This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4598d2eb-7f57-4e1b-a8b0-1b8a086e722f.roa File: 4598d2eb-7f57-4e1b-a8b0-1b8a086e722f.roa (raw, json) Hash identifier: 9mLmxa8fqTUWLAnMDcr02dIBr/cG94IL+5F/+NeCD0M= Subject key identifier: 81:97:D9:BA:94:F4:68:17:62:6D:16:29:F9:4A:6C:2B:BB:8F:55:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1150EB67F0FEFD908C94D17B5287CAE96B9496BD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4598d2eb-7f57-4e1b-a8b0-1b8a086e722f.roa Signing time: Thu 04 Dec 2025 01:00:37 +0000 ROA not before: Thu 04 Dec 2025 01:00:37 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.220.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:50:eb:67:f0:fe:fd:90:8c:94:d1:7b:52:87:ca:e9:6b:94:96:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Dec 4 01:00:37 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=316bc3861f8c3b2947cdde223437ca5d94d880dc5126ae8824e0e099c4627a3c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:c7:37:3c:7e:e6:52:e2:bd:4b:d6:c3:35: 93:72:4f:ea:76:87:31:a5:df:17:1f:bb:18:7b:97: d6:d7:b0:2d:22:d3:1e:81:b9:79:fd:62:4e:18:c5: f3:ff:cd:09:5a:dd:c5:54:61:cf:ca:8f:a2:11:b4: 67:4e:1a:92:9e:b8:30:e1:cb:1d:93:7d:ad:df:b5: 23:5c:7c:ef:15:62:c6:82:85:1e:d8:7b:01:78:be: ba:b4:4a:f0:f8:f3:0b:0f:97:fd:b5:65:6e:5f:c4: b2:14:3a:78:a8:f6:84:10:a8:80:15:ae:ed:1b:c5: d8:96:19:ed:f7:49:c9:5d:2a:2c:70:c8:ac:8e:43: e8:fc:a3:e1:56:dc:0f:df:8a:bf:40:55:ed:67:c6: 59:62:50:f7:51:d0:c9:09:b0:cc:ee:42:38:0b:eb: 18:4c:18:94:39:87:f3:a6:d5:36:23:24:a5:aa:62: 51:aa:5c:f4:b4:93:a2:dd:07:91:d1:34:b4:82:5c: fd:51:a1:76:95:e9:a3:77:8c:2a:20:c4:7a:73:b6: 9d:f3:7a:33:93:9d:b2:14:68:8b:de:b1:59:4a:54: 5f:5a:76:7c:8b:68:fa:95:d1:49:b3:b7:8c:09:de: 70:8e:31:8f:ab:71:38:04:7e:0b:8c:d7:e6:69:c3: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:97:D9:BA:94:F4:68:17:62:6D:16:29:F9:4A:6C:2B:BB:8F:55:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4598d2eb-7f57-4e1b-a8b0-1b8a086e722f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.220.46.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ab:ef:06:e8:ae:85:23:d7:04:a8:cd:8c:58:5b:49:02:f1: 88:ae:c8:72:13:bb:ba:91:8d:fd:cd:e2:1f:33:fa:58:38:49: 85:c8:fd:0c:e6:72:04:f3:c9:44:56:e5:b9:15:2d:36:18:51: 50:98:1c:59:47:b6:94:ff:52:61:00:25:e6:ec:12:26:83:d1: 7c:fa:ea:5b:aa:e8:2b:4d:1d:15:c8:5c:29:7b:34:29:ed:cd: 29:f7:15:94:26:61:ac:62:17:f6:37:19:17:da:8b:30:8b:f1: 23:1f:c2:f3:e2:50:b7:9a:c2:89:e5:06:e6:40:04:cc:8d:a8: 72:af:2d:c7:3e:5d:8e:a3:82:20:99:f4:6d:4f:e2:09:12:33: 8d:40:09:21:3c:c1:ca:85:59:c1:a2:46:ab:25:9c:bc:5a:70: b6:4e:dc:6f:e5:d8:f6:3f:13:7d:64:85:05:23:a0:91:a0:cf: 70:68:7e:d1:3e:3a:86:be:7f:d0:2d:f6:8d:ee:2e:25:41:d0: 7f:0d:6a:9e:1a:c3:fd:96:73:9c:bf:e6:9c:9d:8d:ee:2f:64: fc:ae:95:cb:cf:ba:ce:31:2a:fd:1f:69:01:a4:27:c2:3d:6d: 3d:93:52:f2:c4:ae:51:92:6a:ec:c4:3f:45:d0:98:75:ba:dc: 2e:47:91:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEVDrZ/D+/ZCMlNF7UofK6WuUlr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMjA0MDEwMDM3WhcNMjYwMzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTZiYzM4NjFmOGMzYjI5NDdjZGRlMjIzNDM3Y2E1ZDk0 ZDg4MGRjNTEyNmFlODgyNGUwZTA5OWM0NjI3YTNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvbcc3PH7mUuK9S9bDNZNyT+p2hzGl3xcfuxh7l9bXsC0i 0x6BuXn9Yk4YxfP/zQla3cVUYc/Kj6IRtGdOGpKeuDDhyx2Tfa3ftSNcfO8VYsaC hR7YewF4vrq0SvD48wsPl/21ZW5fxLIUOnio9oQQqIAVru0bxdiWGe33ScldKixw yKyOQ+j8o+FW3A/fir9AVe1nxlliUPdR0MkJsMzuQjgL6xhMGJQ5h/Om1TYjJKWq YlGqXPS0k6LdB5HRNLSCXP1RoXaV6aN3jCogxHpztp3zejOTnbIUaIvesVlKVF9a dnyLaPqV0Umzt4wJ3nCOMY+rcTgEfguM1+Zpw16TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgZfZupT0aBdibRYp+UpsK7uPVcYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1OThkMmViLTdmNTctNGUxYi1hOGIwLTFiOGEwODZlNzIyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACQ3C4wDQYJKoZIhvcNAQELBQADggEBAH6r7wboroUj1wSozYxYW0kC8Yiu yHITu7qRjf3N4h8z+lg4SYXI/QzmcgTzyURW5bkVLTYYUVCYHFlHtpT/UmEAJebs EiaD0Xz66luq6CtNHRXIXCl7NCntzSn3FZQmYaxiF/Y3GRfaizCL8SMfwvPiULea wonlBuZABMyNqHKvLcc+XY6jgiCZ9G1P4gkSM41ACSE8wcqFWcGiRqslnLxacLZO 3G/l2PY/E31khQUjoJGgz3BoftE+Ooa+f9At9o3uLiVB0H8Nap4aw/2Wc5y/5pyd je4vZPyulcvPus4xKv0faQGkJ8I9bT2TUvLErlGSauzEP0XQmHW63C5HkZ8= -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:08 2025 by rpki-client