This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa File: f67538ee-cd29-4883-9251-086023a50dc3.roa (raw, json) Hash identifier: XkpqZsBNysg6oEG7cxNvhVPTQc1yERa4yZUidIcMkpg= Subject key identifier: 2F:D6:2F:EB:0D:51:6C:26:52:CD:C6:85:36:10:B9:A0:9B:0B:1C:E3 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 618ADBC3F0E7D3111E51BAC522B27EAC73CAB600 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa Signing time: Sun 23 Nov 2025 00:20:09 +0000 ROA not before: Sun 23 Nov 2025 00:20:09 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8a:db:c3:f0:e7:d3:11:1e:51:ba:c5:22:b2:7e:ac:73:ca:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Nov 23 00:20:09 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=4aeff5e20735772063d1827c93a700e1c0b9f4dacb78c796c956231287e547ac, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:57:65:18:8e:4b:e6:a8:48:e1:54:47:a8: 68:61:b9:a2:de:f5:14:3a:79:c1:12:99:99:2c:c1: b4:4f:b4:ff:41:98:aa:71:aa:a0:36:57:89:d8:e6: a7:91:ce:c1:e0:ba:17:0b:7f:d2:de:72:b9:f7:ee: fa:47:54:08:ee:79:aa:97:82:65:d6:1b:e1:da:54: 2d:70:89:e1:7d:50:3d:f7:10:69:2d:cd:3f:91:05: 1d:26:2d:5f:1b:73:c0:50:d8:2a:3b:27:31:6d:40: 19:62:3f:4c:e2:fc:d3:83:9d:f3:aa:00:bb:30:c1: 6d:26:df:a9:b6:c1:4e:34:7e:0d:a3:4d:cb:87:8d: 79:d2:e8:94:c8:31:d8:5d:6e:8d:df:75:dd:49:c4: 2e:7d:45:2a:50:df:f6:d1:ff:5c:ac:72:2e:30:80: 72:b8:c9:8a:db:ad:df:20:59:5c:57:9e:69:82:f1: 1d:73:af:06:b6:98:be:62:92:5f:9e:10:d6:e5:0d: 91:ce:70:79:bf:7c:b8:8d:47:6c:1c:e5:a2:f7:74: b1:3a:64:a2:be:d2:78:ba:a4:b4:50:b1:ab:ee:6c: e0:10:02:ae:5e:a5:bd:9e:dd:c5:78:a8:3d:b5:f5: 00:8c:d0:98:d2:f4:ff:20:71:c8:6b:41:92:18:20: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:2F:EB:0D:51:6C:26:52:CD:C6:85:36:10:B9:A0:9B:0B:1C:E3 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.227.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:e5:ec:da:bb:f0:40:e0:77:52:74:8a:12:3d:f6:58:59:bf: dc:bc:19:1c:44:82:58:f4:23:89:b2:e3:79:4f:df:09:b3:eb: 61:f5:2a:0e:f7:66:68:c7:7e:f7:5f:9f:1d:0d:27:4c:c6:17: 1c:7e:f9:ad:2c:bc:5a:d7:db:99:71:d0:f1:86:81:fb:fc:67: 51:6b:fc:e7:45:aa:d3:ff:03:cf:d5:52:6d:3a:ae:b2:3d:3f: b5:6d:04:b7:b7:c3:ec:62:7c:62:75:42:6d:aa:74:c2:e4:cd: 7c:cb:32:7b:30:c1:47:36:0e:97:7d:63:4e:97:fe:e3:03:3f: 7f:48:34:99:6e:27:ee:a9:de:aa:f6:3d:18:dc:9a:de:7f:27: 1e:52:96:f4:0e:cc:93:e0:0d:9f:78:f8:9d:f3:e8:d5:48:86: 4a:6d:dc:06:60:80:c9:8f:b2:f3:f9:3e:89:a7:88:09:c2:19: a5:3a:c2:d6:d0:6d:3e:43:f1:0c:22:6d:09:5a:63:38:01:97: 19:94:10:0e:0a:07:f3:f1:67:b5:4e:15:9b:c7:9a:25:9f:ce: bb:ff:f5:bd:24:23:97:4b:34:e7:66:61:d4:cb:58:c6:9f:ce: ec:f2:fe:57:6c:69:ff:b5:7b:31:2b:af:0a:5c:6b:3a:b7:b3: b7:8a:72:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYYrbw/Dn0xEeUbrFIrJ+rHPKtgAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMTIzMDAyMDA5WhcNMjYwMjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWVmZjVlMjA3MzU3NzIwNjNkMTgyN2M5M2E3MDBlMWMw YjlmNGRhY2I3OGM3OTZjOTU2MjMxMjg3ZTU0N2FjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrBldlGI5L5qhI4VRHqGhhuaLe9RQ6ecESmZkswbRPtP9B mKpxqqA2V4nY5qeRzsHguhcLf9Lecrn37vpHVAjueaqXgmXWG+HaVC1wieF9UD33 EGktzT+RBR0mLV8bc8BQ2Co7JzFtQBliP0zi/NODnfOqALswwW0m36m2wU40fg2j TcuHjXnS6JTIMdhdbo3fdd1JxC59RSpQ3/bR/1ysci4wgHK4yYrbrd8gWVxXnmmC 8R1zrwa2mL5ikl+eENblDZHOcHm/fLiNR2wc5aL3dLE6ZKK+0ni6pLRQsavubOAQ Aq5epb2e3cV4qD219QCM0JjS9P8gcchrQZIYIKc7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL9Yv6w1RbCZSzcaFNhC5oJsLHOMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y2NzUzOGVlLWNkMjktNDg4My05MjUxLTA4NjAyM2E1MGRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++MwDQYJKoZIhvcNAQELBQADggEBADrl7Nq78EDgd1J0ihI99lhZv9y8 GRxEglj0I4my43lP3wmz62H1Kg73ZmjHfvdfnx0NJ0zGFxx++a0svFrX25lx0PGG gfv8Z1Fr/OdFqtP/A8/VUm06rrI9P7VtBLe3w+xifGJ1Qm2qdMLkzXzLMnswwUc2 Dpd9Y06X/uMDP39INJluJ+6p3qr2PRjcmt5/Jx5SlvQOzJPgDZ94+J3z6NVIhkpt 3AZggMmPsvP5PomniAnCGaU6wtbQbT5D8QwibQlaYzgBlxmUEA4KB/PxZ7VOFZvH miWfzrv/9b0kI5dLNOdmYdTLWMafzuzy/ldsaf+1ezErrwpcazq3s7eKciE= -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:44 2025 by rpki-client