This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8a0435e-dd60-4735-ae02-2816c22e8bca.roa File: d8a0435e-dd60-4735-ae02-2816c22e8bca.roa (raw, json) Hash identifier: F6E6UyXYKbjJyHvkI0FrXOFCTLMoXsBKrbfXHyQOPeI= Subject key identifier: 2D:AC:C1:72:4D:F9:9E:9B:AB:CD:00:6A:30:50:32:07:B0:D7:2F:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26038D7AF9CA684900666E09362E26B321093C81 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8a0435e-dd60-4735-ae02-2816c22e8bca.roa Signing time: Sat 10 Jan 2026 08:06:38 +0000 ROA not before: Sat 10 Jan 2026 08:06:38 +0000 ROA not after: Fri 10 Apr 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.20.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:03:8d:7a:f9:ca:68:49:00:66:6e:09:36:2e:26:b3:21:09:3c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 10 08:06:38 2026 GMT Not After : Apr 10 23:59:59 2026 GMT Subject: serialNumber=65f0b356fcb61c9051dfa2cca449aded46d0b26c27a80b2859856f5a719f2065, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:42:2c:18:0c:fe:23:17:7b:f6:65:68:3f:d8: b7:c9:ee:28:69:11:0f:df:30:5c:77:48:95:14:74: 6c:e3:4a:f0:9b:12:3b:e4:29:41:18:ec:68:1b:7d: 7a:ba:19:63:54:be:8a:f9:51:04:39:c5:b4:99:72: 3c:6a:b5:1d:3f:f3:d4:41:50:41:3b:29:d9:89:28: f5:b7:07:5d:ad:82:3f:91:a0:76:01:69:b8:a6:7c: d9:be:ee:84:f0:2f:0d:11:93:b2:50:d7:b3:4d:32: 48:05:3e:27:f8:6a:29:f8:39:38:89:b9:03:47:52: 59:b3:ec:cb:7a:f8:d3:c6:74:55:a9:38:13:88:21: 33:b9:86:2c:1b:da:30:46:07:7a:ce:be:c9:ab:ff: 1c:58:63:b9:12:c3:2f:d5:77:25:9c:0d:77:56:df: b6:94:77:36:45:6e:32:62:82:ae:33:50:43:25:51: f0:64:b3:8c:63:10:6a:47:52:e1:c5:f4:01:8a:4b: 93:4f:d6:40:32:1d:6d:10:bb:e4:0e:9a:b1:53:0a: 2b:c9:0b:22:8a:10:3e:82:a0:1f:7a:f1:d2:8c:83: ae:7b:6d:73:59:0a:d5:1f:17:f1:97:04:52:83:e1: c3:80:e1:54:70:ff:88:24:85:4a:12:3f:ed:2f:b8: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AC:C1:72:4D:F9:9E:9B:AB:CD:00:6A:30:50:32:07:B0:D7:2F:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8a0435e-dd60-4735-ae02-2816c22e8bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.20.0.0/15 Signature Algorithm: sha256WithRSAEncryption 1a:ae:94:ff:87:5f:7c:f6:fc:3c:1c:44:e2:0b:2f:88:e7:6d: 4b:9e:5d:2c:97:41:d3:d8:29:b1:2e:ca:59:23:86:38:65:79: 7d:ad:63:1e:ff:c5:23:94:07:65:9e:e5:95:41:c0:eb:57:db: 87:c9:af:7c:d3:86:47:7b:60:9f:26:f9:ae:6d:1f:0b:96:5e: 1a:1c:95:1a:e4:96:d4:fd:50:f9:cf:f9:48:85:7e:b9:17:31: 83:00:eb:e7:ad:22:ac:78:25:4c:82:a1:b3:75:ca:f7:58:61: ef:6f:71:ab:2d:9a:9b:d1:8b:7d:ae:f5:24:d6:47:3b:6a:0b: 3c:5f:1d:45:61:2f:73:ff:f9:ea:01:d0:85:06:28:cf:00:61: ae:68:6a:f1:95:9a:46:d9:af:1b:f2:49:73:28:61:b1:94:26: ff:9b:e6:8a:af:b4:cd:ef:d6:b4:8c:86:f9:a4:b6:f3:67:ad: 7a:fd:cd:17:42:3e:1f:d6:f0:71:33:1a:be:74:6f:e6:e4:7b: ff:d5:12:00:7f:2e:92:f1:a1:1a:24:b9:66:fe:a2:76:3f:3c: 35:b7:21:ec:3e:91:2c:4a:66:05:7c:c7:9e:6a:1a:65:8e:0f: d9:fe:a6:81:0b:58:33:3b:e9:83:85:db:cc:fe:73:b3:5a:d6: 0a:d4:37:3a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJgONevnKaEkAZm4JNi4msyEJPIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMTEwMDgwNjM4WhcNMjYwNDEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWYwYjM1NmZjYjYxYzkwNTFkZmEyY2NhNDQ5YWRlZDQ2 ZDBiMjZjMjdhODBiMjg1OTg1NmY1YTcxOWYyMDY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbQiwYDP4jF3v2ZWg/2LfJ7ihpEQ/fMFx3SJUUdGzjSvCb EjvkKUEY7GgbfXq6GWNUvor5UQQ5xbSZcjxqtR0/89RBUEE7KdmJKPW3B12tgj+R oHYBabimfNm+7oTwLw0Rk7JQ17NNMkgFPif4ain4OTiJuQNHUlmz7Mt6+NPGdFWp OBOIITO5hiwb2jBGB3rOvsmr/xxYY7kSwy/VdyWcDXdW37aUdzZFbjJigq4zUEMl UfBks4xjEGpHUuHF9AGKS5NP1kAyHW0Qu+QOmrFTCivJCyKKED6CoB968dKMg657 bXNZCtUfF/GXBFKD4cOA4VRw/4gkhUoSP+0vuDUPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULazBck35npurzQBqMFAyB7DXL9wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4YTA0MzVlLWRkNjAtNDczNS1hZTAyLTI4MTZjMjJlOGJjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2FDANBgkqhkiG9w0BAQsFAAOCAQEAGq6U/4dffPb8PBxE4gsviOdtS55d LJdB09gpsS7KWSOGOGV5fa1jHv/FI5QHZZ7llUHA61fbh8mvfNOGR3tgnyb5rm0f C5ZeGhyVGuSW1P1Q+c/5SIV+uRcxgwDr560irHglTIKhs3XK91hh729xqy2am9GL fa71JNZHO2oLPF8dRWEvc//56gHQhQYozwBhrmhq8ZWaRtmvG/JJcyhhsZQm/5vm iq+0ze/WtIyG+aS282etev3NF0I+H9bwcTMavnRv5uR7/9USAH8ukvGhGiS5Zv6i dj88Nbch7D6RLEpmBXzHnmoaZY4P2f6mgQtYMzvpg4XbzP5zs1rWCtQ3Og== -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:18 2026 by rpki-client