This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da4222c9-6bc4-41ac-a509-817c10fbf8d8.roa File: da4222c9-6bc4-41ac-a509-817c10fbf8d8.roa (raw, json) Hash identifier: MQhl1vFa+vL7bvMBfEbgvS2ZJa/MoC3VuKPO9lA5ge4= Subject key identifier: 4B:7B:77:BC:DD:D1:19:61:97:87:22:28:A0:34:25:47:25:D7:B6:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C69E73728D8868BD2C3A4572EF7D6DCB8248573 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da4222c9-6bc4-41ac-a509-817c10fbf8d8.roa Signing time: Tue 25 Nov 2025 00:50:31 +0000 ROA not before: Tue 25 Nov 2025 00:50:31 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 31.220.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:69:e7:37:28:d8:86:8b:d2:c3:a4:57:2e:f7:d6:dc:b8:24:85:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 25 00:50:31 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=fc470bd0b82236e2b30b4bc216ce74a67d2c4eb33f98a393e3453008943cf56b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:d2:76:30:36:81:fc:5d:94:54:1f:17:aa: 3d:8a:9a:40:1a:3f:ae:28:1d:d5:4b:7f:e7:cc:d8: 1c:e1:ca:05:ee:fa:84:bd:09:2c:7f:2b:b2:9f:ff: f0:1d:3d:cf:00:0a:75:6a:25:27:4b:db:91:e8:fe: a7:88:85:fd:f0:fb:99:52:ef:03:24:6a:1b:2b:c8: 79:df:c9:8e:04:fd:75:36:72:40:1c:c5:71:6c:b8: 13:85:55:06:4f:4b:fa:1c:ef:3e:e4:2d:88:47:b1: 0e:e7:ed:f1:87:65:5a:bc:ee:cd:9f:ff:08:43:26: bd:13:2d:71:e9:1f:6a:c4:f4:a2:cf:b8:d0:99:e7: 85:e5:2b:15:5c:af:8e:03:46:32:a8:6f:93:0c:c7: 00:10:ef:09:c0:e8:6e:5a:61:9b:f8:13:50:5a:f5: e6:da:31:c8:ad:a9:af:16:31:a1:0c:1e:76:ea:08: c2:bb:64:ee:c3:40:b3:2b:70:3d:f2:7b:9e:91:a4: da:d0:8f:59:02:54:d1:b9:23:da:4c:b9:76:f5:a1: 39:a0:10:d7:a5:ae:2f:ad:a1:00:32:c4:72:84:3c: 24:5e:63:30:6a:32:57:10:b3:31:cc:69:41:35:94: 2e:1a:00:9c:a3:58:1a:39:50:08:b0:fc:cc:85:e6: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7B:77:BC:DD:D1:19:61:97:87:22:28:A0:34:25:47:25:D7:B6:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da4222c9-6bc4-41ac-a509-817c10fbf8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.236.0/24 Signature Algorithm: sha256WithRSAEncryption 01:f9:9e:fd:4e:ed:08:23:c8:09:af:5d:91:c9:b4:3f:e9:57: 00:f9:56:4e:70:89:14:34:14:6c:23:41:49:4a:b1:0b:f7:bb: ac:2a:d2:88:89:8f:08:ce:34:33:af:32:12:a8:51:34:2f:1c: 90:f3:be:51:ff:d0:7c:70:5c:ec:90:c2:e0:48:29:e9:87:f0: bf:b5:7b:58:d2:67:cd:ac:2d:7f:82:73:78:63:c9:34:35:0a: c8:b2:b0:bf:71:74:ef:b4:40:c5:22:e0:47:08:db:3d:f0:7e: 2d:56:43:e3:96:63:4f:f2:95:7c:ed:da:5b:03:5a:e7:6e:97: 59:b7:5d:cc:d4:8a:c0:09:8a:ca:b0:b1:f4:a0:f7:03:9c:ec: 92:9a:f6:e8:29:48:70:cf:1a:1e:e4:8b:f4:4a:c2:41:d8:54: 4d:c7:40:24:49:45:14:fa:cc:61:cd:75:08:4e:d3:e9:2f:09: be:0c:16:64:8c:69:ba:a5:7e:57:a6:3b:46:2c:75:53:8c:aa: a2:75:89:41:63:a3:51:72:06:74:42:fe:cb:60:b1:81:c8:c5: 16:19:28:4a:c7:ac:0d:08:2b:34:00:3b:db:57:6c:27:8a:9a: 8f:0c:54:af:b5:e0:d9:b7:0c:75:6c:21:62:94:0f:f7:8e:e2: dd:63:fa:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDGnnNyjYhovSw6RXLvfW3LgkhXMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI1MDA1MDMxWhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzQ3MGJkMGI4MjIzNmUyYjMwYjRiYzIxNmNlNzRhNjdk MmM0ZWIzM2Y5OGEzOTNlMzQ1MzAwODk0M2NmNTZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiTNJ2MDaB/F2UVB8Xqj2KmkAaP64oHdVLf+fM2BzhygXu +oS9CSx/K7Kf//AdPc8ACnVqJSdL25Ho/qeIhf3w+5lS7wMkahsryHnfyY4E/XU2 ckAcxXFsuBOFVQZPS/oc7z7kLYhHsQ7n7fGHZVq87s2f/whDJr0TLXHpH2rE9KLP uNCZ54XlKxVcr44DRjKob5MMxwAQ7wnA6G5aYZv4E1Ba9ebaMcitqa8WMaEMHnbq CMK7ZO7DQLMrcD3ye56RpNrQj1kCVNG5I9pMuXb1oTmgENelri+toQAyxHKEPCRe YzBqMlcQszHMaUE1lC4aAJyjWBo5UAiw/MyF5jRdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS3t3vN3RGWGXhyIooDQlRyXXtjowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhNDIyMmM5LTZiYzQtNDFhYy1hNTA5LTgxN2MxMGZiZjhkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAf3OwwDQYJKoZIhvcNAQELBQADggEBAAH5nv1O7QgjyAmvXZHJtD/pVwD5 Vk5wiRQ0FGwjQUlKsQv3u6wq0oiJjwjONDOvMhKoUTQvHJDzvlH/0HxwXOyQwuBI KemH8L+1e1jSZ82sLX+Cc3hjyTQ1CsiysL9xdO+0QMUi4EcI2z3wfi1WQ+OWY0/y lXzt2lsDWudul1m3XczUisAJisqwsfSg9wOc7JKa9ugpSHDPGh7ki/RKwkHYVE3H QCRJRRT6zGHNdQhO0+kvCb4MFmSMabqlflemO0YsdVOMqqJ1iUFjo1FyBnRC/stg sYHIxRYZKErHrA0IKzQAO9tXbCeKmo8MVK+14Nm3DHVsIWKUD/eO4t1j+hI= -----END CERTIFICATE-----Generated at Sat Dec 6 12:01:07 2025 by rpki-client