This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa File: c9752aac-8490-485f-92b7-6a6ba02b76d5.roa (raw, json) Hash identifier: Nt9tnXeTVX9mbdZiw7okS6C++Sv/yIJ2H82w8UNqRfc= Subject key identifier: 41:2A:FC:AF:00:06:96:49:A4:71:2C:A7:EA:27:04:5F:6A:84:12:32 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 09699E45B9D31F93A624A80E5F8D66ACA117F40C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa Signing time: Wed 12 Nov 2025 00:00:43 +0000 ROA not before: Wed 12 Nov 2025 00:00:43 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 199.127.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:69:9e:45:b9:d3:1f:93:a6:24:a8:0e:5f:8d:66:ac:a1:17:f4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 12 00:00:43 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=ac90250d3f1604e08b526d2d231db56463f2c3646d9adb53da52216adc406d34, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:83:89:0d:c0:8e:6b:d4:06:38:f2:ea:6a: c1:ea:74:b6:93:ca:45:11:1e:7a:4a:05:a1:83:26: 2b:e8:fb:07:fd:b8:03:73:86:47:59:20:53:0e:63: 30:71:a5:33:11:72:9f:9a:66:d2:0e:22:80:29:0f: 40:7c:76:51:72:04:c3:06:8a:9b:eb:bf:aa:0a:de: a9:5a:1d:a7:90:4a:ed:1f:d0:5a:c4:d3:34:90:ba: 6e:bd:fb:bd:dc:e3:6c:7b:86:58:8d:f6:52:03:26: 69:cc:7c:08:04:b3:d1:0d:02:01:d4:05:c6:8e:c4: 3c:fb:ce:e1:5f:02:1a:ad:85:af:d2:96:5d:13:70: 81:28:84:7b:2a:14:5e:5c:53:db:c2:6e:9e:3f:fa: 03:de:bb:74:e0:0b:9c:e8:a1:56:ac:4b:62:dd:db: 31:73:b8:46:69:a9:ff:e2:6f:b4:a7:d5:b4:5c:07: d6:32:8d:1c:7e:0c:88:9e:0b:13:97:1e:03:2a:b8: 37:ff:d1:76:59:6a:18:dd:cf:df:70:b9:dc:4e:84: 4c:ca:4f:39:49:99:67:92:bd:9c:e6:2b:5b:44:00: d4:1f:e8:f8:12:0e:3a:82:5b:50:a6:30:a7:ff:cc: 47:52:02:85:2d:a5:64:23:06:27:44:aa:32:38:61: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2A:FC:AF:00:06:96:49:A4:71:2C:A7:EA:27:04:5F:6A:84:12:32 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/c9752aac-8490-485f-92b7-6a6ba02b76d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.127.232.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:f2:c3:9a:08:57:03:94:04:83:b8:94:70:d0:8c:7a:d6:a5: e4:f5:9b:9f:50:86:42:aa:a0:5c:4f:35:5f:93:19:02:3b:7b: df:e6:76:42:96:6a:9a:da:0b:54:66:f1:03:9d:e7:4a:92:f2: 3d:19:ba:16:dc:6a:62:7a:8b:ee:92:28:50:a3:9f:c0:26:7f: 95:7e:a6:74:4e:57:3b:0f:e9:3c:9d:d3:d3:cc:e2:4b:76:b1: e9:b7:84:0a:33:e3:76:16:f5:6c:d2:8c:2f:aa:1e:c1:3e:77: a1:26:12:3b:01:a5:15:94:c8:31:c0:3f:92:6b:44:9e:88:aa: a1:a3:f4:82:64:74:82:ef:6a:e2:23:e5:2e:6e:14:71:43:cf: 66:89:45:ce:dc:c2:cd:d5:b9:d0:b8:d4:83:f0:99:49:8a:0c: d2:9d:02:cf:a7:bc:b0:32:f2:1b:e6:f0:2e:e1:4d:3f:b3:c1: 37:df:ae:a2:ac:34:ca:18:64:ea:38:19:17:19:b5:2a:33:05: ca:a6:73:a7:1d:8d:9e:ee:fb:b6:c5:0f:6b:9c:43:eb:dc:fd: 81:20:18:7d:b4:d2:7d:ce:dd:a7:54:84:39:12:18:e3:1d:5c: f1:93:dc:88:f3:06:5c:a2:15:28:80:be:dd:84:2d:8b:a9:33: cd:3c:ac:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCWmeRbnTH5OmJKgOX41mrKEX9AwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTEyMDAwMDQzWhcNMjUxMjE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzkwMjUwZDNmMTYwNGUwOGI1MjZkMmQyMzFkYjU2NDYz ZjJjMzY0NmQ5YWRiNTNkYTUyMjE2YWRjNDA2ZDM0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKgoOJDcCOa9QGOPLqasHqdLaTykURHnpKBaGDJivo+wf9 uANzhkdZIFMOYzBxpTMRcp+aZtIOIoApD0B8dlFyBMMGipvrv6oK3qlaHaeQSu0f 0FrE0zSQum69+73c42x7hliN9lIDJmnMfAgEs9ENAgHUBcaOxDz7zuFfAhqtha/S ll0TcIEohHsqFF5cU9vCbp4/+gPeu3TgC5zooVasS2Ld2zFzuEZpqf/ib7Sn1bRc B9YyjRx+DIieCxOXHgMquDf/0XZZahjdz99wudxOhEzKTzlJmWeSvZzmK1tEANQf 6PgSDjqCW1CmMKf/zEdSAoUtpWQjBidEqjI4YT77AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQSr8rwAGlkmkcSyn6icEX2qEEjIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2M5NzUyYWFjLTg0OTAtNDg1Zi05MmI3LTZhNmJhMDJiNzZkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALHf+gwDQYJKoZIhvcNAQELBQADggEBABzyw5oIVwOUBIO4lHDQjHrWpeT1 m59QhkKqoFxPNV+TGQI7e9/mdkKWapraC1Rm8QOd50qS8j0ZuhbcamJ6i+6SKFCj n8Amf5V+pnROVzsP6Tyd09PM4kt2sem3hAoz43YW9WzSjC+qHsE+d6EmEjsBpRWU yDHAP5JrRJ6IqqGj9IJkdILvauIj5S5uFHFDz2aJRc7cws3VudC41IPwmUmKDNKd As+nvLAy8hvm8C7hTT+zwTffrqKsNMoYZOo4GRcZtSozBcqmc6cdjZ7u+7bFD2uc Q+vc/YEgGH200n3O3adUhDkSGOMdXPGT3IjzBlyiFSiAvt2ELYupM808rJA= -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:29 2025 by rpki-client