This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebccf6c1-4c87-44fa-a36a-085ef8aae4d3.roa File: ebccf6c1-4c87-44fa-a36a-085ef8aae4d3.roa (raw, json) Hash identifier: LHzpepRropGuMvip+RNowzlU/z8N8a9iAuGcTKnGTds= Subject key identifier: 95:6E:E7:43:7B:EE:DB:C8:42:72:D8:6C:71:69:48:FE:FA:22:09:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2325B1BDA23A02FEF8D343AC353B834806C64CDE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebccf6c1-4c87-44fa-a36a-085ef8aae4d3.roa Signing time: Sat 22 Nov 2025 00:10:36 +0000 ROA not before: Sat 22 Nov 2025 00:10:36 +0000 ROA not after: Fri 20 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.146.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:25:b1:bd:a2:3a:02:fe:f8:d3:43:ac:35:3b:83:48:06:c6:4c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 22 00:10:36 2025 GMT Not After : Feb 20 23:59:59 2026 GMT Subject: serialNumber=5a15f88159c3e169a375e78c42172f2b895eb4503f479d47a9ebcdf43b4669ce, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:b2:63:d0:11:38:3c:ba:2a:25:2b:cb:4c: ea:71:80:1f:1a:1e:32:ee:fb:3a:50:18:32:df:93: 4d:20:6b:93:2b:9f:ce:2a:87:3e:41:5d:1c:dc:6c: 46:81:d8:29:c4:45:7d:9a:e0:33:4d:37:45:ba:95: b0:42:2c:a0:e2:6b:d6:d0:f0:03:07:ce:85:99:db: 82:86:ab:66:5e:74:26:2a:10:c9:07:db:25:39:92: 68:20:9d:a6:32:75:0e:5d:c6:d6:e6:a0:81:32:08: 75:2d:f4:07:1d:ad:32:bd:a4:0b:df:4f:86:60:02: 10:57:6f:85:65:46:d7:8f:d7:d3:16:00:27:4d:49: 1b:2f:c3:02:f9:92:43:53:a8:05:e1:91:84:d6:2e: 1e:84:97:8a:02:3a:00:47:2f:29:73:e6:89:31:5d: b0:96:bd:f6:6a:08:fc:1c:3b:0e:8f:0e:4c:cc:fb: ab:65:12:0f:71:f7:ef:de:bb:7a:bf:1b:b8:1e:35: 2e:39:e1:28:f7:da:c9:95:a5:0c:d1:71:2b:57:41: 77:60:1f:a8:86:9f:78:5e:c9:84:9a:28:e0:f2:71: c9:b6:97:79:89:a8:79:83:68:a1:ef:47:aa:9d:ea: 14:d6:2c:f7:20:f1:a9:48:71:52:1f:50:94:6c:2e: 26:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:E7:43:7B:EE:DB:C8:42:72:D8:6C:71:69:48:FE:FA:22:09:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebccf6c1-4c87-44fa-a36a-085ef8aae4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.146.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:98:a0:84:29:9a:9f:61:2c:b5:31:45:af:a3:8e:bb:2d:5c: 4e:32:2e:49:b0:ac:e7:4e:6c:b0:08:86:2e:ca:59:d8:82:cf: 03:f6:cd:99:c3:f1:08:2d:15:d8:01:f8:cb:84:e7:6a:3d:fb: 55:f1:33:73:4d:0d:ad:10:28:13:e9:26:07:ac:7d:00:ae:f0: e3:e1:c0:db:f4:40:cd:75:6a:3c:cf:f0:6e:56:0d:4e:6f:1d: ba:64:9a:af:d5:f4:d3:a7:ae:44:44:17:e4:98:68:47:4a:fb: 85:31:ec:43:c7:ae:4f:d3:bc:66:6c:a1:71:ce:dd:d1:06:07: 34:69:1a:ae:3d:8b:01:03:ce:28:06:d3:48:b3:d4:66:2e:10: 14:7d:6e:d2:b6:da:00:82:d8:88:5d:dc:85:8f:15:eb:03:85: 6d:b9:27:ad:c7:08:13:6f:56:67:f1:d7:5c:ce:dc:78:da:cd: fa:30:c1:56:d6:89:c3:3a:75:1b:56:0a:19:c0:60:fc:27:14: 7e:59:8f:cd:1d:f8:88:9b:71:c7:15:0e:5a:e6:1c:00:59:96: 14:8b:c4:87:ef:f4:64:a0:61:64:11:7e:e6:95:94:57:c3:a3: ce:5d:06:34:f9:79:fb:c1:3a:4a:97:d5:88:2a:24:35:4e:28: 3a:f5:fe:23 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIyWxvaI6Av7400OsNTuDSAbGTN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAxMDM2WhcNMjYwMjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTE1Zjg4MTU5YzNlMTY5YTM3NWU3OGM0MjE3MmYyYjg5 NWViNDUwM2Y0NzlkNDdhOWViY2RmNDNiNDY2OWNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2x7Jj0BE4PLoqJSvLTOpxgB8aHjLu+zpQGDLfk00ga5Mr n84qhz5BXRzcbEaB2CnERX2a4DNNN0W6lbBCLKDia9bQ8AMHzoWZ24KGq2ZedCYq EMkH2yU5kmggnaYydQ5dxtbmoIEyCHUt9AcdrTK9pAvfT4ZgAhBXb4VlRteP19MW ACdNSRsvwwL5kkNTqAXhkYTWLh6El4oCOgBHLylz5okxXbCWvfZqCPwcOw6PDkzM +6tlEg9x9+/eu3q/G7geNS454Sj32smVpQzRcStXQXdgH6iGn3heyYSaKODyccm2 l3mJqHmDaKHvR6qd6hTWLPcg8alIcVIfUJRsLiahAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUlW7nQ3vu28hCcthscWlI/voiCTQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViY2NmNmMxLTRjODctNDRmYS1hMzZhLTA4NWVmOGFhZTRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQkjANBgkqhkiG9w0BAQsFAAOCAQEAdpighCman2EstTFFr6OOuy1cTjIu SbCs505ssAiGLspZ2ILPA/bNmcPxCC0V2AH4y4Tnaj37VfEzc00NrRAoE+kmB6x9 AK7w4+HA2/RAzXVqPM/wblYNTm8dumSar9X006euREQX5JhoR0r7hTHsQ8euT9O8 Zmyhcc7d0QYHNGkarj2LAQPOKAbTSLPUZi4QFH1u0rbaAILYiF3chY8V6wOFbbkn rccIE29WZ/HXXM7ceNrN+jDBVtaJwzp1G1YKGcBg/CcUflmPzR34iJtxxxUOWuYc AFmWFIvEh+/0ZKBhZBF+5pWUV8Ojzl0GNPl5+8E6SpfViCokNU4oOvX+Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:00 2025 by rpki-client