This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fddfc757-7acf-4f35-9789-c0e414f4126c.roa File: fddfc757-7acf-4f35-9789-c0e414f4126c.roa (raw, json) Hash identifier: m7ZoIBhzvoovbpfVCx6n4Wu3kgwacaSZ09rqNJ438ac= Subject key identifier: 95:7B:1A:55:D7:1A:29:E7:21:78:FE:C9:C6:93:DA:35:9A:3B:E8:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30420B32069B9A1BEF56C84A679F18E30304E18A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fddfc757-7acf-4f35-9789-c0e414f4126c.roa Signing time: Thu 20 Nov 2025 00:50:09 +0000 ROA not before: Thu 20 Nov 2025 00:50:09 +0000 ROA not after: Wed 18 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.247.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:42:0b:32:06:9b:9a:1b:ef:56:c8:4a:67:9f:18:e3:03:04:e1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 20 00:50:09 2025 GMT Not After : Feb 18 23:59:59 2026 GMT Subject: serialNumber=f2c9846982fe1776a38884691150695a565ea69fa57226022adf4d21b669f7e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:dd:8b:0c:71:00:21:82:97:c1:f1:9a:53:15: 9b:9c:c7:a6:46:7b:aa:0e:3d:04:7f:a9:5f:d8:2c: 56:f1:40:2a:1a:e9:0b:cf:47:c1:3f:ce:ea:06:26: e7:8d:76:73:e4:b0:85:b3:ff:64:d0:7a:e7:93:59: ca:cd:00:46:12:2a:3a:d5:6d:16:22:24:31:2c:07: d5:1d:fe:e8:ae:42:3f:ac:d5:54:b0:69:81:72:d9: 6b:6d:2f:f0:88:40:87:af:50:eb:5e:6f:8a:bf:4f: fa:7e:16:95:17:04:a6:52:77:68:c7:ce:a8:1b:12: 04:99:a7:ee:98:f5:de:01:80:ee:47:cf:9c:c1:3d: e8:b5:3d:af:32:b7:65:d5:68:e6:82:dc:56:b2:b0: 01:d9:b2:75:03:10:23:97:22:ca:23:7c:ea:c8:28: cb:6a:5f:ff:d1:fb:e9:2d:34:78:dd:39:05:8b:22: c5:df:bb:a4:4d:be:46:60:b5:03:47:e5:e8:2e:aa: a7:42:05:89:f2:1b:50:05:e6:b7:2c:41:26:f9:63: 26:91:f7:cc:7b:83:c4:b0:c8:1c:59:81:6e:bd:fc: b0:a5:b1:f5:4b:8d:28:eb:4f:9c:61:3f:e2:bd:b0: 2a:30:54:73:16:46:1a:09:42:b7:b1:ed:46:25:47: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7B:1A:55:D7:1A:29:E7:21:78:FE:C9:C6:93:DA:35:9A:3B:E8:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fddfc757-7acf-4f35-9789-c0e414f4126c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.247.224.0/19 Signature Algorithm: sha256WithRSAEncryption 57:51:2b:7a:42:28:4e:0f:cc:cd:00:65:8e:6a:b8:29:42:ab: b2:e6:cf:60:67:13:c0:9a:62:46:ff:d2:e5:13:74:a4:a7:c6: 2d:ab:e5:6c:75:63:83:98:19:ed:27:cf:31:e2:60:9a:6a:07: 2f:c1:e0:7b:87:e0:fb:da:06:d1:41:e2:d9:73:b4:1e:fd:c5: e2:d3:7e:88:82:67:a8:cf:6c:45:a3:ca:a7:df:a4:ee:26:b4: 4c:29:b3:ff:58:08:b7:f9:a9:7f:0a:12:fb:ba:85:2f:a0:5e: 6f:89:71:75:ca:7c:90:6c:df:e1:3c:6f:bd:f7:77:9a:58:0a: 0e:57:10:a2:64:47:42:02:e9:41:82:04:7e:f2:b5:7c:3d:f8: 3a:ef:d4:4d:ee:27:f3:c3:42:77:ec:0e:2c:ef:82:00:16:33: 52:cc:0d:97:94:9e:2d:71:b8:87:32:4d:64:47:a5:e3:d5:14: e0:b3:b9:c5:14:df:ae:92:29:4f:8d:0b:74:c3:b6:4e:1a:98: 8c:17:c1:ae:e8:f6:23:da:9b:f3:9b:79:e5:1d:da:bd:38:fe: 5d:f8:e6:50:6c:0a:42:53:31:0b:65:fa:13:7e:57:6e:26:8e: 5f:86:4a:15:05:05:cf:61:bc:b6:b9:8d:b8:30:6c:37:3c:e3: c0:09:98:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMEILMgabmhvvVshKZ58Y4wME4YowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDA1MDA5WhcNMjYwMjE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmM5ODQ2OTgyZmUxNzc2YTM4ODg0NjkxMTUwNjk1YTU2 NWVhNjlmYTU3MjI2MDIyYWRmNGQyMWI2NjlmN2UyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDv3YsMcQAhgpfB8ZpTFZucx6ZGe6oOPQR/qV/YLFbxQCoa 6QvPR8E/zuoGJueNdnPksIWz/2TQeueTWcrNAEYSKjrVbRYiJDEsB9Ud/uiuQj+s 1VSwaYFy2WttL/CIQIevUOteb4q/T/p+FpUXBKZSd2jHzqgbEgSZp+6Y9d4BgO5H z5zBPei1Pa8yt2XVaOaC3FaysAHZsnUDECOXIsojfOrIKMtqX//R++ktNHjdOQWL IsXfu6RNvkZgtQNH5eguqqdCBYnyG1AF5rcsQSb5YyaR98x7g8SwyBxZgW69/LCl sfVLjSjrT5xhP+K9sCowVHMWRhoJQrex7UYlR7HhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlXsaVdcaKecheP7JxpPaNZo76CswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkZGZjNzU3LTdhY2YtNGYzNS05Nzg5LWMwZTQxNGY0MTI2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVA9+AwDQYJKoZIhvcNAQELBQADggEBAFdRK3pCKE4PzM0AZY5quClCq7Lm z2BnE8CaYkb/0uUTdKSnxi2r5Wx1Y4OYGe0nzzHiYJpqBy/B4HuH4PvaBtFB4tlz tB79xeLTfoiCZ6jPbEWjyqffpO4mtEwps/9YCLf5qX8KEvu6hS+gXm+JcXXKfJBs 3+E8b733d5pYCg5XEKJkR0IC6UGCBH7ytXw9+Drv1E3uJ/PDQnfsDizvggAWM1LM DZeUni1xuIcyTWRHpePVFOCzucUU366SKU+NC3TDtk4amIwXwa7o9iPam/ObeeUd 2r04/l345lBsCkJTMQtl+hN+V24mjl+GShUFBc9hvLa5jbgwbDc848AJmK0= -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:22 2025 by rpki-client