This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da4f36e5-5307-4447-b46d-47df8180ef89.roa File: da4f36e5-5307-4447-b46d-47df8180ef89.roa (raw, json) Hash identifier: smNCZJLJ5DoGaZ5B4zuITuaqsD6FucrcTO5Jey+aWUA= Subject key identifier: 97:FF:4A:2A:E6:55:FD:3E:76:DF:0C:09:21:F6:C5:04:93:5E:C4:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7ADB4673BD2CF276CD2BCFFD8B07583F0936BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da4f36e5-5307-4447-b46d-47df8180ef89.roa Signing time: Thu 27 Nov 2025 00:40:05 +0000 ROA not before: Thu 27 Nov 2025 00:40:05 +0000 ROA not after: Wed 25 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:db:46:73:bd:2c:f2:76:cd:2b:cf:fd:8b:07:58:3f:09:36:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 27 00:40:05 2025 GMT Not After : Feb 25 23:59:59 2026 GMT Subject: serialNumber=a5256b39d6ade3dbabf0f80b14a1b1272bfb22eb10a7f51c78df403395dbe5ea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:1f:51:fd:c5:90:e2:dd:51:30:24:d2:d2: 9e:d0:11:29:49:39:2a:f3:e3:3a:b1:8b:6d:c4:24: 5b:17:da:b4:ba:0d:cb:49:85:0d:f2:89:92:04:02: 5e:d4:14:d2:19:39:5a:7a:99:22:e8:bb:44:ca:cf: 1f:6f:46:6d:7b:b0:74:fa:f0:3f:5b:09:cc:b6:9f: b4:02:4a:ea:dc:78:3f:d2:c3:c2:90:60:22:39:0a: 64:96:61:13:ce:a9:35:4f:d5:e3:25:99:37:c1:36: b3:31:c3:ef:5e:1b:1f:71:61:1a:44:9b:15:c2:fd: e1:57:54:9c:64:30:53:c5:1c:a1:fb:67:a1:58:e5: 14:71:19:5c:df:6e:da:1e:e2:ce:19:4d:1e:2f:34: ec:aa:b7:42:2c:cf:db:f4:3e:24:13:7b:77:7e:82: 9c:05:16:24:7f:0b:5e:ee:e1:fb:e4:45:d6:ea:60: dd:7d:50:ae:b9:6f:b6:b2:ef:6f:41:72:a1:5b:44: 13:97:43:7a:25:2d:c2:c6:c5:d2:44:de:b1:39:2d: 21:37:2b:ee:d2:3a:66:8d:0f:41:93:50:d6:cb:2a: da:16:14:18:ee:14:e3:50:83:0a:21:9a:1e:ef:1c: 49:90:f6:0f:11:03:21:aa:37:9d:72:2d:3b:04:d2: 04:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FF:4A:2A:E6:55:FD:3E:76:DF:0C:09:21:F6:C5:04:93:5E:C4:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da4f36e5-5307-4447-b46d-47df8180ef89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.112.0/21 Signature Algorithm: sha256WithRSAEncryption d0:85:98:c2:fe:1d:bb:66:17:20:eb:3a:ee:a8:c0:4b:5d:27: fa:7b:55:ab:52:b7:41:c0:9b:fc:0f:83:92:47:61:da:09:4a: 58:d6:2e:15:ce:e4:be:35:e5:66:4d:e9:e0:c1:51:65:6d:8e: c7:de:6c:82:b4:a5:12:dc:48:08:ed:79:cf:de:e3:6f:6d:99: 21:c8:c5:89:29:ea:a5:22:d2:6f:92:b8:a1:a0:98:5a:db:67: 41:51:dc:25:9c:5a:ac:d8:6a:fb:7a:70:36:16:c7:d3:78:18: 50:2e:1e:2f:82:b9:70:09:e4:50:59:44:92:78:d3:19:af:04: d2:45:e7:a1:a3:b6:06:04:69:0a:de:cc:ec:2e:51:e7:5b:90: ca:6b:f8:a4:5f:90:71:15:54:96:fc:a5:9e:41:bb:c5:79:6f: a1:a2:9a:db:82:ea:4a:ec:ad:82:ce:de:ea:c8:47:4c:d9:fa: e3:dd:f2:71:c6:02:1d:c3:d2:8f:75:88:5e:45:98:4d:3d:f2: f2:57:4d:0f:ed:b8:4e:05:84:53:d8:ae:db:d9:d5:42:a3:b6: eb:65:12:b9:78:99:5a:8f:af:8c:29:4b:36:1c:33:6a:79:59: 6e:39:87:f4:4b:22:f3:88:bd:f8:6a:00:8f:9b:ed:8c:95:ed: 73:f0:5b:68 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITettGc70s8nbNK8/9iwdYPwk2vTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTExMjcwMDQwMDVaFw0yNjAyMjUyMzU5NTla MHoxSTBHBgNVBAUTQGE1MjU2YjM5ZDZhZGUzZGJhYmYwZjgwYjE0YTFiMTI3MmJm YjIyZWIxMGE3ZjUxYzc4ZGY0MDMzOTVkYmU1ZWExLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKT1H1H9xZDi3VEwJNLSntARKUk5KvPjOrGLbcQkWxfatLoN y0mFDfKJkgQCXtQU0hk5WnqZIui7RMrPH29GbXuwdPrwP1sJzLaftAJK6tx4P9LD wpBgIjkKZJZhE86pNU/V4yWZN8E2szHD714bH3FhGkSbFcL94VdUnGQwU8Ucoftn oVjlFHEZXN9u2h7izhlNHi807Kq3QizP2/Q+JBN7d36CnAUWJH8LXu7h++RF1upg 3X1QrrlvtrLvb0FyoVtEE5dDeiUtwsbF0kTesTktITcr7tI6Zo0PQZNQ1ssq2hYU GO4U41CDCiGaHu8cSZD2DxEDIao3nXItOwTSBC8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSX/0oq5lX9PnbfDAkh9sUEk17EYjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZGE0ZjM2ZTUtNTMwNy00NDQ3LWI0NmQtNDdkZjgxODBlZjg5LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA2OWcDANBgkqhkiG9w0BAQsFAAOCAQEA0IWYwv4du2YXIOs67qjAS10n+ntV q1K3QcCb/A+Dkkdh2glKWNYuFc7kvjXlZk3p4MFRZW2Ox95sgrSlEtxICO15z97j b22ZIcjFiSnqpSLSb5K4oaCYWttnQVHcJZxarNhq+3pwNhbH03gYUC4eL4K5cAnk UFlEknjTGa8E0kXnoaO2BgRpCt7M7C5R51uQymv4pF+QcRVUlvylnkG7xXlvoaKa 24LqSuytgs7e6shHTNn6493yccYCHcPSj3WIXkWYTT3y8ldND+24TgWEU9iu29nV QqO262USuXiZWo+vjClLNhwzanlZbjmH9Esi84i9+GoAj5vtjJXtc/BbaA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:00:36 2025 by rpki-client