This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de7b8e0a-a109-43f5-8ea8-973c8c0c5cee.roa File: de7b8e0a-a109-43f5-8ea8-973c8c0c5cee.roa (raw, json) Hash identifier: AdzC3kxcXKVxqK011XllKsC3byTH+jGJSQ7OFW87Inc= Subject key identifier: 40:5B:61:A0:57:A3:0A:B1:C4:3C:2D:72:F9:F6:4A:42:03:A7:42:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1752840B131ECB6AE750DB6FA2D2AFEBCBBB804A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de7b8e0a-a109-43f5-8ea8-973c8c0c5cee.roa Signing time: Thu 20 Nov 2025 00:30:12 +0000 ROA not before: Thu 20 Nov 2025 00:30:12 +0000 ROA not after: Wed 18 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.128.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:52:84:0b:13:1e:cb:6a:e7:50:db:6f:a2:d2:af:eb:cb:bb:80:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 20 00:30:12 2025 GMT Not After : Feb 18 23:59:59 2026 GMT Subject: serialNumber=c8fe2f9b1b93d560d993eea64bde476aa768aaaa67ebb3c33d4349a64878ef95, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1d:54:24:a6:ad:dc:37:90:71:2a:33:f3:bd: b4:78:22:c2:0a:f9:99:75:4e:fb:2b:a2:ae:76:a9: 19:4e:7c:54:44:65:4f:9c:f5:26:e3:4b:14:a4:e7: 4d:85:b7:00:a0:75:5c:5b:b7:8a:29:30:75:b3:52: 06:91:f9:33:dc:31:40:a6:1c:18:ca:56:a5:24:47: 71:db:0c:10:89:50:c1:7f:a3:1a:2d:f1:a7:50:80: d5:95:16:ef:be:2a:e7:6c:04:06:ac:b4:a8:b7:b1: b6:b2:35:4f:73:bb:41:b2:2e:5b:25:8f:08:6f:32: 68:f6:b9:dc:22:c7:3a:78:62:eb:e8:11:38:86:fd: ae:09:f7:43:b7:fd:36:30:2e:2c:0c:85:b2:d2:00: de:6b:a0:a1:d8:96:fc:fe:2f:22:8c:5b:af:05:75: 9d:33:6e:3b:d3:2e:5e:a9:7d:b6:a3:90:27:bf:6c: 51:0a:0e:58:fa:9e:0f:60:9c:20:c9:27:ad:77:af: 9c:f0:9c:f9:9a:a5:4d:94:e8:18:fa:27:95:4d:a0: a0:d3:c9:a8:ab:d4:0e:65:d2:42:14:0f:6f:a3:15: 21:c3:10:9e:58:b0:b1:67:fa:04:e6:f7:3f:2b:24: df:e3:ae:b4:f0:c2:01:46:4b:be:6b:21:4d:97:18: a7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5B:61:A0:57:A3:0A:B1:C4:3C:2D:72:F9:F6:4A:42:03:A7:42:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de7b8e0a-a109-43f5-8ea8-973c8c0c5cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.128.128.0/18 Signature Algorithm: sha256WithRSAEncryption 11:0e:c9:4b:5f:b1:ae:d9:bf:c1:9e:67:56:ec:f0:ad:10:c1: 66:6c:e5:62:ff:60:8a:05:82:12:f4:b6:b6:22:6b:d4:56:62: 38:be:40:a1:13:1b:2c:1d:ee:7b:94:a1:6c:72:3b:88:a2:8f: b3:b5:df:5f:6e:ae:42:71:5f:fb:e9:60:6f:e7:44:ab:3d:1a: 7b:aa:e7:69:88:b1:7d:35:10:74:fd:32:29:25:11:bd:c7:14: 2b:d0:4a:59:ad:04:51:63:ec:65:93:0f:ed:d6:db:4c:88:0e: 30:9f:05:b7:05:f2:3d:8d:75:7e:55:77:b4:37:4e:41:3c:c1: ac:8c:71:c8:f8:f9:7e:8b:6f:2f:81:07:d5:ed:89:dd:2a:31: 6d:43:5b:f6:37:1e:0c:55:90:c5:6b:1a:ef:00:05:50:0a:ff: c4:1c:b7:9d:0c:83:1d:92:3b:e2:14:78:53:32:f0:38:40:a3: 29:45:79:b4:22:63:ea:16:96:6a:99:1c:82:55:5c:e9:52:67: 59:41:11:21:b1:e6:fc:6a:30:45:1c:64:4d:0b:bb:b5:60:13: 81:0b:57:6a:ce:1d:3a:64:90:9e:6c:97:46:33:f2:63:c0:78: 66:10:e1:ae:65:a7:f2:55:e9:92:97:61:ce:bb:e8:36:bd:86: 72:ae:39:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF1KECxMey2rnUNtvotKv68u7gEowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDAzMDEyWhcNMjYwMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGZlMmY5YjFiOTNkNTYwZDk5M2VlYTY0YmRlNDc2YWE3 NjhhYWFhNjdlYmIzYzMzZDQzNDlhNjQ4NzhlZjk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsHVQkpq3cN5BxKjPzvbR4IsIK+Zl1Tvsroq52qRlOfFRE ZU+c9SbjSxSk502FtwCgdVxbt4opMHWzUgaR+TPcMUCmHBjKVqUkR3HbDBCJUMF/ oxot8adQgNWVFu++KudsBAastKi3sbayNU9zu0GyLlsljwhvMmj2udwixzp4Yuvo ETiG/a4J90O3/TYwLiwMhbLSAN5roKHYlvz+LyKMW68FdZ0zbjvTLl6pfbajkCe/ bFEKDlj6ng9gnCDJJ613r5zwnPmapU2U6Bj6J5VNoKDTyair1A5l0kIUD2+jFSHD EJ5YsLFn+gTm9z8rJN/jrrTwwgFGS75rIU2XGKdvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQFthoFejCrHEPC1y+fZKQgOnQpcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlN2I4ZTBhLWExMDktNDNmNS04ZWE4LTk3M2M4YzBjNWNlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbRgIAwDQYJKoZIhvcNAQELBQADggEBABEOyUtfsa7Zv8GeZ1bs8K0QwWZs 5WL/YIoFghL0trYia9RWYji+QKETGywd7nuUoWxyO4iij7O1319urkJxX/vpYG/n RKs9Gnuq52mIsX01EHT9MiklEb3HFCvQSlmtBFFj7GWTD+3W20yIDjCfBbcF8j2N dX5Vd7Q3TkE8wayMccj4+X6Lby+BB9Xtid0qMW1DW/Y3HgxVkMVrGu8ABVAK/8Qc t50Mgx2SO+IUeFMy8DhAoylFebQiY+oWlmqZHIJVXOlSZ1lBESGx5vxqMEUcZE0L u7VgE4ELV2rOHTpkkJ5sl0Yz8mPAeGYQ4a5lp/JV6ZKXYc676Da9hnKuOUQ= -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:53 2025 by rpki-client