This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd93a324-2cde-4193-81eb-176b9490c91b.roa File: fd93a324-2cde-4193-81eb-176b9490c91b.roa (raw, json) Hash identifier: nft5wofYF6mpNbLSbS6wAO7Dc22GkRk9m47oBY5xAFY= Subject key identifier: D5:B1:83:B3:EE:25:7D:1E:3D:60:D0:8C:B5:45:C6:A7:91:F0:01:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 626AFE05A25DBEFB2F88AC6B6720D87CB285E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd93a324-2cde-4193-81eb-176b9490c91b.roa Signing time: Wed 03 Dec 2025 01:20:13 +0000 ROA not before: Wed 03 Dec 2025 01:20:13 +0000 ROA not after: Tue 03 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6a:fe:05:a2:5d:be:fb:2f:88:ac:6b:67:20:d8:7c:b2:85:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Dec 3 01:20:13 2025 GMT Not After : Mar 3 23:59:59 2026 GMT Subject: serialNumber=e854d1406fb1af86f73d0dd5eb8bd07241381890a27be7f13ce07e05076fa38c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:15:a1:97:6d:8b:b0:1f:94:2c:a1:ae:cf: dd:1e:29:c2:d8:03:07:3b:53:13:66:1a:b4:c9:14: 67:30:56:81:be:f4:cf:4e:bd:aa:5f:e3:8e:1a:85: ac:5e:c3:b0:5d:9e:9f:eb:dd:20:52:4a:28:e5:26: cc:84:13:79:f8:a3:db:27:23:4d:dc:14:49:1d:c8: 0c:bd:9b:31:75:5e:7a:19:ab:e6:d2:45:62:a1:be: a6:79:3d:ce:6e:19:12:b6:e4:26:17:2e:d9:b0:99: ae:03:c3:36:58:d3:ca:00:72:0a:da:4d:30:32:86: 8c:78:8b:3e:6d:2a:53:9e:95:3e:f0:4d:7a:94:41: 3b:55:95:4d:f3:8d:15:c4:53:62:1e:3c:f6:03:6b: 38:d4:ad:91:f4:ef:2d:f1:d8:c0:fc:3c:b1:a2:df: b9:1e:a3:ff:36:84:77:80:05:80:36:6a:74:17:bc: 39:17:68:ec:47:3d:ee:a2:71:a8:8d:c9:b6:f1:fb: 18:d2:e1:77:04:46:7f:3f:38:e1:d4:52:44:11:71: ea:3d:bd:40:59:6a:1a:8e:03:d5:50:ab:4a:d3:71: 24:a4:61:51:15:6c:f0:de:e2:5f:58:1b:e7:e3:af: 65:61:5e:06:e2:b1:50:3d:0e:f4:e5:9d:80:12:8a: c4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:83:B3:EE:25:7D:1E:3D:60:D0:8C:B5:45:C6:A7:91:F0:01:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd93a324-2cde-4193-81eb-176b9490c91b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.67.0/24 Signature Algorithm: sha256WithRSAEncryption 47:38:78:7c:5d:eb:5f:5a:d3:58:fb:47:38:c3:36:9f:b6:03: a6:f6:9b:d4:46:9b:95:ca:14:91:88:cf:86:57:66:3e:12:de: 8d:7d:72:70:0e:ab:24:76:18:ce:47:8b:30:34:62:f0:12:aa: b9:75:6c:51:0f:5c:60:b2:65:aa:1a:2a:cc:f4:96:d8:6e:6b: c6:b5:39:e6:b7:4e:68:be:a3:fa:d4:9a:fc:06:20:f4:0f:3b: fd:6b:d5:db:68:f5:b1:a0:00:29:3b:94:2a:ed:dd:c8:03:af: 59:bd:0d:06:e2:bf:84:27:29:63:5f:66:21:02:a0:f6:13:a3: 33:97:aa:b6:ed:2a:c0:a1:e6:ed:2b:c0:20:9b:c7:d0:23:ef: f7:02:ec:e2:ec:05:f3:e5:32:d3:85:44:d8:21:a6:ac:62:4b: 62:01:d2:e1:a0:6e:2c:a4:47:76:5d:04:db:d9:b7:dc:57:dd: 86:ea:df:cd:b9:3d:c1:67:37:83:7f:b9:ae:bf:6c:24:e6:1c: 45:57:10:7e:2e:68:14:58:5f:bb:82:46:f8:38:8a:96:19:d0: 77:3d:cb:32:56:f6:30:19:ce:c0:e2:30:2f:18:ba:a5:22:d8: 92:11:24:76:bd:64:81:5b:35:45:f5:95:d3:bc:64:a3:df:d5: 5b:66:69:cf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITYmr+BaJdvvsviKxrZyDYfLKF5DANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEyMDMwMTIwMTNaFw0yNjAzMDMyMzU5NTla MHoxSTBHBgNVBAUTQGU4NTRkMTQwNmZiMWFmODZmNzNkMGRkNWViOGJkMDcyNDEz ODE4OTBhMjdiZTdmMTNjZTA3ZTA1MDc2ZmEzOGMxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAM5cFaGXbYuwH5Qsoa7P3R4pwtgDBztTE2YatMkUZzBWgb70 z069ql/jjhqFrF7DsF2en+vdIFJKKOUmzIQTefij2ycjTdwUSR3IDL2bMXVeehmr 5tJFYqG+pnk9zm4ZErbkJhcu2bCZrgPDNljTygByCtpNMDKGjHiLPm0qU56VPvBN epRBO1WVTfONFcRTYh489gNrONStkfTvLfHYwPw8saLfuR6j/zaEd4AFgDZqdBe8 ORdo7Ec97qJxqI3JtvH7GNLhdwRGfz844dRSRBFx6j29QFlqGo4D1VCrStNxJKRh URVs8N7iX1gb5+OvZWFeBuKxUD0O9OWdgBKKxL8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTVsYOz7iV9Hj1g0Iy1RcankfABtTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZmQ5M2EzMjQtMmNkZS00MTkzLTgxZWItMTc2Yjk0OTBjOTFiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAEeYQzANBgkqhkiG9w0BAQsFAAOCAQEARzh4fF3rX1rTWPtHOMM2n7YDpvab 1EablcoUkYjPhldmPhLejX1ycA6rJHYYzkeLMDRi8BKquXVsUQ9cYLJlqhoqzPSW 2G5rxrU55rdOaL6j+tSa/AYg9A87/WvV22j1saAAKTuUKu3dyAOvWb0NBuK/hCcp Y19mIQKg9hOjM5eqtu0qwKHm7SvAIJvH0CPv9wLs4uwF8+Uy04VE2CGmrGJLYgHS 4aBuLKRHdl0E29m33Ffdhurfzbk9wWc3g3+5rr9sJOYcRVcQfi5oFFhfu4JG+DiK lhnQdz3LMlb2MBnOwOIwLxi6pSLYkhEkdr1kgVs1RfWV07xko9/VW2Zpzw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:36 2025 by rpki-client