This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd58e9ba-4131-49f4-8c8a-6905d9a56b31.roa File: fd58e9ba-4131-49f4-8c8a-6905d9a56b31.roa (raw, json) Hash identifier: xj6YatxJ4MvPBNLZKt5uXeaD3wGMgK0cBcnypDRSeSo= Subject key identifier: 49:64:F4:7E:CC:5A:9D:B5:B8:9F:BD:80:17:51:C2:5C:E4:BA:8D:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6BD81F3F4C778A7A8AC2D9545CB8F2FBAE8083DC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd58e9ba-4131-49f4-8c8a-6905d9a56b31.roa Signing time: Wed 21 Jan 2026 18:36:52 +0000 ROA not before: Wed 21 Jan 2026 18:36:52 +0000 ROA not after: Tue 21 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 155.41.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d8:1f:3f:4c:77:8a:7a:8a:c2:d9:54:5c:b8:f2:fb:ae:80:83:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jan 21 18:36:52 2026 GMT Not After : Apr 21 23:59:59 2026 GMT Subject: serialNumber=807d0b6f145eb05d220adb1725fe669bf99fb09ee6fd723d9b259de8d632d367, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:cf:46:5d:51:4e:1c:47:23:40:da:5e:37: ed:c9:28:6e:ea:10:51:8e:db:01:af:61:ab:73:82: fe:6b:d6:1b:36:47:6e:3d:09:0c:73:01:0c:cc:63: a6:99:85:1e:a0:57:52:f1:95:af:dc:c4:a0:20:f6: 30:4a:36:22:bd:7a:eb:6b:3c:c1:ae:6a:78:1e:5b: 70:8b:b4:d4:5e:57:cd:53:95:25:a0:76:c6:7e:fc: 79:31:38:24:32:06:0e:78:cf:29:40:91:4f:5e:18: 77:1f:c3:e2:b7:e3:79:8d:c1:7c:69:89:81:9a:39: fa:df:41:43:05:9e:99:37:af:5c:ce:f6:0f:aa:89: 3a:61:0e:2d:a8:9b:56:8d:20:9d:7c:1b:ba:9d:c5: 52:41:2c:c3:12:18:05:a0:b9:da:bc:00:50:ad:ef: ec:05:17:76:aa:6c:8e:81:f9:98:a9:89:48:65:31: 25:09:2e:85:65:a4:0c:1b:1f:42:28:1d:64:86:3a: 94:58:79:90:81:ad:a4:e7:ff:89:d4:3d:99:3d:c3: ad:12:59:ea:b0:43:d6:ce:4b:5c:ef:99:51:c6:60: 13:b1:39:cf:55:79:d1:b8:86:a8:bc:a0:75:51:52: 4e:aa:7e:10:62:b0:88:ba:ea:97:f8:09:eb:09:5e: b8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:64:F4:7E:CC:5A:9D:B5:B8:9F:BD:80:17:51:C2:5C:E4:BA:8D:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd58e9ba-4131-49f4-8c8a-6905d9a56b31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.41.128.0/17 Signature Algorithm: sha256WithRSAEncryption bf:dc:80:e7:5f:d6:a5:01:01:b9:1a:22:2a:10:c5:82:8b:60: 4f:7e:76:f3:2e:47:57:c3:30:f7:b0:2e:5c:5c:c0:31:bc:c2: da:5f:58:e8:0b:75:3f:e5:8c:c5:6f:91:6b:e8:a4:1e:ac:3b: ce:1b:7b:7e:58:b0:1e:9b:9d:14:e1:17:54:d1:aa:f3:06:f4: 8a:87:5f:58:34:40:f9:99:2e:4d:78:e1:09:26:da:1f:37:9b: 65:ae:db:77:75:d2:54:a7:9d:27:00:e7:ae:81:1f:b5:e8:a3: 05:53:85:35:5f:82:0c:a7:1c:04:ff:c4:09:6b:9f:22:f4:58: 40:24:8e:e3:de:b6:d0:59:26:6c:5d:33:c5:5e:38:21:4d:a6: 67:62:44:ff:d2:7c:ce:9e:d3:80:92:f8:6d:5e:a5:f9:29:09: f7:a6:4e:72:7e:2a:7d:a3:37:43:49:ce:42:8f:16:ab:55:48: 15:32:cf:03:3c:57:c6:05:7c:51:19:68:1c:f9:d8:61:9d:cc: a3:14:d9:a7:8c:f6:fa:b9:a0:a8:ef:04:12:7b:79:b1:fa:28: 02:3b:5d:9c:62:b6:8a:7f:f2:1d:b8:89:17:da:85:92:dd:8f: 80:01:a6:22:ac:85:4c:49:ce:0c:64:b9:e3:ec:d6:bb:18:a1: b3:e6:3b:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa9gfP0x3inqKwtlUXLjy+66Ag9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMTIxMTgzNjUyWhcNMjYwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDdkMGI2ZjE0NWViMDVkMjIwYWRiMTcyNWZlNjY5YmY5 OWZiMDllZTZmZDcyM2Q5YjI1OWRlOGQ2MzJkMzY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAU89GXVFOHEcjQNpeN+3JKG7qEFGO2wGvYatzgv5r1hs2 R249CQxzAQzMY6aZhR6gV1Lxla/cxKAg9jBKNiK9eutrPMGuangeW3CLtNReV81T lSWgdsZ+/HkxOCQyBg54zylAkU9eGHcfw+K343mNwXxpiYGaOfrfQUMFnpk3r1zO 9g+qiTphDi2om1aNIJ18G7qdxVJBLMMSGAWgudq8AFCt7+wFF3aqbI6B+ZipiUhl MSUJLoVlpAwbH0IoHWSGOpRYeZCBraTn/4nUPZk9w60SWeqwQ9bOS1zvmVHGYBOx Oc9VedG4hqi8oHVRUk6qfhBisIi66pf4CesJXrjBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSWT0fsxanbW4n72AF1HCXOS6jXMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkNThlOWJhLTQxMzEtNDlmNC04YzhhLTY5MDVkOWE1NmIzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAebKYAwDQYJKoZIhvcNAQELBQADggEBAL/cgOdf1qUBAbkaIioQxYKLYE9+ dvMuR1fDMPewLlxcwDG8wtpfWOgLdT/ljMVvkWvopB6sO84be35YsB6bnRThF1TR qvMG9IqHX1g0QPmZLk144Qkm2h83m2Wu23d10lSnnScA566BH7XoowVThTVfggyn HAT/xAlrnyL0WEAkjuPettBZJmxdM8VeOCFNpmdiRP/SfM6e04CS+G1epfkpCfem TnJ+Kn2jN0NJzkKPFqtVSBUyzwM8V8YFfFEZaBz52GGdzKMU2aeM9vq5oKjvBBJ7 ebH6KAI7XZxitop/8h24iRfahZLdj4ABpiKshUxJzgxkuePs1rsYobPmO2A= -----END CERTIFICATE-----Generated at Sun Jan 25 05:52:22 2026 by rpki-client