This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9170a2b-7253-4011-a88f-b01d6a0bd1b1.roa File: e9170a2b-7253-4011-a88f-b01d6a0bd1b1.roa (raw, json) Hash identifier: Aw/Zm0TH//Xb3lOOWvjJTYVbmeFIxVOZdP/u4ozQaeo= Subject key identifier: 9A:40:D2:3C:54:C4:AD:B8:27:41:D0:8C:16:5D:91:19:B1:99:D7:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7471A7E4533AD35A20AFC594D7C73160023A3C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9170a2b-7253-4011-a88f-b01d6a0bd1b1.roa Signing time: Tue 02 Dec 2025 00:30:10 +0000 ROA not before: Tue 02 Dec 2025 00:30:10 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:71:a7:e4:53:3a:d3:5a:20:af:c5:94:d7:c7:31:60:02:3a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 2 00:30:10 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=f48143f7fddb0aa9e2cde9c53308c439d9314849583c75fc9b4097b8a383dc5e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:be:61:14:e5:3a:02:9a:aa:8b:52:95:4b: 23:52:ca:ae:4e:33:61:c7:c2:5c:e6:07:73:f6:3a: ed:7e:d6:d2:10:0d:5e:2a:e2:fd:fb:2e:ce:67:d0: 0b:2f:cc:f7:4d:47:58:36:a3:8f:6a:9c:ac:58:0f: 0e:0d:7f:de:f4:26:f7:a9:30:f7:9f:3b:2e:da:32: 63:fe:72:38:a8:5a:d4:58:6c:dc:ca:3a:d0:4a:15: 53:c1:73:06:c5:84:0c:14:7f:1d:22:b3:d5:c8:2c: 50:f6:1d:bc:c9:0d:28:e8:f2:2a:7c:33:2b:14:aa: 00:c5:bb:5e:6e:08:c3:1e:6f:fa:f3:10:99:79:28: 0c:52:87:78:7e:d4:b1:84:c3:95:5a:a3:9b:62:7b: d4:8f:f7:5c:f7:8b:4d:8e:a8:9e:7c:80:31:74:30: 83:52:e9:c7:27:90:f7:d3:fb:52:0d:3f:73:15:2e: 37:db:e3:30:bc:64:f0:93:28:a1:9b:eb:d8:d6:f8: 72:03:7d:76:de:4f:b0:8b:10:34:64:2a:e5:77:27: e2:3d:11:4d:51:ff:89:d8:61:ec:51:a2:44:d0:f7: ba:13:be:24:f1:97:3f:7b:83:f9:67:d3:49:01:14: 36:ed:ee:35:bd:57:61:f2:31:7e:95:1c:ab:8b:0a: d1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:40:D2:3C:54:C4:AD:B8:27:41:D0:8C:16:5D:91:19:B1:99:D7:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9170a2b-7253-4011-a88f-b01d6a0bd1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.1.0/24 Signature Algorithm: sha256WithRSAEncryption 91:26:6c:84:34:10:28:a6:ba:e3:05:45:db:43:ed:75:13:89: 40:ac:b0:81:fe:93:f5:4a:5d:63:72:b8:5a:9f:ad:bd:01:e7: 26:8e:3f:ad:4e:e3:41:18:60:49:f7:60:7b:c9:b4:01:08:bd: 6a:f2:b8:d9:ac:cd:d4:79:26:4b:79:6c:34:4f:32:ef:05:ec: ec:ae:88:6f:be:19:79:27:56:50:7c:66:dc:e2:66:54:ed:d0: 61:5a:9d:54:4e:10:1f:45:a5:f9:7a:b3:a2:dc:cc:c2:b4:e8: 1b:60:fc:94:08:aa:37:07:ba:83:e7:03:e5:81:f2:e7:ca:28: 50:33:1f:77:88:f8:0c:67:67:56:f5:61:7b:6a:1f:85:73:98: 6a:93:98:74:d2:25:50:13:34:9d:0f:5a:36:00:f7:f3:87:e4: ec:9c:74:c8:23:b5:d5:a3:71:30:1d:16:a0:b7:e0:46:60:dd: 2e:22:44:f1:8b:ba:40:40:37:de:15:40:09:49:22:75:6f:d6: 43:5d:5a:c2:ba:f7:14:3b:64:00:55:1a:bc:6e:d3:bf:9c:a9: 9c:3f:e1:b7:06:e6:00:27:b8:05:88:5d:20:bf:30:72:b9:e2: 59:43:5c:dc:fd:4a:1e:1a:19:dc:b6:1f:77:b9:71:77:55:c1: 24:45:8c:88 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITdHGn5FM601ogr8WU18cxYAI6PDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEyMDIwMDMwMTBaFw0yNjAzMDIyMzU5NTla MHoxSTBHBgNVBAUTQGY0ODE0M2Y3ZmRkYjBhYTllMmNkZTljNTMzMDhjNDM5ZDkz MTQ4NDk1ODNjNzVmYzliNDA5N2I4YTM4M2RjNWUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJyxvmEU5ToCmqqLUpVLI1LKrk4zYcfCXOYHc/Y67X7W0hAN Xiri/fsuzmfQCy/M901HWDajj2qcrFgPDg1/3vQm96kw9587LtoyY/5yOKha1Fhs 3Mo60EoVU8FzBsWEDBR/HSKz1cgsUPYdvMkNKOjyKnwzKxSqAMW7Xm4Iwx5v+vMQ mXkoDFKHeH7UsYTDlVqjm2J71I/3XPeLTY6onnyAMXQwg1LpxyeQ99P7Ug0/cxUu N9vjMLxk8JMooZvr2Nb4cgN9dt5PsIsQNGQq5Xcn4j0RTVH/idhh7FGiRND3uhO+ JPGXP3uD+WfTSQEUNu3uNb1XYfIxfpUcq4sK0XMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSaQNI8VMStuCdB0IwWXZEZsZnXNzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZTkxNzBhMmItNzI1My00MDExLWE4OGYtYjAxZDZhMGJkMWIxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABdbATANBgkqhkiG9w0BAQsFAAOCAQEAkSZshDQQKKa64wVF20PtdROJQKyw gf6T9UpdY3K4Wp+tvQHnJo4/rU7jQRhgSfdge8m0AQi9avK42azN1HkmS3lsNE8y 7wXs7K6Ib74ZeSdWUHxm3OJmVO3QYVqdVE4QH0Wl+XqzotzMwrToG2D8lAiqNwe6 g+cD5YHy58ooUDMfd4j4DGdnVvVhe2ofhXOYapOYdNIlUBM0nQ9aNgD384fk7Jx0 yCO11aNxMB0WoLfgRmDdLiJE8Yu6QEA33hVACUkidW/WQ11awrr3FDtkAFUavG7T v5ypnD/htwbmACe4BYhdIL8wcrniWUNc3P1KHhoZ3LYfd7lxd1XBJEWMiA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:55 2025 by rpki-client