This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/039cc3d6-ccc0-4574-a795-38456e7f6749.roa File: 039cc3d6-ccc0-4574-a795-38456e7f6749.roa (raw, json) Hash identifier: a+yBJSD4aFbrteI/STaj9YxzRNF/6xOicHE7FJfIB8g= Subject key identifier: 8C:65:05:FF:B7:46:B2:82:5A:EE:3E:A9:23:2A:AD:BD:8A:F2:94:12 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3356881DA815A9DC14D91EAD4A2DEB550A7F3985 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/039cc3d6-ccc0-4574-a795-38456e7f6749.roa Signing time: Fri 05 Dec 2025 00:40:08 +0000 ROA not before: Fri 05 Dec 2025 00:40:08 +0000 ROA not after: Thu 05 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:56:88:1d:a8:15:a9:dc:14:d9:1e:ad:4a:2d:eb:55:0a:7f:39:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 5 00:40:08 2025 GMT Not After : Mar 5 23:59:59 2026 GMT Subject: serialNumber=dff7a01f4873d836d97efec0b1c416ecf4b0a24be1fdfbb89434ae026bf46a93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:dc:00:a9:11:e8:4a:95:9e:60:d0:6b:a3: 14:b3:5a:81:e4:1d:e1:20:80:e1:92:76:d4:6f:bf: 3a:33:4f:cc:c8:13:88:bc:93:47:44:07:0c:f7:9a: 56:eb:be:32:4c:2c:e9:8c:65:91:9b:72:ff:3c:9e: 32:7b:39:06:33:36:50:97:25:9e:7b:67:d2:3d:70: 58:e1:2f:4f:80:dd:0d:10:e3:36:28:fd:4a:f7:ac: 08:14:41:91:f5:19:7c:aa:c1:97:0e:dc:bd:47:20: 93:a6:44:ee:e8:78:b4:e2:b1:91:53:73:89:e7:c6: 4d:f8:77:19:84:3e:1f:99:43:cd:6c:4c:a7:17:46: a6:40:74:39:93:47:79:7e:af:e7:e1:c9:56:50:95: 82:39:c2:f4:4f:ad:59:bc:50:f2:b6:11:71:da:4d: 77:67:36:52:25:a4:48:60:91:69:b5:73:d7:e7:e8: 0d:20:6d:24:8e:17:6d:ca:61:84:31:86:95:a3:5b: 63:b5:bf:2b:e7:9c:68:50:a4:4e:6d:d3:d9:d9:ad: 94:03:2a:4e:3b:cf:98:c7:53:c4:03:39:e0:70:98: 6c:54:42:4d:7d:13:d2:21:df:f5:35:11:d0:db:f6: bd:80:b7:2e:c8:9b:a3:6e:8a:1b:c6:0e:67:ef:76: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:65:05:FF:B7:46:B2:82:5A:EE:3E:A9:23:2A:AD:BD:8A:F2:94:12 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/039cc3d6-ccc0-4574-a795-38456e7f6749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.108.0/22 Signature Algorithm: sha256WithRSAEncryption aa:fa:b0:ef:ee:70:05:62:2c:f5:01:b9:e2:15:34:68:2a:a0: 8d:98:b7:e5:51:21:d3:21:8a:b2:f4:e9:27:ac:b5:47:94:6c: 66:37:92:83:83:16:fd:7d:39:99:bc:66:2f:b7:21:01:fc:27: cb:30:15:56:16:42:06:6a:f6:ca:43:0c:02:53:69:54:c2:3d: b3:99:f9:9e:bf:81:e2:d3:58:cf:b7:c7:ed:4e:81:db:e5:e6: e6:c1:91:50:d3:c0:f9:f4:61:0c:fa:ed:0f:54:f8:5c:d4:eb: a2:16:05:da:c9:41:c6:ed:db:78:f3:ef:c8:f1:b5:8f:49:db: 6e:62:ad:b0:3d:46:57:bd:37:b1:1a:40:2c:eb:55:4a:e9:fe: 4b:c8:d9:e8:24:1b:84:06:95:59:de:1b:86:a4:ed:bd:41:f9: cb:02:6a:6f:7e:b9:b2:35:7f:b3:0b:f5:ac:11:26:1f:91:bb: 92:90:45:7a:e1:22:db:3a:66:b8:94:bc:dd:9d:40:fe:b3:60: 8d:cb:19:b4:81:af:7f:e0:78:22:0f:ef:a7:2e:d4:52:0a:30: 5c:dd:98:c1:84:df:13:12:c1:1b:35:4e:6e:9b:39:e1:2a:a8: 61:c0:32:79:07:01:4f:16:37:32:e5:47:15:46:4c:42:f4:00: 27:ba:ff:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM1aIHagVqdwU2R6tSi3rVQp/OYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA1MDA0MDA4WhcNMjYwMzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmY3YTAxZjQ4NzNkODM2ZDk3ZWZlYzBiMWM0MTZlY2Y0 YjBhMjRiZTFmZGZiYjg5NDM0YWUwMjZiZjQ2YTkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL4twAqRHoSpWeYNBroxSzWoHkHeEggOGSdtRvvzozT8zI E4i8k0dEBwz3mlbrvjJMLOmMZZGbcv88njJ7OQYzNlCXJZ57Z9I9cFjhL0+A3Q0Q 4zYo/Ur3rAgUQZH1GXyqwZcO3L1HIJOmRO7oeLTisZFTc4nnxk34dxmEPh+ZQ81s TKcXRqZAdDmTR3l+r+fhyVZQlYI5wvRPrVm8UPK2EXHaTXdnNlIlpEhgkWm1c9fn 6A0gbSSOF23KYYQxhpWjW2O1vyvnnGhQpE5t09nZrZQDKk47z5jHU8QDOeBwmGxU Qk19E9Ih3/U1EdDb9r2Aty7Im6NuihvGDmfvdiepAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjGUF/7dGsoJa7j6pIyqtvYrylBIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAzOWNjM2Q2LWNjYzAtNDU3NC1hNzk1LTM4NDU2ZTdmNjc0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2tmwwDQYJKoZIhvcNAQELBQADggEBAKr6sO/ucAViLPUBueIVNGgqoI2Y t+VRIdMhirL06SestUeUbGY3koODFv19OZm8Zi+3IQH8J8swFVYWQgZq9spDDAJT aVTCPbOZ+Z6/geLTWM+3x+1Ogdvl5ubBkVDTwPn0YQz67Q9U+FzU66IWBdrJQcbt 23jz78jxtY9J225irbA9Rle9N7EaQCzrVUrp/kvI2egkG4QGlVneG4ak7b1B+csC am9+ubI1f7ML9awRJh+Ru5KQRXrhIts6ZriUvN2dQP6zYI3LGbSBr3/geCIP76cu 1FIKMFzdmMGE3xMSwRs1Tm6bOeEqqGHAMnkHAU8WNzLlRxVGTEL0ACe6/2s= -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:43 2025 by rpki-client