This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc3ee322-ec17-4c1a-b0da-f20cd24d4645.roa File: dc3ee322-ec17-4c1a-b0da-f20cd24d4645.roa (raw, json) Hash identifier: 3iuwIUNbUHQR7HufaI8STu0+dc6hyFKGAP8m13FR0vc= Subject key identifier: 5F:EE:C2:7B:3B:0F:3F:B8:BF:32:53:A1:EA:EF:AA:1D:F2:51:64:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35D6F9A7E91CE2C7DBACD39BC40505A72062D5FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc3ee322-ec17-4c1a-b0da-f20cd24d4645.roa Signing time: Wed 03 Dec 2025 01:00:56 +0000 ROA not before: Wed 03 Dec 2025 01:00:56 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d6:f9:a7:e9:1c:e2:c7:db:ac:d3:9b:c4:05:05:a7:20:62:d5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 01:00:56 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=a691b85effa7f96db25d134ee4ccee1e3efeab5fe0aba3ac5536bbc52abd8d3d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:4a:0b:f1:36:fc:65:ef:70:82:14:88:95: 8a:ac:48:88:82:81:5d:2d:57:42:24:26:25:ee:6b: 07:bb:86:b1:4d:e9:39:ba:dd:35:8b:97:ce:10:58: c6:c9:95:0b:ee:99:fc:6a:d6:bf:15:35:b9:36:5b: d7:dd:2e:2c:4a:20:c2:10:66:f7:cc:5e:8e:19:a1: 7a:9f:db:4a:7f:3e:1a:af:46:21:cd:5e:ab:d4:a3: 79:30:09:0b:f8:d4:d8:18:86:04:67:98:7a:4f:ec: 65:c7:65:a4:da:34:ee:cb:1d:93:ef:46:34:e3:b3: 12:e7:1c:a2:77:ce:54:1e:a8:b3:ad:a6:24:a9:e6: 47:1e:02:7d:b7:92:fa:85:9f:c1:f6:6c:9d:ad:66: 8c:0b:61:e2:cd:21:83:83:8d:d5:54:50:3f:67:76: 32:f5:16:fb:80:fc:0f:3e:2f:b7:b4:56:38:60:28: 6c:f5:a3:c9:53:02:fe:01:c6:6b:7c:95:cf:9a:1f: dd:3b:b4:e8:98:8d:53:e3:35:44:7c:fb:3e:81:7f: 73:35:3c:d4:b3:0c:63:05:42:5c:b2:85:96:63:b6: 43:99:d1:9e:aa:3b:e9:86:d6:33:4d:4a:40:29:9f: 19:ed:7e:c1:bb:cb:31:a4:9b:0e:1b:d9:af:5e:88: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:C2:7B:3B:0F:3F:B8:BF:32:53:A1:EA:EF:AA:1D:F2:51:64:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc3ee322-ec17-4c1a-b0da-f20cd24d4645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.38.0/24 Signature Algorithm: sha256WithRSAEncryption b2:75:73:33:e1:78:5f:2d:0b:a3:3b:56:85:36:37:51:8f:f0: e9:e4:dc:4c:88:cc:dd:d6:db:1e:99:03:fc:ea:45:75:6b:59: b0:d7:04:07:30:68:06:57:f7:e8:32:13:05:e3:c8:98:be:97: 80:cd:6c:20:db:e9:62:d0:e5:f0:ef:8f:e2:14:d7:b6:70:16: 64:7b:c6:c3:28:59:5a:00:28:57:38:ab:ec:7b:98:d3:4e:5f: 3e:9c:0d:1e:21:d9:04:f2:b2:57:20:1f:35:ba:ef:8d:66:e8: 30:74:58:0e:3d:04:96:10:0e:27:dd:a1:c5:85:3c:6e:1e:cc: 44:68:09:1c:28:eb:16:9d:98:f9:86:09:ab:74:92:94:9f:b2: 40:f8:fb:e6:f0:7b:83:0a:2e:f4:74:bd:de:9a:54:42:1a:0b: 19:9b:cf:43:d5:77:38:49:76:11:80:95:7e:ac:eb:f5:8e:c4: 5d:1c:7f:3a:13:0e:fa:1c:24:1d:31:b6:12:56:41:0d:58:c5: ca:9e:25:5e:6d:c9:55:22:62:3b:e0:14:f0:8c:3d:a1:32:56: 8e:8a:98:4c:fd:68:e0:47:af:5e:b2:c7:6a:42:9a:48:c4:2b: a8:ad:9b:c4:db:51:d0:91:20:1b:0d:bf:29:c8:95:d3:56:5e: fd:71:ca:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNdb5p+kc4sfbrNObxAUFpyBi1f4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjAzMDEwMDU2WhcNMjYwMzAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjkxYjg1ZWZmYTdmOTZkYjI1ZDEzNGVlNGNjZWUxZTNl ZmVhYjVmZTBhYmEzYWM1NTM2YmJjNTJhYmQ4ZDNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA30oL8Tb8Ze9wghSIlYqsSIiCgV0tV0IkJiXuawe7hrFN 6Tm63TWLl84QWMbJlQvumfxq1r8VNbk2W9fdLixKIMIQZvfMXo4ZoXqf20p/Phqv RiHNXqvUo3kwCQv41NgYhgRnmHpP7GXHZaTaNO7LHZPvRjTjsxLnHKJ3zlQeqLOt piSp5kceAn23kvqFn8H2bJ2tZowLYeLNIYODjdVUUD9ndjL1FvuA/A8+L7e0Vjhg KGz1o8lTAv4Bxmt8lc+aH907tOiYjVPjNUR8+z6Bf3M1PNSzDGMFQlyyhZZjtkOZ 0Z6qO+mG1jNNSkApnxntfsG7yzGkmw4b2a9eiN1lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX+7CezsPP7i/MlOh6u+qHfJRZMYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjM2VlMzIyLWVjMTctNGMxYS1iMGRhLWYyMGNkMjRkNDY0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsCYwDQYJKoZIhvcNAQELBQADggEBALJ1czPheF8tC6M7VoU2N1GP8Onk 3EyIzN3W2x6ZA/zqRXVrWbDXBAcwaAZX9+gyEwXjyJi+l4DNbCDb6WLQ5fDvj+IU 17ZwFmR7xsMoWVoAKFc4q+x7mNNOXz6cDR4h2QTyslcgHzW6741m6DB0WA49BJYQ DifdocWFPG4ezERoCRwo6xadmPmGCat0kpSfskD4++bwe4MKLvR0vd6aVEIaCxmb z0PVdzhJdhGAlX6s6/WOxF0cfzoTDvocJB0xthJWQQ1YxcqeJV5tyVUiYjvgFPCM PaEyVo6KmEz9aOBHr16yx2pCmkjEK6itm8TbUdCRIBsNvynIldNWXv1xyuw= -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:05 2025 by rpki-client