This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3b19a945-7e26-4d66-a93d-c43be9220dc3.roa File: 3b19a945-7e26-4d66-a93d-c43be9220dc3.roa (raw, json) Hash identifier: JBANZ7nrwecK5xSjo+ZjU8/RGesbJ0NKpI4JS6a/LGg= Subject key identifier: 74:C2:00:28:46:F2:99:F0:9A:BF:B0:D5:67:CB:64:B4:55:E3:28:4C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6BA48306FC7FA071937872EF8C2856D30D0BE08F Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3b19a945-7e26-4d66-a93d-c43be9220dc3.roa Signing time: Tue 25 Nov 2025 00:00:06 +0000 ROA not before: Tue 25 Nov 2025 00:00:06 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 24.110.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a4:83:06:fc:7f:a0:71:93:78:72:ef:8c:28:56:d3:0d:0b:e0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 25 00:00:06 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=2d94622acfcf4f996c8126de81326ea9d6b35788174ee4501bb8fde2b07a3c81, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:d9:91:05:06:1b:e9:44:ac:b2:d7:b3:cb: 4f:46:ae:51:71:ed:c2:03:18:a0:30:a1:b2:3b:5f: 39:8a:37:d3:07:3b:5a:a4:cc:4a:05:16:a4:d4:bb: b3:ac:69:85:14:a6:e0:b7:b9:55:ef:e1:2c:a7:41: 26:5d:48:1c:93:09:10:f7:6f:2b:0b:2e:a8:e4:a7: cc:2b:89:e4:a2:89:e3:ac:4d:ac:20:a1:52:ff:1e: a6:b4:9d:26:c2:7a:2b:1f:bf:63:fd:94:b3:f0:cf: 03:00:fe:d1:ef:3f:13:6a:90:4c:9b:5e:7d:be:88: 39:1f:2d:22:17:2d:41:13:25:3d:38:96:e7:1d:9e: fc:37:a6:bb:c5:53:41:4d:49:17:4d:a5:35:b8:e0: df:6d:d7:08:50:ac:bd:03:59:81:63:a2:51:a3:12: 4c:7c:4d:f7:45:d8:0b:7c:87:91:f2:92:e7:8d:6e: 0f:0b:9a:43:e7:ac:83:be:87:b4:df:ef:ad:7f:4a: 75:6d:b3:22:a9:9e:39:10:f5:c2:84:6a:cf:dd:e2: 0b:93:59:fe:78:89:1a:c5:85:fb:dc:f9:38:52:16: 12:f6:2b:88:fe:04:74:4b:38:94:9b:14:2e:a6:21: 29:3b:6c:29:73:a4:ae:1f:f8:1c:02:c3:6a:d6:76: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C2:00:28:46:F2:99:F0:9A:BF:B0:D5:67:CB:64:B4:55:E3:28:4C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3b19a945-7e26-4d66-a93d-c43be9220dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.64.0/18 Signature Algorithm: sha256WithRSAEncryption 49:09:d4:98:96:92:64:32:44:29:6b:79:a7:64:4a:a4:71:2e: f2:2a:53:eb:00:6c:fa:f1:b9:6b:d3:5b:d9:ab:25:79:36:83: c4:4b:4e:7c:7d:50:d9:a1:85:51:fd:31:aa:09:73:4d:2d:5b: cd:75:c7:55:b8:b6:5e:3b:61:11:28:9b:21:1b:76:d1:09:bd: be:29:b2:e4:75:69:b0:64:29:99:c9:cb:37:a5:d1:f3:e3:de: 34:3f:b4:5a:bc:e0:36:21:96:4f:72:c6:d9:98:f2:1d:98:da: fb:46:11:65:f2:ed:5b:9c:2f:ae:93:95:c6:e9:f5:84:bc:e1: 49:35:8c:3b:70:9b:eb:e8:0d:e1:89:21:bf:01:57:61:26:dd: 6f:d1:d6:b3:fc:a3:34:be:0e:7b:c7:3a:ac:c3:fa:ab:b8:3f: 29:67:76:8e:8f:0e:c7:d8:47:74:31:2d:12:90:f6:a0:ad:6e: d5:53:5d:80:92:15:cf:60:01:85:7a:b9:bd:5c:49:40:31:52: 3d:38:84:eb:d4:be:70:d5:38:71:4e:0b:11:93:5e:97:14:ed: b6:73:b9:5f:68:e0:71:df:6a:cc:84:1e:f7:c0:7f:34:69:9a: 46:51:9e:f8:4a:98:c1:9d:9f:ad:0c:b9:7f:fe:1a:88:c5:55: 23:2e:16:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa6SDBvx/oHGTeHLvjChW0w0L4I8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTI1MDAwMDA2WhcNMjYwMjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDk0NjIyYWNmY2Y0Zjk5NmM4MTI2ZGU4MTMyNmVhOWQ2 YjM1Nzg4MTc0ZWU0NTAxYmI4ZmRlMmIwN2EzYzgxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCri9mRBQYb6USsstezy09GrlFx7cIDGKAwobI7XzmKN9MH O1qkzEoFFqTUu7OsaYUUpuC3uVXv4SynQSZdSByTCRD3bysLLqjkp8wrieSiieOs TawgoVL/Hqa0nSbCeisfv2P9lLPwzwMA/tHvPxNqkEybXn2+iDkfLSIXLUETJT04 lucdnvw3prvFU0FNSRdNpTW44N9t1whQrL0DWYFjolGjEkx8TfdF2At8h5HykueN bg8LmkPnrIO+h7Tf761/SnVtsyKpnjkQ9cKEas/d4guTWf54iRrFhfvc+ThSFhL2 K4j+BHRLOJSbFC6mISk7bClzpK4f+BwCw2rWdktJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdMIAKEbymfCav7DVZ8tktFXjKEwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNiMTlhOTQ1LTdlMjYtNGQ2Ni1hOTNkLWM0M2JlOTIyMGRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYYbkAwDQYJKoZIhvcNAQELBQADggEBAEkJ1JiWkmQyRClreadkSqRxLvIq U+sAbPrxuWvTW9mrJXk2g8RLTnx9UNmhhVH9MaoJc00tW811x1W4tl47YREomyEb dtEJvb4psuR1abBkKZnJyzel0fPj3jQ/tFq84DYhlk9yxtmY8h2Y2vtGEWXy7Vuc L66Tlcbp9YS84Uk1jDtwm+voDeGJIb8BV2Em3W/R1rP8ozS+DnvHOqzD+qu4Pyln do6PDsfYR3QxLRKQ9qCtbtVTXYCSFc9gAYV6ub1cSUAxUj04hOvUvnDVOHFOCxGT XpcU7bZzuV9o4HHfasyEHvfAfzRpmkZRnvhKmMGdn60MuX/+GojFVSMuFik= -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:05 2025 by rpki-client