This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/ca3490d0-1e9e-400b-af5e-b8236be17139.roa File: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (raw, json) Hash identifier: BwNH3nFLdWTvprZ7vZ1Irs5I3A6fTCu1Ii7ND74xCBQ= Subject key identifier: 86:95:CA:1C:F4:38:9E:37:50:3D:C1:F8:B3:E6:40:ED:B6:BC:14:F2 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 5F65E5D8263DFA3A997BC5E51D7F648CDEB8404A Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/ca3490d0-1e9e-400b-af5e-b8236be17139.roa Signing time: Wed 12 Nov 2025 00:10:09 +0000 ROA not before: Wed 12 Nov 2025 00:10:09 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:65:e5:d8:26:3d:fa:3a:99:7b:c5:e5:1d:7f:64:8c:de:b8:40:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Nov 12 00:10:09 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=3b714a4dcbf0f7bde42557df22a6d774e7257a24ee217788d98d76c14626573a, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:b0:6e:f7:b0:9a:b6:08:98:cf:23:3a:28: 71:29:b6:df:66:d6:30:84:c8:81:fe:b5:a5:4b:5c: 14:c5:0e:40:82:f4:d4:97:96:ee:a5:93:9a:b9:7f: 7a:8d:c5:b8:f2:ba:87:bf:4c:93:48:9f:71:44:42: 2e:05:ea:9a:b4:e6:d0:ad:7e:b5:62:28:37:ab:76: d3:fc:e4:6c:03:82:8d:b3:4d:34:4a:d6:e8:e8:80: f4:73:39:b0:ba:52:53:ac:53:82:1b:c7:a6:c8:24: 01:ae:0b:de:35:bd:70:e0:73:15:93:dc:14:b5:83: cb:3d:3a:b8:b9:7c:84:fe:03:58:fb:a9:39:e9:8d: 0f:d7:16:a4:55:64:33:71:af:22:d4:4f:f3:38:6a: 61:ac:64:c7:b9:09:f7:ed:f1:7b:a2:a4:d8:21:cc: d5:ba:a0:19:a1:50:1d:50:8e:27:d7:38:48:0b:40: 19:00:90:2e:d8:7a:db:0f:01:4a:e4:76:24:17:4f: 49:9c:35:00:28:ab:e4:3d:6f:eb:c8:c6:59:e1:7d: b3:21:fb:77:72:91:e2:27:9f:91:1c:22:8e:87:9b: 0f:b5:4b:55:f3:6a:d7:59:02:36:d5:79:e7:bd:82: 8c:82:8e:c4:09:6c:b8:1e:8d:53:21:c4:4d:04:ea: 63:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:CA:1C:F4:38:9E:37:50:3D:C1:F8:B3:E6:40:ED:B6:BC:14:F2 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/ca3490d0-1e9e-400b-af5e-b8236be17139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.96.0/19 Signature Algorithm: sha256WithRSAEncryption a0:52:65:1c:20:64:a7:e2:6c:7a:26:f0:8d:2f:86:51:d5:09: cd:28:78:68:6e:2f:95:8d:54:a2:f9:93:27:dc:66:5a:c4:e8: b9:76:08:a6:24:a2:39:1c:e7:0e:f5:ca:3b:7b:6a:69:49:37: 7e:7f:5e:a1:2b:f0:b0:de:03:b5:94:23:2b:98:34:f0:5a:f8: 3a:51:e0:3b:92:b3:fd:41:42:16:23:1b:48:49:f8:41:5a:b8: 2b:43:97:49:79:90:64:fa:48:40:de:24:fb:e0:9e:ea:41:74: e7:96:dc:27:ea:60:79:b7:7a:75:96:26:fd:7b:95:94:5d:27: 0f:82:61:51:53:65:87:05:e7:3d:e1:73:de:3b:c6:f5:98:ef: ab:b5:eb:6d:cc:8c:4a:66:d6:51:19:7e:f1:99:dd:81:b0:37: 40:9f:8b:0a:ee:e8:7c:cb:3f:9c:4d:5a:ca:e3:d1:a4:38:02: fe:b2:9d:78:23:8a:32:92:57:b2:21:6f:e3:8e:12:bf:ad:a0: 0d:9b:f9:9b:1a:3e:c5:1d:64:c9:97:8f:cc:b6:4c:72:c9:2b: 3c:47:81:21:a8:48:5b:93:12:21:d4:d7:68:19:b1:21:b5:73: a9:aa:a5:b9:03:0d:1e:34:5e:b3:1f:dd:ab:99:85:47:17:e0: 27:aa:9c:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX2Xl2CY9+jqZe8XlHX9kjN64QEowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUxMTEyMDAxMDA5WhcNMjUxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjcxNGE0ZGNiZjBmN2JkZTQyNTU3ZGYyMmE2ZDc3NGU3 MjU3YTI0ZWUyMTc3ODhkOThkNzZjMTQ2MjY1NzNhMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn9LBu97CatgiYzyM6KHEptt9m1jCEyIH+taVLXBTFDkCC 9NSXlu6lk5q5f3qNxbjyuoe/TJNIn3FEQi4F6pq05tCtfrViKDerdtP85GwDgo2z TTRK1ujogPRzObC6UlOsU4Ibx6bIJAGuC941vXDgcxWT3BS1g8s9Ori5fIT+A1j7 qTnpjQ/XFqRVZDNxryLUT/M4amGsZMe5Cfft8XuipNghzNW6oBmhUB1QjifXOEgL QBkAkC7YetsPAUrkdiQXT0mcNQAoq+Q9b+vIxlnhfbMh+3dykeInn5EcIo6Hmw+1 S1XzatdZAjbVeee9goyCjsQJbLgejVMhxE0E6mPxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhpXKHPQ4njdQPcH4s+ZA7ba8FPIwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2NhMzQ5MGQwLTFlOWUtNDAwYi1hZjVlLWI4MjM2YmUxNzEzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXGKWAwDQYJKoZIhvcNAQELBQADggEBAKBSZRwgZKfibHom8I0vhlHVCc0o eGhuL5WNVKL5kyfcZlrE6Ll2CKYkojkc5w71yjt7amlJN35/XqEr8LDeA7WUIyuY NPBa+DpR4DuSs/1BQhYjG0hJ+EFauCtDl0l5kGT6SEDeJPvgnupBdOeW3CfqYHm3 enWWJv17lZRdJw+CYVFTZYcF5z3hc947xvWY76u1623MjEpm1lEZfvGZ3YGwN0Cf iwru6HzLP5xNWsrj0aQ4Av6ynXgjijKSV7Ihb+OOEr+toA2b+ZsaPsUdZMmXj8y2 THLJKzxHgSGoSFuTEiHU12gZsSG1c6mqpbkDDR40XrMf3auZhUcX4CeqnAk= -----END CERTIFICATE-----Generated at Sat Dec 6 19:02:47 2025 by rpki-client