This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f11d732b-b99f-4565-ac2f-bbedfa7db867.roa File: f11d732b-b99f-4565-ac2f-bbedfa7db867.roa (raw, json) Hash identifier: xBSX+6NBU0yDCRWi1xOHpoqcmcMlrvB8/ygNxBy4DNE= Subject key identifier: DD:D0:C2:30:0E:EC:91:02:2C:2A:55:85:E0:C3:64:71:EF:2F:52:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 428A9B5FEF8E7A370D4B53F34C3AE8B1E4FB3AEF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f11d732b-b99f-4565-ac2f-bbedfa7db867.roa Signing time: Wed 26 Nov 2025 00:40:11 +0000 ROA not before: Wed 26 Nov 2025 00:40:11 +0000 ROA not after: Tue 24 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8a:9b:5f:ef:8e:7a:37:0d:4b:53:f3:4c:3a:e8:b1:e4:fb:3a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 26 00:40:11 2025 GMT Not After : Feb 24 23:59:59 2026 GMT Subject: serialNumber=c7a5e3eb15b0acfb28f40635b443964df39fb4bb2e9b39c03f46940e07aed297, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:a4:7b:df:25:fd:1b:3e:d5:ef:86:9f:06: 3f:5e:20:87:98:d0:a9:a0:5f:04:8f:f1:00:3d:fb: 4a:f1:30:50:e2:fe:1b:29:13:29:57:f5:35:34:d0: 58:11:a6:e4:f9:57:bc:3a:84:69:67:f2:5c:50:55: 68:fe:3f:13:fb:53:5c:c7:16:f2:f2:96:30:bb:72: d0:c1:ec:a5:c7:a9:82:e3:88:95:a4:40:4e:9c:e8: 53:71:4e:e5:ae:7b:22:79:1e:74:f6:1b:cd:d6:f1: 5b:69:f7:24:7c:77:46:13:1d:c3:8e:dc:8d:b4:c1: e5:bf:1c:2e:38:7e:9c:ec:75:c0:48:b7:03:03:6b: 23:60:30:24:02:46:1d:4b:4d:2e:f7:ee:ed:90:45: ea:9e:ea:e2:15:8d:0a:10:b0:f8:80:62:83:ce:6b: bb:92:7f:97:c1:60:c8:e0:4c:15:b3:46:23:0d:ee: 48:69:5d:30:a8:6f:48:ad:c2:ed:2f:ad:c0:82:48: 1a:5d:bb:e4:fd:03:9b:a4:42:62:cc:bf:29:94:af: ee:9a:91:84:f5:d4:e2:17:42:b0:16:f5:a9:23:0e: 06:bb:eb:8e:85:63:eb:9a:c4:df:1f:5a:83:95:18: e4:cf:3f:dc:85:0b:79:8b:d1:96:f6:92:25:8f:6f: 4c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:C2:30:0E:EC:91:02:2C:2A:55:85:E0:C3:64:71:EF:2F:52:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f11d732b-b99f-4565-ac2f-bbedfa7db867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.142.0/24 Signature Algorithm: sha256WithRSAEncryption 84:d9:73:88:d6:1b:77:fe:c1:57:48:43:75:3c:58:7b:a6:99: e2:bd:32:18:fe:fa:9b:ef:f8:2d:41:52:7f:e2:9b:78:7c:6f: 39:8e:b0:f0:d0:2f:8a:58:e8:d6:d1:9f:48:88:db:0e:85:6e: 65:cc:48:37:1a:54:48:16:1a:38:6b:2a:0d:83:a8:63:93:d9: e6:cb:dc:05:0b:0a:d3:c2:53:27:6a:71:0a:76:97:95:79:f5: cd:6f:8e:49:c8:9c:05:3f:ea:a9:7f:69:20:94:65:9c:42:dc: 2b:ca:e5:ec:31:6e:e4:f5:32:88:68:66:fb:47:8d:ad:e7:15: e9:9c:dc:b4:47:43:ec:54:21:0c:de:0e:12:7a:bd:bf:b2:94: aa:6e:24:0f:97:3a:b3:71:11:fc:ca:20:fe:c8:6d:f8:e1:7f: e4:3a:d4:a9:0c:2e:88:56:1d:74:80:3d:95:15:56:08:07:6c: e7:50:8a:a6:85:e7:81:28:79:e9:bc:e6:85:f8:1f:f5:5e:3a: e7:72:d4:0f:33:0f:6e:fa:3f:2a:ff:d8:4c:ff:1c:d4:d4:f2: d3:b7:67:fe:49:71:9a:f8:4a:ac:2d:8e:f5:fb:7d:79:57:eb: be:65:18:aa:ad:a8:42:2a:96:a7:c5:8c:8a:97:70:4e:d5:a0: 4f:20:9e:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQoqbX++OejcNS1PzTDroseT7Ou8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTI2MDA0MDExWhcNMjYwMjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2E1ZTNlYjE1YjBhY2ZiMjhmNDA2MzViNDQzOTY0ZGYz OWZiNGJiMmU5YjM5YzAzZjQ2OTQwZTA3YWVkMjk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0d6R73yX9Gz7V74afBj9eIIeY0KmgXwSP8QA9+0rxMFDi /hspEylX9TU00FgRpuT5V7w6hGln8lxQVWj+PxP7U1zHFvLyljC7ctDB7KXHqYLj iJWkQE6c6FNxTuWueyJ5HnT2G83W8Vtp9yR8d0YTHcOO3I20weW/HC44fpzsdcBI twMDayNgMCQCRh1LTS737u2QReqe6uIVjQoQsPiAYoPOa7uSf5fBYMjgTBWzRiMN 7khpXTCob0itwu0vrcCCSBpdu+T9A5ukQmLMvymUr+6akYT11OIXQrAW9akjDga7 646FY+uaxN8fWoOVGOTPP9yFC3mL0Zb2kiWPb0zLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3dDCMA7skQIsKlWF4MNkce8vUjcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxMWQ3MzJiLWI5OWYtNDU2NS1hYzJmLWJiZWRmYTdkYjg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACIEo4wDQYJKoZIhvcNAQELBQADggEBAITZc4jWG3f+wVdIQ3U8WHummeK9 Mhj++pvv+C1BUn/im3h8bzmOsPDQL4pY6NbRn0iI2w6FbmXMSDcaVEgWGjhrKg2D qGOT2ebL3AULCtPCUydqcQp2l5V59c1vjknInAU/6ql/aSCUZZxC3CvK5ewxbuT1 MohoZvtHja3nFemc3LRHQ+xUIQzeDhJ6vb+ylKpuJA+XOrNxEfzKIP7Ibfjhf+Q6 1KkMLohWHXSAPZUVVggHbOdQiqaF54Eoeem85oX4H/VeOudy1A8zD276Pyr/2Ez/ HNTU8tO3Z/5JcZr4SqwtjvX7fXlX675lGKqtqEIqlqfFjIqXcE7VoE8gng0= -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:38 2025 by rpki-client