This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec239bda-5a50-4b9d-afec-c178a10d8a78.roa File: ec239bda-5a50-4b9d-afec-c178a10d8a78.roa (raw, json) Hash identifier: FsDxEB8y2GJaSJ0DGgs56yGf3a2Fgo4h1JCHamTLNSk= Subject key identifier: 80:97:99:B7:BD:22:A4:4F:68:C1:51:93:EF:E9:88:5E:FD:E8:71:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 366835554092653D7DED615230AB5FC83C137AAE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec239bda-5a50-4b9d-afec-c178a10d8a78.roa Signing time: Sat 06 Dec 2025 02:20:06 +0000 ROA not before: Sat 06 Dec 2025 02:20:06 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 174.129.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:68:35:55:40:92:65:3d:7d:ed:61:52:30:ab:5f:c8:3c:13:7a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 6 02:20:06 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=2ccb35af32629909ef504104c5ace1564dacafb98dd8ecbb0c8c8525293d2911, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:e0:0a:75:26:ee:1c:d9:51:44:14:51:90: ee:6f:15:d5:30:e7:44:30:8e:13:e6:1b:cb:81:6a: 9c:fa:fb:f2:44:a0:1c:97:9a:bb:12:bb:af:1f:d5: a6:df:2a:e5:4b:8b:b1:99:4e:62:92:35:fa:13:7c: 0c:57:7b:84:9b:b0:0c:e8:c3:e2:b3:47:da:1a:5a: ff:83:92:c2:c0:71:50:c1:3e:24:c6:74:ef:0d:ef: 9d:bb:98:db:8f:d3:92:70:72:d1:45:e4:06:92:1a: c0:68:78:3a:6c:aa:90:02:4c:05:86:f2:8d:76:4a: 9d:78:bd:18:d0:5f:56:02:c6:6a:f2:96:a9:6d:24: 1e:3a:3d:02:9e:d1:fd:67:2e:8f:de:bd:c6:d7:4a: 47:79:f1:e8:a2:1c:fa:6e:e9:b6:91:67:2f:a5:50: 15:16:8e:22:19:54:19:01:a8:0c:b0:b7:f3:b5:ba: 78:e5:a2:76:a9:23:a6:f4:e7:2f:b0:f2:58:21:7d: dd:66:11:c0:f9:08:f4:21:d7:c7:97:5b:c6:22:63: a5:f1:a8:3d:50:02:b1:42:5b:9b:5d:43:50:ee:02: 97:7a:8e:db:c2:bd:b7:43:49:1b:e2:64:7f:d8:2a: 87:56:a0:c6:c4:75:36:8e:57:fd:42:f0:79:95:af: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:97:99:B7:BD:22:A4:4F:68:C1:51:93:EF:E9:88:5E:FD:E8:71:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec239bda-5a50-4b9d-afec-c178a10d8a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 174.129.64.0/18 Signature Algorithm: sha256WithRSAEncryption 17:33:8f:f3:b3:25:1a:9b:94:77:c8:2c:48:15:e0:e4:73:8a: 0a:d8:72:7d:b4:0d:d8:a8:90:ed:ad:8b:68:f0:1b:31:76:e5: fb:15:94:d3:3c:af:80:2f:85:d0:c0:c4:53:5a:76:1d:72:cb: eb:74:28:e9:fc:3d:ff:be:a8:58:13:6e:71:07:42:84:e0:03: 1b:bc:16:88:27:de:d8:76:54:88:1a:71:2a:0a:76:fc:16:26: 8c:60:e8:14:6c:0a:59:a2:fe:71:cc:56:4c:7e:57:91:19:47: 65:2b:da:c9:cb:65:3a:60:17:db:2c:55:80:26:4b:81:49:89: 12:8b:26:d9:02:01:6c:c3:48:5a:57:06:4d:e9:11:f2:d8:de: 4f:05:f7:71:fd:5a:d6:3c:4e:bd:f4:66:e1:64:a2:d5:42:82: 71:d0:70:06:71:64:22:b8:a5:3c:29:e1:77:5b:19:8d:e3:69: 56:4d:9f:33:6b:bb:ae:35:32:e5:fc:cb:d0:a2:27:7f:13:7b: c5:43:3b:57:26:2f:c1:b1:3a:b5:1c:c2:74:a6:21:4d:68:22: 4a:bd:14:2c:9d:48:4b:2e:36:20:fe:43:27:6e:06:c1:dd:8b: 0c:b2:1f:80:e2:54:ee:36:f0:8d:39:a4:d6:8c:6a:28:6b:17: b5:ae:05:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNmg1VUCSZT197WFSMKtfyDwTeq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMjA2MDIyMDA2WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2NiMzVhZjMyNjI5OTA5ZWY1MDQxMDRjNWFjZTE1NjRk YWNhZmI5OGRkOGVjYmIwYzhjODUyNTI5M2QyOTExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoROAKdSbuHNlRRBRRkO5vFdUw50QwjhPmG8uBapz6+/JE oByXmrsSu68f1abfKuVLi7GZTmKSNfoTfAxXe4SbsAzow+KzR9oaWv+DksLAcVDB PiTGdO8N7527mNuP05JwctFF5AaSGsBoeDpsqpACTAWG8o12Sp14vRjQX1YCxmry lqltJB46PQKe0f1nLo/evcbXSkd58eiiHPpu6baRZy+lUBUWjiIZVBkBqAywt/O1 unjlonapI6b05y+w8lghfd1mEcD5CPQh18eXW8YiY6XxqD1QArFCW5tdQ1DuApd6 jtvCvbdDSRviZH/YKodWoMbEdTaOV/1C8HmVr0epAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgJeZt70ipE9owVGT7+mIXv3ocUowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VjMjM5YmRhLTVhNTAtNGI5ZC1hZmVjLWMxNzhhMTBkOGE3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAaugUAwDQYJKoZIhvcNAQELBQADggEBABczj/OzJRqblHfILEgV4ORzigrY cn20DdiokO2ti2jwGzF25fsVlNM8r4AvhdDAxFNadh1yy+t0KOn8Pf++qFgTbnEH QoTgAxu8Fogn3th2VIgacSoKdvwWJoxg6BRsClmi/nHMVkx+V5EZR2Ur2snLZTpg F9ssVYAmS4FJiRKLJtkCAWzDSFpXBk3pEfLY3k8F93H9WtY8Tr30ZuFkotVCgnHQ cAZxZCK4pTwp4XdbGY3jaVZNnzNru641MuX8y9CiJ38Te8VDO1cmL8GxOrUcwnSm IU1oIkq9FCydSEsuNiD+QyduBsHdiwyyH4DiVO428I05pNaMaihrF7WuBeY= -----END CERTIFICATE-----Generated at Sat Dec 6 14:15:13 2025 by rpki-client