRV924z6N6J56l XyUDljKZQK1LOcYeIP+V4ufb0lG5UkMylpmRQ8Ph0ZwEmLm6Cio0EgNzFJtz24Yk CtWtLYRgJZslwGDmDcIXz/ZGeNJR3ilFpvKKAjxxUp/6l1xVzUAjWcfw/+q9YpzH 2wYD/r6t03JhFl4MlBqWS78vnzihlwUX/Tbc9J2fVwOXVVXAjMkETiyfw2m7JIiu S+XG+howw5p6QzucR+37M3QJppps7x58HA8aL6qtAtstaMlXL8X6SbTYNAvlLxP2 Ndsz3Egm05z9KdS8PZy0uTiMSCIZPZ8TAIsFpvR+axy0/GiVR5zKSXfjEKs= -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:46 2025 by rpki-client