This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa File: be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa (raw, json) Hash identifier: mM4ivobNRg8u11Rqm9bZbKDOyW5awYwWhkMSNDcrOUk= Subject key identifier: 9F:AF:F3:F2:F4:0E:BF:6D:7C:CE:15:04:78:2E:47:B2:27:F5:AA:DB Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 437E2AA53BDBF9AE3ED9D3A414A38D5470926ED2 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa Signing time: Sat 06 Dec 2025 00:10:17 +0000 ROA not before: Sat 06 Dec 2025 00:10:17 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7e:2a:a5:3b:db:f9:ae:3e:d9:d3:a4:14:a3:8d:54:70:92:6e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Dec 6 00:10:17 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=983d82af69f49267e0a0a9d5bfe43d1a02a70d2dd3924553ca889494f0833217, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:14:bd:26:e7:35:24:3d:52:82:c9:45:b3: ff:ec:62:7b:85:9b:64:64:31:11:78:18:06:96:55: 2d:a0:e8:38:e6:1d:c2:d0:86:06:bf:66:65:a0:5b: e5:6e:81:26:a1:69:92:69:e0:a8:f0:cd:75:4a:ea: 8a:37:72:8a:77:f3:24:6b:17:d6:33:42:d3:7b:bf: e1:96:18:7d:15:e8:49:1a:dc:f4:fe:f5:43:b9:be: 3a:77:c2:28:e6:8c:c9:e2:9b:a0:fb:c9:ee:1c:22: 56:58:dc:d4:3f:a5:3e:d4:be:6b:0a:18:6c:f3:a0: b6:f0:8c:bf:d0:b6:0f:f7:a8:6d:be:97:8d:75:a5: 1b:f5:f7:29:11:8b:5a:3b:03:ed:39:3b:8b:e1:6f: fd:0a:57:d5:39:1e:cc:e9:c4:31:d2:d6:23:ae:99: f7:48:25:d3:76:b0:45:b1:e4:0f:f3:e4:6a:fc:be: b6:78:f3:e2:9a:df:99:2f:77:a4:78:4c:ce:5c:47: 71:38:8e:15:cd:70:4b:28:3d:a0:06:01:ed:d9:66: a9:20:cc:92:e7:96:91:16:8d:c0:2c:80:5d:aa:28: 2d:d6:32:6e:a4:26:87:42:2d:d0:04:4c:dc:36:98: 95:2d:c3:c3:80:c5:26:76:bc:85:a6:e3:cc:a2:b2: ab:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AF:F3:F2:F4:0E:BF:6D:7C:CE:15:04:78:2E:47:B2:27:F5:AA:DB X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 37:0d:a9:60:78:0a:16:e8:54:a6:0d:93:da:38:b7:97:d4:03: bc:cf:3b:b0:d2:fa:7b:96:88:39:25:f0:53:98:61:c8:2d:85: 75:ce:fd:78:9a:7b:45:03:9b:bf:26:3f:9d:a4:75:e4:a9:9c: a9:37:76:78:e0:45:cc:94:cb:5f:48:ba:f9:a3:de:d9:5a:88: f4:f6:c6:f9:1d:10:36:a6:41:8f:75:b4:ea:7d:1c:f2:68:c7: 2f:1d:44:6b:6b:89:15:43:fa:46:fe:d6:6d:ca:39:c0:b4:86: 28:44:46:e4:8b:63:e6:37:e2:13:58:80:7d:71:ba:e9:dc:f6: 03:3f:0c:36:38:10:b9:0a:8f:d5:68:5b:86:cc:34:82:eb:66: bf:ca:32:c3:f8:6f:39:4a:4a:66:c7:22:d8:51:ed:02:a1:87: f2:f5:36:1f:b6:d6:d5:7f:d5:6e:d8:e4:0e:c2:9d:50:c3:18: fb:cb:05:47:3b:d2:03:fa:c7:1a:01:6e:0c:61:af:69:2a:bc: 40:01:f3:09:d2:cd:1e:ce:07:b0:a9:71:74:45:09:e7:ad:c5: a8:87:60:84:d4:05:c7:01:6f:08:e2:f3:4f:ef:c7:8a:ef:2c: 94:78:5e:78:84:3a:a8:1e:43:26:ba:14:dc:64:38:d0:a4:5f: 46:6c:9d:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ34qpTvb+a4+2dOkFKONVHCSbtIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMjA2MDAxMDE3WhcNMjYwMzA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODNkODJhZjY5ZjQ5MjY3ZTBhMGE5ZDViZmU0M2QxYTAy YTcwZDJkZDM5MjQ1NTNjYTg4OTQ5NGYwODMzMjE3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuABS9Juc1JD1SgslFs//sYnuFm2RkMRF4GAaWVS2g6Djm HcLQhga/ZmWgW+VugSahaZJp4KjwzXVK6oo3cop38yRrF9YzQtN7v+GWGH0V6Eka 3PT+9UO5vjp3wijmjMnim6D7ye4cIlZY3NQ/pT7UvmsKGGzzoLbwjL/Qtg/3qG2+ l411pRv19ykRi1o7A+05O4vhb/0KV9U5HszpxDHS1iOumfdIJdN2sEWx5A/z5Gr8 vrZ48+Ka35kvd6R4TM5cR3E4jhXNcEsoPaAGAe3ZZqkgzJLnlpEWjcAsgF2qKC3W Mm6kJodCLdAETNw2mJUtw8OAxSZ2vIWm48yisqv/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUn6/z8vQOv218zhUEeC5Hsif1qtswHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2JlNmQyN2JjLWE1NmQtNGRjZS1iMmMyLTVhNzU2ZWNhNDE1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBADcNqWB4ChboVKYNk9o4t5fUA7zP O7DS+nuWiDkl8FOYYcgthXXO/Xiae0UDm78mP52kdeSpnKk3dnjgRcyUy19Iuvmj 3tlaiPT2xvkdEDamQY91tOp9HPJoxy8dRGtriRVD+kb+1m3KOcC0hihERuSLY+Y3 4hNYgH1xuunc9gM/DDY4ELkKj9VoW4bMNILrZr/KMsP4bzlKSmbHIthR7QKhh/L1 Nh+21tV/1W7Y5A7CnVDDGPvLBUc70gP6xxoBbgxhr2kqvEAB8wnSzR7OB7CpcXRF CeetxaiHYITUBccBbwji80/vx4rvLJR4XniEOqgeQya6FNxkONCkX0ZsnQ8= -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:32 2025 by rpki-client