This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa File: d61aefde-15db-4326-8486-f4cd98992cbc.roa (raw, json) Hash identifier: 22kt8ZPG26tBSGg86ltibbvnKwcbc0/JR0jSkEbbNxc= Subject key identifier: E5:25:E7:6B:32:C1:0B:8A:DB:B2:32:67:A9:CF:62:27:30:9D:F5:B1 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 517C01E7BA84405814D892D2D2E7A4A0CF9A2D6D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa Signing time: Sun 23 Nov 2025 00:30:22 +0000 ROA not before: Sun 23 Nov 2025 00:30:22 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7c:01:e7:ba:84:40:58:14:d8:92:d2:d2:e7:a4:a0:cf:9a:2d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 23 00:30:22 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=e321df333b445469847882e06ab72634a2d12407e500caad807be8c87fca953f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d2:f0:97:f1:1e:fc:da:27:50:76:76:61:f7: 3c:5d:13:89:4d:70:03:0c:e1:5a:a0:5e:0f:a4:34: 09:4e:0e:6a:e0:c2:ec:f4:12:a1:47:d2:7b:12:f5: e3:4b:e6:ae:8a:b8:46:f0:9a:ef:67:4a:59:ac:bf: cc:fb:a9:42:f5:6d:4a:ca:76:64:92:9e:09:0d:d2: e0:9e:eb:e1:eb:2e:55:b2:c6:ec:10:ed:29:79:df: d8:8e:45:ca:df:3b:e7:73:f8:71:30:f9:06:2b:93: a2:be:9b:7e:d4:77:d6:ce:53:1d:cb:b9:46:09:01: d8:7b:00:33:66:ac:c1:2c:85:ca:29:ea:ad:3b:ba: 2e:68:ba:96:35:04:59:ba:98:74:cd:40:f4:cc:e8: cd:81:93:e1:c8:60:f1:17:d6:58:f7:e3:8d:54:3b: a5:8c:04:3e:85:fa:8b:a1:b7:3a:48:49:fa:f4:cf: 11:9a:69:fc:b3:a7:1c:30:86:d8:5c:e5:21:e3:96: 45:b5:c2:66:18:4a:73:63:01:fe:f3:cb:eb:c7:5a: b4:47:2b:49:30:5b:f7:48:5c:91:ca:d8:15:d0:21: 41:8f:0f:df:10:c8:ec:83:20:3c:a8:ab:aa:a8:e1: 6c:92:3e:f2:c1:e3:75:f3:19:da:35:1b:02:2e:bf: 46:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:25:E7:6B:32:C1:0B:8A:DB:B2:32:67:A9:CF:62:27:30:9D:F5:B1 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.223.0/24 Signature Algorithm: sha256WithRSAEncryption 46:7b:e7:68:f3:3b:fb:73:25:ef:4a:cb:8d:91:41:24:a0:c4: 4b:c1:21:52:cd:6e:d8:6a:8f:3a:70:52:0e:ac:61:f2:d9:65: 60:f2:3a:06:7d:ee:7b:7a:6c:f8:59:21:e6:69:5b:5c:a3:9b: 74:33:7e:aa:b4:4c:04:aa:63:1e:bb:e8:3c:df:46:3d:f7:3a: de:e2:47:67:82:89:1b:62:b7:fd:76:72:95:c9:73:e7:61:92: 7c:9b:ac:67:c3:2d:45:28:5b:01:9f:19:43:c8:7f:9d:5d:a4: 5e:d3:4e:f1:24:91:fb:90:19:ee:9f:f4:fd:79:d4:c3:a1:9a: 56:82:27:aa:a0:57:ae:fd:e2:fa:3c:01:22:80:76:cf:b4:9c: 5a:ad:0a:04:ad:35:5c:e8:b3:8a:18:55:8d:e8:c5:a7:72:6c: 57:13:36:d3:1e:98:51:65:cf:f0:f6:1a:94:f2:2f:1f:c4:c1: 14:90:9e:02:8e:67:84:62:25:f2:57:ce:5d:f9:6a:9e:b6:36: 55:4c:0c:26:1b:0a:82:ba:6c:b8:15:94:41:6e:c3:b4:0f:58: 90:08:33:4b:d9:68:1c:6d:ed:ad:b2:5f:5b:ac:98:be:b0:e5: ad:26:8a:c5:d5:57:ee:9d:a2:0e:e8:be:7b:02:ae:4d:72:ca: 3f:22:18:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUXwB57qEQFgU2JLS0uekoM+aLW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTIzMDAzMDIyWhcNMjYwMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzIxZGYzMzNiNDQ1NDY5ODQ3ODgyZTA2YWI3MjYzNGEy ZDEyNDA3ZTUwMGNhYWQ4MDdiZThjODdmY2E5NTNmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ0vCX8R782idQdnZh9zxdE4lNcAMM4VqgXg+kNAlODmrg wuz0EqFH0nsS9eNL5q6KuEbwmu9nSlmsv8z7qUL1bUrKdmSSngkN0uCe6+HrLlWy xuwQ7Sl539iORcrfO+dz+HEw+QYrk6K+m37Ud9bOUx3LuUYJAdh7ADNmrMEshcop 6q07ui5oupY1BFm6mHTNQPTM6M2Bk+HIYPEX1lj3441UO6WMBD6F+ouhtzpISfr0 zxGaafyzpxwwhthc5SHjlkW1wmYYSnNjAf7zy+vHWrRHK0kwW/dIXJHK2BXQIUGP D98QyOyDIDyoq6qo4WySPvLB43XzGdo1GwIuv0YPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5SXnazLBC4rbsjJnqc9iJzCd9bEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Q2MWFlZmRlLTE1ZGItNDMyNi04NDg2LWY0Y2Q5ODk5MmNiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d8wDQYJKoZIhvcNAQELBQADggEBAEZ752jzO/tzJe9Ky42RQSSgxEvB IVLNbthqjzpwUg6sYfLZZWDyOgZ97nt6bPhZIeZpW1yjm3Qzfqq0TASqYx676Dzf Rj33Ot7iR2eCiRtit/12cpXJc+dhknybrGfDLUUoWwGfGUPIf51dpF7TTvEkkfuQ Ge6f9P151MOhmlaCJ6qgV6794vo8ASKAds+0nFqtCgStNVzos4oYVY3oxadybFcT NtMemFFlz/D2GpTyLx/EwRSQngKOZ4RiJfJXzl35ap62NlVMDCYbCoK6bLgVlEFu w7QPWJAIM0vZaBxt7a2yX1usmL6w5a0misXVV+6dog7ovnsCrk1yyj8iGHI= -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:12 2025 by rpki-client